Back to home
Pickr Draw

Privacy Policy

Last updated: June 19, 2026

1. Introduction

Pickr Draw ("we", "us", "our") operates the website at giveawaypicker.com and the Pickr Draw Chrome extension. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and authentication credentials. If you sign in via Google or Facebook, we receive your name, email, and profile picture from those providers.

Giveaway Data

When you create a giveaway, we store the giveaway title, post URL, entry rules, imported comments (usernames and comment text), calculated entries, and drawn winners.

Instagram & Facebook Data

If you connect your Instagram Business or Creator account, we access your public profile information, media (posts), and comments on your posts through the Instagram Graph API. We use this data solely to import comments for your giveaways and to verify entry rules (likes, follows). We do not access your direct messages, stories, or private content.

If you use our Chrome extension, it reads comment data from Instagram or Facebook post pages you are viewing in your own authenticated browser session. This data is sent to our servers only when you explicitly click "Send to Pickr Draw."

Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers, bank account details, or other financial information. We store your Stripe customer ID to manage your subscription.

Usage Data

We collect standard usage data such as browser type, device information, pages visited, and actions taken within the app to improve our service.

3. How We Use Your Information

  • To provide and maintain our service
  • To process your giveaways — parsing comments, calculating entries, and selecting winners
  • To verify giveaway entry rules (likes, follows) when you connect your Instagram account
  • To process payments and manage your subscription
  • To send transactional emails (winner notifications, giveaway summaries, account confirmations)
  • To improve and optimize our service
  • To respond to support requests

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Supabase — database and authentication provider
  • Stripe — payment processing
  • Resend — transactional email delivery
  • Vercel — application hosting
  • Meta (Facebook/Instagram) — only when you connect your account via OAuth, and only the minimum data needed to fetch comments and verify entry rules

When you make a giveaway public, the winner username(s) and giveaway title are visible to anyone with the share link.

5. Data Retention

We retain your account data for as long as your account is active. Giveaway data (comments, entries, winners) is retained until you delete it. Deleted giveaways and scrapes are kept for 30 days before permanent deletion.

If you delete your account, all associated data (giveaways, entries, winners, scrapes) is permanently deleted within 30 days.

6. Instagram & Facebook Data Handling

When you connect your Instagram or Facebook account through our app:

  • We only access data you explicitly authorize through Meta's OAuth consent screen
  • We use comment and engagement data solely for giveaway entry processing
  • We do not store Instagram/Facebook data beyond what is needed for your giveaways
  • You can disconnect your account at any time from your Account settings
  • Upon disconnection, we delete your stored access tokens immediately

7. Your Rights

You have the right to:

  • Access and download your data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Disconnect third-party accounts (Google, Facebook, Instagram)
  • Opt out of non-essential emails

To exercise these rights, contact us at support@giveawaypicker.com.

8. Data Deletion

You can request deletion of your data at any time by contacting us at support@giveawaypicker.com or by deleting your account from the Account settings page. For Facebook/Instagram data deletion requests, you can also use our data deletion callback.

9. Security

We use industry-standard security measures including encryption in transit (TLS), row-level security on our database, and secure authentication via Supabase. However, no method of electronic storage is 100% secure.

10. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect data from children under 13.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on our website.

12. Contact Us

If you have questions about this Privacy Policy, contact us at support@giveawaypicker.com.