Privacy policy
Last updated: 2 October 2026
This policy explains what personal data Pingiva (“Pingiva”, “we”) collects through this website and the Pingiva service, why we collect it, and what you can ask us to do with it. It is written to follow the Personal Data Protection Act 2010 of Malaysia and the Personal Data Protection Act 2012 of Singapore.
What we collect
- Trial form: your name, business name, WhatsApp number, and your email address if you give it, plus the industry and country you chose.
- Account: your email address, and your name and profile picture if you sign in with Google or Microsoft. We never see or store your Google or Microsoft password.
- Business details you enter: your business profile, opening hours, services, prices, and questions and answers.
- Customer conversations: when the service is live on your WhatsApp number, the messages your customers send and the replies, so that we can answer, book appointments and send reminders for you.
- Cookies: one sign-in cookie that keeps you logged in, a short-lived security cookie while you sign in with Google or Microsoft, and a cookie that remembers your country for a week. We do not use advertising cookies.
- Your country: to show prices in the right currency, your IP address is checked once against a country lookup service. Only the country is kept.
Why we use it
- To contact you about the trial you asked for.
- To set up and run the service for your business.
- To keep your account secure.
- To meet legal obligations, such as keeping billing records.
We do not sell personal data, and we do not use your customers’ conversations to advertise to them.
Your customers’ data
For conversations with your customers, your business decides why and how the data is used, and we process it on your behalf and on your instructions. You are responsible for telling your customers that messages may be answered with the help of an automated assistant, and for having their consent where the law requires it, for example before sending marketing messages.
Who we share it with
We share data only with the providers needed to run the service: our hosting provider, our email provider, Meta (the WhatsApp Business Platform), and the AI provider that drafts replies. Each receives only what it needs for that task. Some of these providers store data outside Malaysia and Singapore. Data is stored in a secured data centre.
How long we keep it
- Trial form details: until you ask us to delete them, or up to 24 months after our last contact.
- Account and business details: for as long as your account is open, then deleted within 90 days of closing it.
- Billing records: for the period the law requires.
Your rights
You can ask to see the personal data we hold about you, to have it corrected, to withdraw consent, or to have it deleted. To do so, use the contact details on the home page. We answer within 21 days.
Security
Data is sent over encrypted connections, access is limited to the people who need it to serve you, and sign-in uses one-time email links or your Google or Microsoft account. No system is perfectly secure. If a breach affects your data, we will tell you and the regulator as the law requires.
Changes
If this policy changes in a way that affects you, we will tell you by email or in your dashboard before the change takes effect.