Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect the following information when you use Piko Nodes: your name, email address, and authentication credentials when you create an account; media files (images, videos, audio) that you upload or generate through the Service; API keys you provide for third-party services, stored encrypted; usage data such as feature usage, session duration, and error logs to improve the Service.
2. How We Use Your Information
We use your information to provide and maintain the Service, process your media through connected APIs using your own keys, store and deliver your generated content, send account notifications (verification, subscription status, security alerts), and improve the Service through anonymized usage analytics.
3. Data Storage & Security
Your media files are stored on Cloudflare R2 with encryption at rest. API keys are encrypted before storage. Real-time collaboration data is processed through Liveblocks with end-to-end encryption. We maintain backups of your data for disaster recovery. Deleted files are retained for 30 days before permanent removal.
4. Third-Party Services
When you use AI generation features, your content is sent to the respective third-party provider (e.g., Kling AI, Google Veo, Topaz Labs, Reve AI) using your own API keys. Each provider has its own privacy policy governing how they process your data. We do not share your personal information with these providers beyond what is necessary to execute your requests.
5. Collaboration & Shared Canvases
When you collaborate on a canvas, other participants can see the content on that canvas in real time. You control who has access to your projects through the sharing settings. Collaboration data (cursor positions, node edits) is transient and not permanently stored.
6. Cookies & Analytics
We use essential cookies for authentication and session management. We may use anonymized analytics to understand how the Service is used. We do not use advertising cookies or sell your data to advertisers.
7. Your Rights
You can access, export, or delete your data at any time through your account settings. You can request a complete copy of your data by contacting us. Upon account deletion, all your data (including media, API keys, and account information) will be permanently removed within 30 days.
8. Data Retention
We retain your account data for as long as your account is active. After account cancellation, we retain your data for 30 days (grace period) before permanent deletion. Anonymized usage statistics may be retained indefinitely.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 15 days before they take effect.
10. Contact
For questions about this Privacy Policy or to exercise your data rights, contact us at [email protected].