Privacy Policy

• Account & Profile: name, email, authentication identifiers, role (provider/contractor/admin), company, phone, notification preferences.
• Provider Financial: Stripe Connect account IDs, payout details, wallet balance & transactions (no full card/bank numbers stored on our servers).
• Marketplace Activity: listings you create/buy (job type, service area ID, ZIP/postal, appointment date/time, private notes), purchase history, disputes & support tickets, selected service areas.
• Communications: support and dispute messages.
• Device/Usage: IP, browser/device, pages viewed, timestamps, logs for security and performance.
• Location & Address Inputs: addresses you enter via Google Places Autocomplete and parsed components (e.g., ZIP).

Sources: you (forms/CSV), cookies/SDKs, processors (Stripe, Google Maps), and infrastructure.

Contractors can optionally connect a Google account so purchased appointments are copied into their calendar. When you authorize this integration we request the https://www.googleapis.com/auth/calendar.events scope. This grants Pikalead permission to create, update, or delete events that we originally wrote on your behalf.

• Data received from Google: OAuth tokens, granted scopes, token expiry, and the email address associated with the authorized Google account. We do not download the rest of your calendar contents.
• Data we send to Google: appointment title, job notes, client name, phone number, service address, and scheduled time (including timezone) for the purchased appointment.
• Use of data: tokens are stored securely and used only to keep your Pikalead appointments in sync. We do not sell, rent, or use this data for advertising.
• Revoking access: you can disconnect at any time from Pikalead or the Google security settings page. We delete your stored tokens when you disconnect.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Provide and improve the Service and core features.
• Process payments and provider payouts via Stripe.
• Security, fraud prevention, and legal compliance.
• Transactional communications; optional marketing if opted in.
• Analytics and product development.

• Contract (Art. 6(1)(b)) to provide the Service.
• Legitimate interests (Art. 6(1)(f)) for safety and improvement.
• Consent (Art. 6(1)(a)) for optional cookies/marketing.
• Legal obligation (Art. 6(1)(c)) for tax/bookkeeping.

• Processors/Infra:hosting, email/SMS providers bound by DPAs.
• Payments: Stripe (customer & Connect IDs, events).
• Maps: Google Maps Autocomplete (address inputs).
• Compliance & safety: regulators/law enforcement when legally required.
• Business transfers: during a merger/acquisition.

• Account data: for the life of your account.
• Transactions/payouts: typically 7–10 years (by law).
• Support/disputes: case life + ~3 years.
• Logs: ~90–365 days unless needed longer for security/legal reasons.