Privacy Policy
Last updated: 4 October 2026 · Version 2026-10-04
Who we are
Floki Solutions FZCO, United Arab Emirates, operates Picit. We follow applicable data-protection laws, including UAE and Saudi personal data protection laws where they apply. Contact support@flokisolutions.com with privacy questions.
Data we collect
We collect host name and email, account information, terms acceptance, and payment status. We never collect full payment-card details; Stripe handles those. For guests we collect first name and photos. We may also collect device and browser information, IP addresses, security logs, and basic usage analytics if enabled.
Why we use data
We use data to create and run events, store and deliver albums, process payments, prevent abuse, maintain security and provide support. Photos are not sold or used in our marketing without written permission.
Legal bases
We rely on our contract with the host to provide the service, guest consent for collecting and sharing their photos, and legitimate interests for security and abuse prevention where applicable law permits. Where another legal basis or consent is required by applicable law, we use that basis or obtain consent.
Who processes data
Our hosting and database provider stores and processes event data, Stripe processes payments, and our email provider sends account and service emails. Providers receive only what is needed for their functions. We may disclose data where required by law or to protect legal rights and safety.
International transfers
Our providers may process data outside your country. Where applicable, international transfers are protected by appropriate safeguards and the requirements of applicable data-protection law.
Retention
Free photos and albums are kept for 14 days after the reveal, and paid albums for 12 months. The keep-forever add-on removes scheduled expiry while the service operates. Deleted events and photos are removed from storage. Account, consent, payment and security records may be retained as needed for legal obligations, disputes, security and support. Hosts should download photos before expiry.
Your rights
Subject to applicable law, you may request access, correction or deletion, withdraw consent, and complain to the relevant data-protection authority. Withdrawal does not affect lawful processing before withdrawal. Email support@flokisolutions.com, identifying the event and request. We may need to verify your identity. We explain any legally required retention or limitations.
Children
Hosts must be 18 or older. A host must obtain a parent’s or guardian’s agreement for guests under 18 and notify them about collection and sharing. If you believe a child’s data was collected without the required agreement, contact us so we can review and remove it where appropriate.
Security
We use reasonable technical and organisational safeguards, including private photo storage and restricted access. No system is completely secure. Keep account access and invitation links private and report suspected misuse to us.
Changes
We may update this policy as the service or law changes. The date and version identify the current policy. We will provide notice of material changes where required.
Contact
Floki Solutions FZCO, United Arab Emirates. Email support@flokisolutions.com.