This policy explains what personal information Pikapi handles, why, and what you can do about it. It covers two groups of people: sellers, who build stores on Pikapi, and shoppers, who order from those stores. Pikapi is run by Code Next Door ("we", "us").
The short version
- We collect what is needed to run stores and take orders, and nothing for advertising.
- There are no ads, no analytics and no tracking cookies on Pikapi.
- We don't sell personal information.
- A shopper's order details are for the store they ordered from. We store them for that store.
- Pikapi doesn't send emails or text messages.
Information about sellers
What we collect
- From Google, when you sign in: your email address, whether Google has verified it, and your Google account ID (a number that identifies your Google account). We don't receive your Google password, and we don't get access to your Gmail, contacts or files.
- What you type when you sign up: your name, your store's name, a contact phone number and your store's address on pikapi.shop. If you start signing up but don't finish, these details are kept only in your session and expire with it.
- What you add to your store: products, prices, photos, pages, delivery prices and theme choices.
- How you use the dashboard: your choice of light or dark mode, and a record of the order updates you make (for example, marking an order shipped), saved with your account.
Why
To create your account and store, sign you in, show your store to shoppers, keep a history of each order, contact you about your account, and keep Pikapi secure.
Information about shoppers
What we collect
- At checkout: your name, phone number, district, delivery area (if the store uses them) and address, plus a landmark and an order note if you add them. Checkout doesn't ask for an email address, an account or any payment details: you pay the store in cash when the order arrives.
- Your order: what you ordered, the prices, the delivery charge, the total, and the order's progress.
- Your customer record: the store keeps your name, phone number, address, district and landmark as a customer record, and recognises your next order by your phone number.
- Your cart: the items in your cart are kept in your session until you check out or the session expires.
Every order gets a private tracking link. It shows the order number, its progress and the items, but not your name, phone number or address. Anyone who has the link can open it, so share it with care.
The store decides how your details are used
The store you order from decides what to do with your details: it sees them in its dashboard so it can deliver your order and contact you about it. Pikapi stores and processes your details for that store. We don't use them for our own purposes, except to keep Pikapi running and secure. Each store is responsible for how it uses its customers' details.
Information from every visit
- Sessions. While you use Pikapi, our servers keep a session: what's needed to keep you signed in, remember your cart and checkout, and remember which orders you placed from this browser. It can include your internet (IP) address and the type of browser you use. A session expires after 2 hours without activity.
- Limits against abuse. To stop abuse, we count requests for a short time, by IP address or, for signed-in sellers, by account: for example, how many orders one address places in a minute. Checkout also counts by a scrambled form of the phone number, never the number itself. Most counts last a minute; a store's count of image uploads lasts a day.
- Technical logs. Our hosting providers record requests to run and protect the service, such as your IP address, the page asked for, the time and your browser type. Our own error logs can include details of a request that went wrong.
The examples on our home page run in your browser and send nothing to us.
Who can see it
- The people who run the store see its orders and customer records in its dashboard: today that is the store's owner, and later anyone the owner adds to the store's team. Each store's information is kept apart from every other store's, so one store can't see another's orders or customers.
- Code Next Door: the few people who run Pikapi can reach the database and stored files when needed to run, support, secure or fix the service, or when the law requires it.
How long we keep it
- Seller accounts and stores are kept while you use Pikapi.
- Orders and customer records are kept for as long as the store exists. Sellers can't delete them from the dashboard today.
- Sessions expire after 2 hours without activity. Abuse counts last a minute, or a day for a store's image uploads.
- Logs are kept for a limited time set by our hosting providers.
There is no automatic deletion schedule for orders or accounts yet.
Seeing, correcting or deleting it
Sellers: you can see and change your store's products, pages, theme and delivery prices in the dashboard. For a copy of your information, to correct details you can't change yourself, or to close your store or account, write to support@pikapi.shop from the email address of the Google account you sign in with. We will reply and tell you what we can do, what we have changed or deleted, and anything we have to keep.
Shoppers: your order details are held for the store you ordered from, so please contact that store first. If you can't reach the store, or would rather ask us, write to support@pikapi.shop with the store's address and your order number, and we will help where we can.
Security
Every page is served over an encrypted connection (HTTPS). Each store's information is kept separate in the app and the database, sellers sign in with Google rather than a password kept by us, and we limit how many requests can be made in a short time. No service is perfectly secure, and we can't promise that information will never be seen by someone who shouldn't see it. If we learn that a store's information has been exposed, we will tell that store's owner.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change matters to sellers, we will tell them before it takes effect, using the contact details on their account.
Contact us
Questions about this page, or a request about your information: write to support@pikapi.shop. Pikapi is run by Code Next Door.