This policy explains what Pally collects and how we use it. Questions? Email privacy@pally.com.
1. What We Collect
What you give us
- Account details, such as your phone number, email, and name
- Your conversations with Pally, including messages, media, and calls
- What you ask Pally to remember, and the work it does for you
- Details a task needs, such as traveler, identity, delivery, and payment details
- Sign-in details for sites and apps you ask Pally to use
- Messages you send our support team
What we collect automatically
- How you use Pally, including its actions and tool activity
- Device, browser, and diagnostic information, such as device identifiers, your IP address, and general location
- Cookies and similar technologies on our website
What we get from others
- Data from accounts and devices you connect, such as email, calendar, contacts, files, banking, school, meeting, and work apps
- Payment status from payment providers
- Ad and referral details, such as which campaign or invite brought you to Pally
- Messages and details from people who contact your Pally assistant, share a group with Pally, or add you as a Trusted Pal
California Notice at Collection
Under the CCPA/CPRA, we collect the categories below. Each line gives examples, why we use them, and who receives them. What we collect depends on the features you use and the accounts you connect.
- Identifiers: names, phone numbers, email addresses, account IDs, account status, IP addresses, and cookie IDs; to run and secure your account, deliver messages, help people who know each other find each other on Pally, and measure website use and ads; shared with service providers, advertising partners, people whose contacts include your phone number, and people or businesses you ask us to share with.
- Customer records (California Civil Code section 1798.80(e)): contact, delivery, traveler, bank, and payment details; to carry out requests and handle transactions; shared with service providers, booking providers, merchants, and people or businesses you authorize.
- Protected characteristics: age, date of birth, gender, or nationality you provide; to complete bookings and enforce age limits; shared with service providers, booking providers, and businesses you authorize.
- Commercial information: purchases, bookings, recurring charges, and payment status, including those found in a connected email or bank account; to complete and track transactions, answer money questions, and find money you may be owed; shared with service providers, booking providers, and merchants or people you authorize.
- Internet or other electronic network activity: website use, referral and campaign details, device details, tool activity, and diagnostics; to operate, secure, and improve Pally and measure website use and ads; shared with service providers and advertising partners.
- Geolocation data: general location and location you choose to share; for location-based requests; shared with service providers and people or businesses you authorize.
- Audio, electronic, visual, or similar information: messages, email, media, files, and call audio or transcripts; to understand and carry out requests and provide support; shared with service providers and people or businesses you authorize.
- Professional or employment-related information: work details, professional profiles, and meeting notes; to personalize assistance and help with your work; shared with service providers, people you authorize, and Trusted Pals as described below.
- Education information: class details from school accounts you connect; to help with your classes; shared with service providers.
- Inferences: remembered preferences, summaries, and how close you are to people you know; to personalize Pally; shared with service providers, Trusted Pals as a general closeness label, and people you authorize.
- Sensitive personal information: government ID numbers, citizenship or nationality, precise location, health details, sign-in credentials, payment card details, and private communications from connected accounts; to provide the features you request and secure accounts; shared as needed with service providers, booking providers, merchants, and people or businesses you authorize.
We do not sell personal information. When our ad measurement tools run, identifiers and internet activity are shared with advertising partners for cross-context behavioral advertising, as described in Cookies and Tracking. Phone numbers and text messaging data are never shared with advertising partners. Any category may also be shared for the legal and business reasons in How We Share It.
2. How We Use It
Under EU and UK GDPR, we rely on the legal basis listed for each purpose below.
- To run Pally and do what you ask, including bookings, purchases, calls, messages, and money-back checks (contract, Article 6(1)(b))
- To personalize Pally, and to share what you choose with Trusted Pals and groups (contract, Article 6(1)(b))
- To let a Trusted Pal's Pally search people you know (legitimate interests in helping you make introductions, Article 6(1)(f))
- To introduce you to other Pally users for a goal you opt in to (consent, Article 6(1)(a))
- To show people whose contacts include your phone number that you use Pally (legitimate interests in helping people who know each other connect, Article 6(1)(f))
- To support you and send you service messages (contract, Article 6(1)(b))
- To respond to people who contact your Pally assistant, and to record calls you ask Pally to record (legitimate interests in carrying out your conversations, Article 6(1)(f))
- To keep Pally safe, and to prevent fraud and abuse (legitimate interests in a secure service, Article 6(1)(f))
- To maintain and improve Pally (legitimate interests in a reliable, useful service, Article 6(1)(f))
- To train and evaluate our AI models, unless you opt out (legitimate interests in improving our models, Article 6(1)(f))
- To provide optional features you turn on, such as app connections and location sharing, and to send optional marketing messages (consent, Article 6(1)(a))
- To run referral programs, leaderboards, and competitions, and fulfil earned rewards (contract for reward fulfilment, Article 6(1)(b); legitimate interests in growing and operating Pally for leaderboards and competitions, Article 6(1)(f))
- To measure website use, ads, and which links bring people to Pally, including across return visits (consent where required, Article 6(1)(a); otherwise legitimate interests in understanding how people find Pally, Article 6(1)(f))
- To meet our legal obligations (legal obligation, Article 6(1)(c))
- To enforce our terms (legitimate interests in protecting Pally and our users, Article 6(1)(f))
You can turn off model training by asking Pally or in your account at my.pally.com.
We may also turn data into aggregated or de-identified form that no longer identifies you, and use it for any purpose.
What other people can see
- Groups: anything posted in a group chat with Pally, and any data you choose to share with that group, is available to its members.
- Trusted Pals: each pal sees what you choose to share with them. A pal's Pally can also search people you know and see each match's name, job title, company, public profile, and a general closeness label. You can turn this off for any pal.
- Introductions: for a goal you opt in to, other users see the preview you approve. If everyone accepts, Pally starts a group text that shares your phone number.
- Contacts: people whose contacts include your phone number can see that you use Pally. You can turn this off by asking Pally or at my.pally.com.
- Referral leaderboards: after your first referred friend activates, leaderboards show your first name, last-name initial, referral rank, and activated-friend count. You can opt out by asking Pally or at my.pally.com.
- Pally Pages: a page is public unless you make it private. A private page opens for anyone who has its link. What you submit on a page, such as an RSVP, a chosen time, or contact details you choose to share, is available to its owner.
- Shared setups: anyone with the link can see a setup you share.
- Calls: when Pally records a call for you, it tells the other person that the call is recorded.
4. Google User Data
Pally only reads your Google data, such as Gmail, Google Calendar, and Google Classroom, after you connect your account, and only uses it to provide the features you use. Our use of data from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
We do not sell Google data, use it for ads, or use it to train generalized AI models. People at Pally do not read it unless you ask us to, or we need to for security or to follow the law. You can disconnect Google at any time in Pally or in your Google account settings.
6. Your Choices and Rights
- Ask Pally what it remembers, tell it to forget something, or disconnect any account
- Turn off model training by asking Pally or at my.pally.com
- Stop marketing emails with the unsubscribe link. Reply STOP to stop texts from Pally.
- Opt out of ad measurement on Your Privacy Choices, or with Global Privacy Control
- Delete your account
Depending on where you live, you may also have rights to access, correct, delete, or export your data, to object to or limit how we use it, to withdraw consent, and to opt out of the sale or sharing of personal information. To use them, email privacy@pally.com. We may need to verify your identity first, and we will not treat you differently for using your rights. If you are in the EU or UK, you can also complain to your local data protection authority.
7. Retention
We keep your data while your account is active, and after that only as long as we need it for the reasons in this policy. When you delete your account, we delete your personal data or make it no longer identify you. We may keep some data longer when the law requires it, to resolve disputes, or to prevent fraud and abuse, including limited records that stop a closed account from reopening. Copies in backups are removed as the backups expire. Messages you sent in a group stay in that group's history for its other members.
8. Text Messages
This section covers Pally Assistant Text Messages: texts sent to or from a Pally assistant phone number. When someone texts a Pally user's assistant number, we collect their phone number and messages to reply for that user and to tell the user about the conversation. We delete these texts when the user deletes their Pally account.
Message frequency varies with the conversation. Message and data rates may apply. Reply STOP to opt out. Reply HELP for help.
We do not share, sell, or provide mobile phone numbers or text messaging opt-in data and consent to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties.
See how opting in to Pally assistant texts works on our Text Messages page.
9. Security
We use technical and organizational safeguards to protect your data. No system is perfectly secure.
10. Other Websites and Services
Pally may link to or work with other websites and services. Their own privacy policies apply to what you share with them.
11. Children
Pally is for people 18 and older. If we learn that an account belongs to someone under 18, we close it and delete its data, keeping only what we need to stop the account from reopening.
12. Changes
We may update this policy. If we make significant changes, we will let you know.
13. Contact Us
Pally Technologies, Inc.
Email: privacy@pally.com