Privacy policy

Pingram ("we", "us", or "our") provides software and APIs that enable businesses to send notifications via email, SMS, in-app, and other channels. We respect your privacy and are committed to protecting personal information we collect and process. This Privacy Policy explains how we collect, use, share, and protect your information.

1. Who This Policy Applies To

• Customers & Developers: Individuals and businesses that use Pingram directly.

• End-Users: Individuals who receive notifications sent through Pingram by our customers.

2. Information We Collect

A. From Customers and Developers

We collect the following categories of personal data:

Account Information

• Full name

• Email address

• Company name

• Job title

• Phone number

• Billing and payment details

Technical and Usage Information

• IP address

• Browser type, OS, and device info

• Time zone, session time, referral URLs

• Actions taken on our platform (e.g., API calls, dashboard activity)

• Unique identifiers and cookies (see Cookie Policy for details)

Communications

• Support requests, emails, and survey responses

B. From End-Users (Recipients of Notifications)

Our customers may provide or generate the following data through use of our service:

Contact and Communication Data

• Email address

• Phone number

• Message content

Delivery and Engagement Data

• Message delivery status

• Open and click events

• IP address, device, and browser data

• Timestamps of interactions

Note: Customers are responsible for obtaining appropriate consent or legal basis to collect and process this information. If sensitive personal data is transmitted, customers must ensure compliance with applicable laws (e.g., HIPAA, GDPR).

3. How We Use Your Information

We use personal information to:

• Provide, maintain, and improve our services

• Authenticate users and secure accounts

• Process payments and manage subscriptions

• Analyze usage and performance metrics

• Communicate updates, support, or marketing (where allowed)

• Ensure legal and regulatory compliance

Opt-In and Opt-Out Mechanisms

By providing us, or one of our customers, with your consent and contact information, you may receive communications from us or our customers by phone call, SMS/text message, or email.

You can opt out of SMS or email messages at any time. Just reply "STOP" to any SMS you get, or "HELP" for more info. To unsubscribe from emails, click the unsubscribe link at the bottom of any email you receive. You can also email us at privacy@pingram.io or use our contact form to update your preferences or ask to be removed from our communications.

Direct communication frequency from us may vary, but we won't send you more than 10 messages per month. Standard message and data rates may apply.

4. How We Share Information

We do not sell personal information. We may share data with:

• Service Providers: Infrastructure (e.g., AWS), communication (e.g., SendGrid, Twilio), analytics, billing, and customer support tools

• Legal Authorities: When required by law or to protect rights and safety

• Business Transfers: In connection with mergers, acquisitions, or asset sales

A list of subprocessors is available at our Security Hub.

SMS and Text Messaging Data

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

5. Data Retention

We retain personal information as long as necessary to provide our services and meet legal obligations. Customers may request deletion or export of their data at any time.

6. Security

We implement a range of technical and organizational measures to protect personal information, including:

• Data encryption in transit and at rest

• Access controls and role-based permissions

• Audit logging and anomaly detection

• Secure software development practices

• Regular security assessments and vulnerability testing

We are SOC 2 Type II compliant, reflecting our commitment to industry best practices around data protection, availability, and confidentiality. For more information, please visit our Security Hub.

7. Your Rights

Depending on your jurisdiction, you may have rights including:

• Access to your data

• Correction of inaccurate data

• Deletion (right to be forgotten)

• Portability of your data

• Objection or restriction to processing

To exercise these rights, email privacy@pingram.io or submit a request via our contact form.

8. Additional Disclosures

GDPR (EU/UK Users)

We act as:

• A Controller for personal data collected directly from our users

• A Processor for data our customers transmit to us for sending notifications

Legal bases for processing include:

• Performance of a contract

• Legitimate interest

• Legal obligation

• Consent (where applicable)

We have appointed representatives under Article 27 of the GDPR:

CCPA (California Residents)

We do not sell personal information. California residents may:

• Request access to the categories of personal information collected

• Request deletion of personal information

• Opt out of data sharing

To exercise these rights, contact privacy@pingram.io or use our contact form.

9. Customer Responsibility & Data Processing

Pingram processes data on behalf of its customers. Customers are responsible for ensuring that any personal or sensitive data they send through our platform is collected and processed in compliance with applicable data protection laws. This includes obtaining all necessary consents and providing required notices to end-users.

By using our services, customers acknowledge that they are the data controllers with respect to their end-users' data, and Pingram acts solely as a data processor under their instructions.

10. Children's Privacy

Our services are not directed to children under the age of 13 (or 16 where applicable under local law), and we do not knowingly collect personal information from children. If we become aware that a child has submitted personal data to us, we will take steps to delete such information promptly.

11. International Data Transfers

Pingram is based in Canada, which is recognized by the European Commission as providing an adequate level of data protection under GDPR. Data may also be processed in the United States or other jurisdictions. Where required, we use Standard Contractual Clauses (SCCs) or similar safeguards to ensure lawful data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify users of significant changes and post the updated version on our website.

13. Contact Us