Privacy stays tied to purpose.

PictoClarity processes account data, report requests, uploaded assets, access logs, investor requests, and support messages.

Invite acceptance and investor deck requests can record status in the project CRM. Optional email updates use the email address and consent choice supplied by the user.

Private report content stays inside authenticated workspaces and controlled share paths.

Data supports authentication, report processing, security, abuse prevention, analytics, and service operation.

When a user opts in, contact data supports PictoClarity product updates, investor updates, and private testing notes.

Analytics avoids personal identifiers and private report content. Cloudflare Zaraz manages consent and can route aggregate events to Google Analytics or PostHog when those tools are configured.

Cloudflare Zaraz is the consent and delivery layer for optional analytics.

PostHog may receive aggregate product events such as report creation, export, sharing, and public navigation signals.

Analytics events do not include email, token, owner name, slug, free text, private object ids, cookies, or report content.

Users can request access, profile, correction, or deletion through the project contact.

Email update consent is optional and can be withdrawn from the email unsubscribe controls or by contacting the project.

Analytics consent can be withdrawn through the site consent controls or browser settings.

Some records remain when needed for security, audit, or legal obligations.