Privacy Policy

Pingly is a B2B SaaS platform that enables businesses ("Workspace Administrators" or "Customers") to manage customer communications over WhatsApp and Web Chat. We act as a data processor on behalf of our customers when processing their end-users' personal data, and as a data controller for our own operational data (such as account and billing information).

This policy applies to:

• Visitors to pingly.in
• Registered users (Admins, Managers, Agents) of the Pingly platform
• End-customers ("Contacts") whose data is processed through Pingly by our business customers

We use collected information to:

We do not use your data or your end-customers' data for advertising or sell it to third parties.

We do not sell, rent, or trade personal information. We may share data only in the following limited circumstances:

Pingly integrates with third-party APIs. When you enable these integrations, data may be transmitted to those services according to their own privacy policies:

• Gupshup: gupshup.io/privacy-policy
• Anthropic: anthropic.com/privacy
• OpenAI: openai.com/policies/privacy-policy

Important: AI providers (Anthropic, OpenAI) may process message content when the AI agent feature is enabled. We recommend reviewing their privacy policies and data processing agreements before enabling AI features if you handle sensitive personal data.

We use your own API keys for AI and WhatsApp integrations. Pingly never stores unencrypted API keys, and all keys are encrypted at rest.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following:

• Conversation data & messages: Retained for the duration of the workspace subscription plus 90 days after termination, then permanently deleted
• Contact profiles: Retained while the workspace is active; deleted within 90 days of workspace termination or upon explicit deletion request
• Account data (users): Retained until the account is deleted or the workspace is terminated
• Audit logs: Retained for up to 12 months for security and compliance purposes
• CSAT ratings & analytics: Retained for the workspace subscription period plus 90 days
• Backup copies: Securely purged within 30 days of the primary data deletion

You may request early deletion of your data by contacting us at privacy@samcomtechnologies.com.

We implement industry-standard technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Password hashing using bcrypt with per-user salts
• API key encryption before storage
• JWT-based authentication with configurable idle session timeouts
• Role-based access control (SUPER_ADMIN, ADMIN, MANAGER, AGENT)
• Regular dependency updates and security patches
• Access logging and anomaly detection

No system can guarantee absolute security. If you suspect a security breach involving your account, please contact us immediately at privacy@samcomtechnologies.com.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

For workspace users (Admins/Managers/Agents): You may access and update your account data directly in the platform under Settings → Profile. To delete your account, contact your Workspace Administrator or email us.

For end-customers (Contacts): Contact the business that communicated with you via Pingly. Samcom Technologies acts as a data processor in that relationship and will assist the business Customer in fulfilling your request.

To exercise any right, email us at privacy@samcomtechnologies.com. We will respond within 30 days.

Pingly uses minimal cookies and local storage:

We do not use advertising cookies, third-party tracking pixels, or analytics platforms that share data with advertisers (e.g., Google Analytics, Facebook Pixel).

Pingly is a business-to-business (B2B) platform intended for use by organisations and their employees. It is not directed at children under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly. If you believe a child's data has been collected, contact us at privacy@samcomtechnologies.com.

Samcom Technologies is based in India. Your data may be processed by our sub-processors in other countries, including the United States (e.g., Anthropic, OpenAI) and other jurisdictions where cloud infrastructure operates. When we transfer personal data internationally, we rely on appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
• Data Processing Agreements with all sub-processors
• Adequacy decisions where applicable

By using Pingly, you consent to the transfer and processing of your data in India and other countries as described in this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Display a prominent notice within the Pingly application for at least 14 days
• Send an email notification to registered Workspace Administrators

Your continued use of Pingly after the effective date of the revised policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days. For urgent security matters, please mark your email "URGENT — Security".