Privacy Policy

1. About this policy

This policy explains how Pinglo handles personal data when you visit our website, create an account, or use the Pinglo messaging, contact management, campaign, inbox, CRM, automation, and related services. It applies to account holders, their team members, website visitors, and people whose information a customer adds to Pinglo.

For account and website information, Pinglo determines the purposes and means of processing. When a customer uploads or otherwise submits information about its customers or contacts, that customer decides why and how the information is used and is the data controller; Pinglo processes that information on the customer’s documented instructions as a data processor under the Data Processing Agreement.

2. Information we process

Depending on how the service is configured and used, this may include account names, email addresses, authentication and workspace details; contact names, phone numbers, email addresses, labels, custom fields, and sales records; message content, attachments, delivery events, and conversation history; campaign and template content, recipient lists, and performance data; automation settings and logs; integration credentials and configuration; and technical, security, and diagnostic information such as request details and error logs.

If a customer enables AI features, prompts and related conversation or knowledge content may be sent to the AI provider configured by that customer, such as OpenAI, Anthropic, or a compatible provider. Customers should review that provider’s terms and avoid submitting information they are not authorized to share.

3. How information is used

We use information to create and secure accounts; provide messaging, contact, campaign, CRM, automation, analytics, and support features; connect to WhatsApp and other integrations requested by the customer; diagnose errors and protect the service; communicate service and account updates; and comply with applicable legal obligations. We do not use customer contact lists or message content for our own advertising.

4. Service providers and sharing

Pinglo uses infrastructure and service providers needed to operate the product. Depending on a customer’s deployment and configuration, these may include Supabase for authentication, database, and file storage; Meta Platforms for WhatsApp Business messaging; and an AI provider selected by the customer. Information may also be disclosed when required by law, to protect people or the service, or as part of a business transfer. We do not sell personal data.

These providers may process data in different countries. The customer is responsible for choosing integrations and ensuring any required notices, permissions, and transfer safeguards are in place. Pinglo’s deployment and provider configuration determine where data is stored and processed.

5. Retention and security

We keep personal data for as long as needed to provide the service, maintain the account, meet legal obligations, resolve disputes, and enforce agreements. Account owners can request a workspace export or account deletion through Pinglo support; full account export and deletion are currently support-assisted rather than self-service controls. Copies in backups, security logs, or provider systems may remain for their ordinary retention cycle or where law requires retention. The customer should maintain its own retention and deletion rules for contact and message data. See Data Export & Account Deletion.

We use access controls and other technical and organisational safeguards intended to protect information. No internet service can guarantee absolute security. Customers are responsible for protecting their credentials, configuring permissions, and promptly telling Pinglo if they suspect unauthorized access.

6. Your choices and rights

Depending on applicable law, individuals may have rights to request access to, correction or deletion of, or restriction of their personal data, object to certain processing, or withdraw consent where processing is based on consent. People whose information is held in a customer workspace should first contact that business, which is responsible for responding to requests about the data it controls. Account holders may request an export or account deletion by contacting Pinglo support. You may also complain to the relevant data protection authority.

7. Children and policy changes

Pinglo is a business service and is not directed to children. We may update this policy as the service or legal requirements change. We will post the revised version here and update its effective date. Where required, we will give notice or obtain renewed agreement.

8. Contact

For privacy questions or requests, contact pinglosupport@gmail.com or message Pinglo at +254 789 336944.