Privacy
Who we are
Piku is a product of Sirius Arc. Sirius Arc decides how the data in Piku is used and is responsible for it. Write to us at hello@usepiku.com about anything on this page.
What we collect
- Your account: your email address, your name and your Piku handle. If you sign in with a code by SMS, where we offer it, your phone number.
- Your page and business: your bio, photo, links, widgets, Rates, the audience numbers you type into your media kit, portfolio photos and videos, and the business details you add (name, address, email, phone, tax number, website). If you add a website, we read its public title, description and images to show it on your page.
- Your clients: the names, emails and phone numbers you enter on Deals, quotes, invoices and receipts, the Lines and amounts, and replies your clients send to a Deal by email.
- Requests from brands: the brand's name, contact email and brief, sent from your page or by an agent.
- Payments: payments run on Bachs' own checkout, so we never see full card or mobile money details. We keep the payer's email, the amount, the method, the fees and the payment record Bachs sends us. If you use the wallet, we keep your Bachs account id, whether your identity check passed, and a short summary of your payout method (its type, network, last four digits and name). Bachs, not Piku, collects identity documents.
- How Piku is used: page views (where the visit came from, and the country and city Cloudflare gives us), link clicks and QR scans (country, city and device type), and which features are used, with a random id for the browser session. We do not keep visitors' IP addresses. To stop abuse, we keep a one-way hash of an IP address, phone number or email for a day.
- Errors: when something breaks, the error, the page and, if you were signed in, your account id.
How we use it
- To run your page, Rates, Deals, invoices, receipts and payments, and to send the emails and texts that go with them (sign-in codes, quotes, invoices, receipts, payment reminders, notices about your plan).
- To keep Piku safe: sign-in limits, rate limits on agents and forms, and a bot check on request forms (Cloudflare Turnstile).
- To show you your own numbers (views, clicks, scans) and to improve Piku from usage counts.
- To measure our own ads, only as described under Cookies.
We do not sell your data, and we do not use your page, clients, Deals or invoices to train AI models.
What is public
Your page is public: anyone, including search engines and AI agents, can read it at usepiku.com/your-handle and in its JSON and Markdown versions. That covers your name, bio, photo, links, location, niches, audience numbers and Rates. Prices follow the visibility you choose for each Rate. Agents can find live pages through search on Piku. Your clients, Deals, invoices and business details are never public, except the business details printed on a quote, invoice or receipt you send.
Apps you connect, such as Claude
You can connect an app such as Claude to your Piku account. You choose what it may do on Piku's own consent page:
- Read your Deals and Invoices (billing:read)
- Write Drafts of quotes and invoices (billing:draft). A Draft sends nothing.
- Send a Draft after you confirm it in the chat (billing:send). You can untick this.
- See your page (page:read)
- Prepare page designs you apply yourself (page:design). Nothing on your live page changes until you apply it.
A connected app never sees your password. It gets an access token that lasts 1 hour and a refresh token that changes on every use and lapses after 30 days unused. We store only one-way hashes of these tokens. No app can accept a quote, mark an invoice paid or move money. You can disconnect an app any time in Settings > Agents, and deleting your account disconnects them all.
What an app reads from Piku is then handled by that app's maker under their own privacy policy (for Claude, Anthropic's).
Agents without an account can read public pages and send a brand's request. A request reaches you only after the brand confirms it from their email.
How long we keep it, and deleting your account
You can delete your account in Settings > Advanced. Your page goes offline at once and the account is held for 90 days, so you can restore it by signing in. After 90 days it is erased: your page, links, Rates, media, clients, unpaid quotes and invoices, Drafts, connected apps, page views and clicks are deleted, and so is your sign-in.
We keep paid invoices, receipts and payment records after that, because accounting and tax rules need them. On these we remove what we can: your account is renamed Deleted account and payer emails are cleared. The business details printed on a paid invoice or receipt stay on it.
Unsent Drafts expire after 14 days. Spent sign-in links and tokens are cleared within a day. Usage counts and error logs are kept to run and improve Piku.
Your choices and rights
You can see and change most of your data in Piku, and export your Deals, invoices and receipts as CSV. To get a copy of everything, correct something, delete it, or object to how we use it, write to hello@usepiku.com. We answer within 30 days. Depending on where you live, you may also complain to your data protection authority.
Piku is not meant for children under 16.
Changes
If we change this page in a way that matters, we will say so on Piku or by email before it applies.
Last updated 22 October 2026