Privacy Policy
Data controller: LaneSquare Technology Pvt. Ltd (“Pickcel”, “we”, “us”, “our”)
Registered office: #918, 3rd Floor, 5th Main Road, Sector 7, HSR Layout, Bengaluru, Karnataka, India 560102
Effective date: August 7, 2026 · Last updated: August 3, 2026 · Version: v3.0
This Privacy Policy explains how Pickcel collects, uses, shares, and protects personal data in connection with our website (pickcel.com), the Pickcel digital-signage platform, and our player/device applications (the “Service”). It applies to visitors, account holders, Users, Resellers, and Partners.
1. Our two roles: controller vs processor
- Controller. We act as a data controller for personal data about our website visitors, account holders, and Users that we collect to provide, secure, bill, support, and market the Service (e.g., name, email, organization, account and usage data). This Policy governs that processing.
- Processor. When you use the Service to upload or display content, or to manage screens, we may process personal data contained in your Customer Data on your behalf — here you are the controller and we are the processor. That processing is governed by our Data Processing Addendum and your instructions, not by this Policy. You are responsible for the lawful basis, notices, and consents for that data.
2. Personal data we collect, purposes, and legal bases (as controller)
| Category | Examples | Purpose | Legal basis (GDPR/UK GDPR) |
|---|---|---|---|
| Account & identity | First/last name, email, password (hashed), organization name, role | Create and administer your account; authenticate | Performance of a contract |
| Billing | Billing contact, address, tax IDs, transaction records (card data handled by our payment processor) | Invoicing, payments, tax/accounting | Contract; legal obligation |
| Usage & device | Log-in data, IP address, browser/device type, pages/response times, feature usage, player diagnostics | Provide, secure, and improve the Service; troubleshoot | Legitimate interests (secure, improve Service) |
| Support | Correspondence, tickets | Provide support | Contract; legitimate interests |
| Trial telemetry | Console activity during trial (excludes credentials and brand/identity-revealing content) | Product quality audit during trial only | Legitimate interests |
| Marketing | Email, marketing preferences | Send updates and offers; measure campaigns | Consent (where required) / legitimate interests |
| Cookies & similar | See Cookie Policy | Site functionality, analytics, advertising | Consent for non-essential; legitimate interests/necessity for essential |
We collect data directly from you (registration, forms, correspondence, use of the Service) and automatically (cookies, logs, analytics, player telemetry). Where we rely on consent, you may withdraw it at any time (§7). Where we rely on legitimate interests, you may object (§7).
Trial telemetry. During a free trial we may record product-usage activity within the Pickcel console for quality audit. This excludes login credentials and any activity or scene that could reveal your brand strategy, internal communications, or individual identities. It stops when you upgrade to a paid plan, after which your console activity is private to you.
3. How we use personal data
We do not sell personal data (see §10 for CCPA/CPRA specifics).
- provide, operate, maintain, and secure the Service;
- authenticate users and prevent fraud, abuse, and security incidents;
- process payments and manage your subscription;
- respond to requests and provide support;
- send service/administrative messages and, where permitted, marketing;
- analyze usage to improve and develop the Service (using aggregated/de-identified data where feasible);
- comply with legal obligations and enforce our Terms.
4. Cookies and similar technologies
We use essential, analytics, and advertising cookies and web beacons as described in the Cookie Policy. Non-essential cookies are set only with your consent via our cookie banner, and you can change your choices at any time.
5. Sharing and disclosure
We share personal data with:
- Sub-processors / service providers who help us run the Service (hosting, payments, email, analytics, support/CRM, CDN) under contract and confidentiality — see the Sub-processor list;
- Professional advisers and authorities where required to comply with law, respond to lawful requests, enforce our Terms, or protect rights, property, and safety;
- Business transfers — in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred, subject to this Policy.
We require providers to protect personal data and use it only for the services they provide to us.
6. International data transfers
Our systems and some sub-processors are located in India and other countries. Where we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards, including the EU Standard Contractual Clauses (2021/914) and the UK Addendum to the EU Standard Contractual Clauses, together with any supplementary measures. You may request a copy of the relevant safeguards at dpo@pickcel.com.
(We no longer rely solely on your consent to the transfer of data to India; a valid Article 46 mechanism applies where required.)
7. Your rights
Depending on where you are, you may have some or all of the following rights. To exercise them, contact dpo@pickcel.com; we will respond within the time required by law (generally 30 days). You may also lodge a complaint with your supervisory authority.
EU / UK / Swiss (GDPR): access; rectification; erasure; restriction; data portability; objection (including to direct marketing and to processing based on legitimate interests); withdraw consent; not be subject to solely automated decisions with legal/significant effects (we do not carry out such decision-making).
California (CCPA/CPRA): see §10.
India (DPDP Act 2023): access to and a summary of your personal data; correction, completion, updating, and erasure; grievance redressal; and to nominate another person to exercise your rights in the event of death or incapacity. Contact our Grievance Officer (§13).
We will not discriminate against you for exercising your rights.
8. Withdrawal of Consent
You have the right to withdraw your consent for the collection, use, or disclosure of your personal information at any time. To do so contact us at dpo@pickcel.com with your request. Once we receive your request, we will process it promptly. Please note that withdrawal of consent may affect our ability to provide certain services or features.
9. Retention
We keep personal data only as long as needed for the purposes above and to meet legal, tax, and accounting requirements.
- User-generated data from inactive or deleted accounts is retained for one (1) year, then automatically deleted, unless a longer period is required by law or contract (archival), in which case we protect it appropriately.
- On a valid deletion request, we remove your personal data within 30 days, subject to legal retention exceptions.
- We maintain secure, offsite backups for disaster recovery; residual copies in backups are deleted on our backup rotation cycle.
10. California privacy (CCPA/CPRA)
If you are a California resident:
- Categories collected in the last 12 months: identifiers (name, email, IP), commercial information (subscription/transactions), internet activity (usage/log data), and professional/employment information (organization, role). Sources and purposes are described in §2–§3.
- Sale / sharing. We do not sell your personal information and do not share it for cross-context behavioral advertising in a way that requires an opt-out.
- Rights: to know, access, correct, delete, and opt out of sale/sharing, and to limit use of sensitive personal information, without discrimination. Submit requests to dpo@pickcel.com; we verify requests and permit authorized-agent submissions.
11. Security
We implement reasonable and appropriate technical and organizational measures to protect personal data, and maintain a security program aligned with SOC 2 and ISO/IEC 27001. Measures may include encryption in transit (TLS), access controls, and monitoring. No method of transmission or storage is completely secure; you acknowledge residual risk.
12. Personal-data breach notification
If we become aware of a personal-data breach affecting your data, we will notify the relevant authorities and, where required, affected individuals and controllers, without undue delay and consistent with applicable law (e.g., GDPR Art. 33/34; DPDP; and, for processor scenarios, the timelines in the DPA).
13. Grievance Officer (India DPDP) and privacy contacts
- Grievance Officer (India): Vijendra Jayarama, dpo@pickcel.com, LaneSquare Technology Pvt. Ltd, Bengaluru.
- Privacy / Data Protection contact: dpo@pickcel.com.
14. Children
The Service is intended for business use and for individuals 18 years or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact us and we will delete it.
15. Third-party links
The Service may link to third-party sites we do not control. We are not responsible for their content or practices. Review their policies before providing information.
16. Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify registered users by email and/or in-app. Continued use after the effective date constitutes acceptance where permitted by law.
17. How to contact us
Questions or requests: dpo@pickcel.com · LaneSquare Technology Pvt. Ltd, #918, 3rd Floor, 5th Main Road, Sector 7, HSR Layout, Bengaluru, Karnataka, India 560102.