Privacy Policy

Last Updated: September 2026

This Privacy Policy describes how Picropharm ("Picropharm," "we," "us," or "our") collects, uses, discloses, and protects information collected from users ("you" or "User") of the picropharm.org website located at picropharm.org (the "Site") and our associated Software-as-a-Service (SaaS) platform (collectively, the "Services"). This Privacy Policy applies to all Users of the Services, including visitors, registered users, account holders, and authorized users within customer organizations.

By accessing, browsing, registering for, or using the Services in any manner, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you should not access or use the Services. This Privacy Policy is incorporated into and governed by our Terms and Conditions, which set forth the full agreement governing your use of the Services.

Picropharm is committed to protecting your privacy and complying with applicable federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"), and other state privacy laws where applicable. This Privacy Policy is designed to comply with the requirements of those laws and to provide you with clear information about your privacy rights and how to exercise them.

1. Information We Collect

We collect several categories of information from and about Users of the Services. The categories of personal information we collect depend on how you interact with the Services, the features you use, and the information you choose to provide. We collect information directly from you, automatically through your use of the Services, and from third parties.

1.1 Information You Provide Directly

When you register for an account, subscribe to the Services, contact us, or otherwise interact with the Services, we may collect the following types of information:

• Account Information: Your name, email address, username, password, job title, company name, and other profile details necessary to create and manage your account.
• Customer Organization Information: Information about your organization, including company size, industry, billing address, and authorized user details provided by your organization's administrator.
• Communication Data: Information contained in communications you send to us, including emails, support tickets, feedback, and other messages.
• Payment Information: Billing address, credit card number, expiration date, and other payment details. We do not store full payment card numbers on our servers; payment processing is handled by our third-party payment processors in accordance with their security standards.

1.2 Information Collected Automatically

When you access and use the Services, we automatically collect certain technical and usage information about your device, browsing actions, and patterns. This information includes:

• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage Data: Information about how you use the Services, including pages visited, time spent on pages, features accessed, clickstream data, search queries, and other interaction data.
• Log Data: Server log information, including access times, access errors, and other statistics collected through server logs and analytics tools.

1.3 Information Collected from Third Parties

We may receive information about you from third parties, including our business partners, service providers, and affiliates. For example, if your organization's administrator provisions your account, we may receive your name, email address, and role information from that administrator. We may also receive information from third-party analytics providers, advertising networks, and social media platforms if you interact with those services in connection with the Services.

We do not collect categories of personal information beyond what is described in this Privacy Policy. If we intend to collect additional categories of personal information in the future, we will update this Privacy Policy and, where required by law, provide you with notice and an opportunity to exercise applicable rights.

2. How We Use Your Information

Picropharm uses the information we collect for various business and commercial purposes, including providing the Services, communicating with you, ensuring security, complying with legal obligations, and improving our offerings. The specific purposes for which we use your information are described below.

2.1 Providing and Maintaining the Services

We use your personal information to create and manage your account, authenticate your identity, provide access to the SaaS platform features, process transactions, maintain service quality, and provide technical support. This includes using your account information to personalize your experience, display relevant content, and enable collaboration features within your organization.

2.2 Communication and Support

We use your contact information to respond to your inquiries, provide customer support, send important notices about the Services (such as security alerts and policy updates), and deliver administrative messages. We may also send you product updates, newsletters, and marketing communications, but only where you have not opted out of receiving such communications or where otherwise permitted by law.

2.3 Security, Compliance, and Legal

We use your information to monitor and protect the security of the Services, detect, prevent, and respond to fraud, unauthorized access, and other security incidents. We also use your information to comply with our legal obligations, enforce our agreements and policies, respond to legal requests, and protect our rights, property, and safety, as well as those of our Users and others.

2.4 Improvement and Analytics

We use aggregated and de-identified information to analyze usage trends, measure the effectiveness of our Services, understand how Users interact with features, and improve the functionality, performance, and user experience of the Services. We may also use your information to develop new features, products, and services.

2.5 Business Operations

We use your information for internal business purposes, including financial reporting, audit, corporate governance, and managing our relationship with you and your organization. In connection with any business transition, such as a merger, acquisition, or asset sale, we may use and disclose your information as described in the "Information Sharing" section below.

3. Information Sharing

Picropharm does not sell your personal information for monetary consideration. However, we may share your personal information with third parties for the business purposes described in this Privacy Policy, and such sharing may constitute a "share" or "sale" under the CCPA/CPRA. The categories of third parties with whom we may share your information are described below.

3.1 Service Providers and Processors

We share personal information with service providers, vendors, and contractors who perform services on our behalf or enable us to provide the Services. These include cloud hosting providers, payment processors, analytics providers, email and communication service providers, customer support platforms, and security monitoring services. These service providers are contractually obligated to process personal information only on our behalf and in accordance with applicable privacy laws.

3.2 Business Partners and Affiliates

We may share information with our affiliates, subsidiaries, and parent company, as well as with business partners in connection with joint offerings, integrations, or co-branded services. When you use an integration or third-party service in connection with the Services, information may be shared with that third party in accordance with their privacy policy.

3.3 Legal and Compliance Disclosures

We may disclose personal information when required by law, court order, or government regulation, or when we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others. This includes disclosures to law enforcement, regulatory authorities, and other governmental agencies, as well as disclosures in connection with legal proceedings.

3.4 Business Transfers

In connection with any merger, acquisition, reorganization, bankruptcy, dissolution, or other sale or transfer of some or all of Picropharm's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, personal information may be among the assets transferred. We will provide notice of such a transfer if required by law, and the recipient will be obligated to continue protecting your personal information in accordance with this Privacy Policy.

3.5 With Your Consent

We may share personal information with third parties when you provide consent or otherwise direct us to do so. You may withdraw your consent at any time by contacting us using the information provided in the "Contact Information" section, though withdrawal of consent will not affect the legality of processing that occurred prior to withdrawal.

4. Cookies and Tracking

picropharm.org uses cookies, web beacons, pixels, and similar tracking technologies to collect and store information about your interactions with the Services. Cookies are small text files placed on your device when you visit a website. They help us recognize you, remember your preferences, and analyze how the Services are used. For a detailed description of the specific cookies and tracking technologies we use, please review our Cookie Policy.

4.1 Types of Cookies We Use

We use several categories of cookies, including essential cookies that are necessary for the Services to function properly, performance and analytics cookies that help us understand how Users interact with the Services, functionality cookies that remember your preferences and settings, and targeting or advertising cookies that may be used to deliver relevant content and advertisements. We do not require prior consent to set cookies, as we operate under an opt-out model in accordance with CCPA/CPRA requirements.

4.2 Third-Party Tracking

We allow certain third parties, including analytics providers and advertising partners, to set cookies and similar tracking technologies on the Services. These third parties may use such technologies to collect information about your online activities over time and across different websites. We do not control these third parties' tracking technologies or how they may use the information collected, and their use of such information is governed by their respective privacy policies.

4.3 Your Cookie Choices

You have several options for managing cookies and tracking technologies. Most web browsers allow you to control cookies through their settings, including accepting, blocking, or deleting cookies. You can also opt out of certain tracking and targeted advertising by using the opt-out tools provided by the Digital Advertising Alliance, the Network Advertising Initiative, or the browser-based "Do Not Track" signals. Under the CCPA/CPRA, you have the right to opt out of the "sale" or "sharing" of your personal information, which may include certain cookie-based tracking activities. To exercise this right, please use the "Do Not Sell or Share My Personal Information" link provided on the Services or contact us as described in the "Contact Information" section.

5. Your Rights and Choices

Depending on your state of residence, you may have certain rights regarding your personal information under applicable state privacy laws, including the CCPA/CPRA. This section describes those rights and how you may exercise them. We will not discriminate against you for exercising any of these rights, except as permitted by applicable law.

5.1 Right to Know and Access

Under the CCPA/CPRA and other state privacy laws, you have the right to request that we disclose the categories of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, the categories of third parties with whom we have shared the information, and the specific pieces of personal information we have collected about you. To exercise this right, you may submit a verifiable consumer request by contacting us using the information provided in the "Contact Information" section.

5.2 Right to Delete

You have the right to request that we delete personal information we have collected from you or maintained about you, subject to certain exceptions. These exceptions include information necessary to complete transactions, detect security incidents, exercise free speech, comply with legal obligations, engage in scientific or historical research, or enable internal uses reasonably aligned with your expectations. To exercise this right, please contact us as described in the "Contact Information" section, and we will process your request in accordance with applicable law.

5.3 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, you have the right to direct us not to "sell" or "share" your personal information. As described in this Privacy Policy, we do not sell your personal information for monetary consideration. However, certain sharing of personal information with third parties for business purposes may constitute a "sale" or "share" under the CCPA/CPRA. To opt out of such sale or sharing, please use the "Do Not Sell or Share My Personal Information" link on the Services or contact us as described in the "Contact Information" section.

5.4 Right to Limit Use of Sensitive Personal Information

Under the CCPA/CPRA, you have the right to limit our use and disclosure of your sensitive personal information to what is necessary to perform the Services or provide the features reasonably expected by you. If we collect sensitive personal information, we will limit its use and disclosure in accordance with applicable law.

5.5 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, suggest that you will receive a different level of service, or provide a different level of service because you exercised any of your rights under the CCPA/CPRA or other applicable state privacy laws.

5.6 Right to Correct and Authorized Agent

You have the right to request correction of inaccurate personal information we maintain about you. Additionally, you may authorize an agent to submit requests on your behalf, provided that we can verify the agent's authority and identity in accordance with applicable law.

5.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using the information provided in the "Contact Information" section. We will verify your identity before processing your request, and we will respond to your request within the timeframes required by applicable law. If we are unable to honor your request, we will provide an explanation of the reasons for denial.

6. Data Security

Picropharm takes reasonable and appropriate measures designed to protect personal information from unauthorized access, alteration, disclosure, or destruction. These measures include physical, technical, and administrative safeguards, such as encryption of data in transit and at rest, access controls, regular security assessments, employee training, and incident response procedures. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security of your personal information.

We maintain a comprehensive information security program designed to protect the confidentiality, integrity, and availability of personal information. Access to personal information is restricted to authorized personnel who have a legitimate business need to access such information. We regularly review and update our security practices and conduct periodic risk assessments to identify and address potential vulnerabilities.

In the event of a data breach or security incident affecting your personal information, we will take steps to investigate, contain, and remediate the incident, and we will notify affected Users and relevant authorities as required by applicable law. We will provide such notice in a manner consistent with applicable state breach notification requirements, which may include describing the nature of the incident, the categories of information involved, and the steps you can take to protect yourself.

You also play a role in maintaining the security of your personal information. We encourage you to use strong passwords, keep your login credentials confidential, log out of your account after each session, and promptly notify us of any suspected unauthorized access or security incident by contacting us at [email protected].

7. International Data Transfers

Picropharm is based in the United States, and the Services are hosted on servers located in the United States. If you access the Services from outside the United States, you should be aware that your personal information will be transferred to, stored, and processed in the United States. By using the Services, you consent to the transfer, storage, and processing of your personal information in the United States, where data protection laws may differ from those in your jurisdiction.

We may also share personal information with service providers and affiliates located in other countries. When we do so, we take steps designed to ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your personal information. These safeguards may include contractual commitments, such as standard contractual clauses or other transfer mechanisms recognized under applicable law.

If you have questions about international data transfers or the safeguards we have implemented, please contact us using the information provided in the "Contact Information" section. We will provide additional information about the legal basis for such transfers and the measures we have taken to protect your personal information during international transfers.

8. Children's Privacy

The Services are intended for use by businesses and professionals, and are not directed to children under the age of 16 (or the minimum age required for consent under applicable state law). We do not knowingly collect personal information from children under 16 years of age. If we learn that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information as soon as practicable.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected] with the details of the situation. We will investigate and take appropriate action to remove the information and prevent further collection, in accordance with applicable laws, including the Children's Online Privacy Protection Act (COPPA) where applicable.

Organizations using the Services are responsible for ensuring that authorized users within their organization meet the minimum age requirements. Picropharm may, at its discretion, require verification of age or parental consent before allowing access to certain features of the Services.

9. Changes to Policy

Picropharm reserves the right to update or modify this Privacy Policy at any time, in our sole discretion, to reflect changes in our practices, legal requirements, or operational needs. When we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page and, where required by law, provide notice of such changes through the Services or by other reasonable means.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of the Services after any changes to this Privacy Policy become effective constitutes your acknowledgment and acceptance of the updated Privacy Policy. If you do not agree with the revised Privacy Policy, you should discontinue use of the Services.

If we make material changes that significantly expand our ability to use or share your personal information, we will provide additional notice, such as by sending an email to the address associated with your account or displaying a prominent notice on the Services. Where required by law, we will obtain your consent before implementing such changes.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using the information below:

• Company: Picropharm
• Email: [email protected]
• Phone: +18285550109
• Address: 60 North Market Street, Suite 205, Asheville, NC 28801

For privacy rights requests under the CCPA/CPRA or other applicable state privacy laws, please submit your request through the contact methods listed above. We will process your request in accordance with applicable law and respond within the required timeframes. To protect your privacy and security, we will take reasonable steps to verify your identity before processing any request related to your personal information.

Our designated privacy contact is available to assist you with any questions about this Privacy Policy, your rights, or our data practices. We are committed to resolving your concerns promptly and transparently, and we value your feedback as we continue to improve our privacy program and the Services we provide.