How we handle your data.

Michael Pickman OÜ, a private limited company registered in Estonia (Sepapaja tn 6, Tallinn 15551). We act as data controller for the personal data you submit through this site.

Only what you give us: name, email, optional company and message via our contact form. We also collect anonymous server logs (IP, user agent, timestamp) for security and abuse prevention — retained 30 days.

To answer your enquiry. We do not use submissions for marketing automation, do not enrich them with third-party data and do not share them with any party outside our delivery team.

Inside the EU. Our database is hosted on Supabase (EU region), our marketing site on Lovable / Vercel (EU edge), and our office email on Google Workspace (EU data residency).

Form submissions: up to 24 months after our last interaction, then deleted. Server logs: 30 days. You can request earlier deletion at any time by emailing dpo@michaelpickman.com.

If you connect an Instagram or Facebook account to our dashboard, you authorise us — through Meta’s official APIs (Instagram Graph API and Facebook Login) — to access only the data needed to run the service: your Instagram Business/Creator profile details, your media and their captions, aggregated insights and analytics (reach, impressions, engagement, follower demographics), and the ability to publish or schedule posts to your account on your behalf. We use this data solely to power your analytics dashboard and to create and publish content that you explicitly approve. We never post without your instruction, never sell or rent Meta data, and never use it for advertising or to build profiles. Access tokens are stored encrypted and can be revoked by you at any time from your Instagram/Facebook settings or by disconnecting the account in our dashboard. Our handling of Meta data complies with the Meta Platform Terms and the Meta Developer Policies.

You can ask us to delete your data at any time — including everything we hold about your company, your contact submissions, and any Instagram/Facebook data obtained through Meta’s APIs. Email dpo@michaelpickman.com with the subject “Data deletion” and the account or company name concerned. We verify the request, erase the associated records and access tokens from our systems (and instruct our processors to do the same), and confirm completion within 30 days. Disconnecting your Instagram/Facebook account from our dashboard also triggers deletion of the Meta data linked to that connection.

Access, rectification, erasure, restriction, portability, objection. Email dpo@michaelpickman.com and we respond within 30 days. Complaints can also be filed with the Estonian Data Protection Inspectorate (aki.ee).

This site uses no third-party tracking cookies. We do use a single first-party cookie to remember your language preference if you set it manually.