Privacy Policy

You can view, edit, and delete your data at any time. Ask Pally what it remembers, tell it to forget something, disconnect any account, download your data, or delete your account.

What you give us

• Account details, such as your phone number, email, and name
• Your conversations with Pally, including messages, media, and calls
• What you ask Pally to remember, and the work it does for you
• Traveler details for bookings, such as date of birth, gender, nationality, and passport or driver details when a booking needs them
• Messages you send our support team
• Your shipping address, t-shirt size, and t-shirt fit, if you ask for Pally merch

What we collect automatically

• How you use Pally, including its actions and tool activity
• Device, browser, and diagnostic information, such as your IP address and general location
• Cookies and similar technologies on our website

What we get from others

• Accounts you connect, such as Gmail or Google Calendar, when Pally needs them to help you
• Purchase details from receipts, order confirmations, and renewal notices that arrive in an email account you connect
• Courses, assignments, due dates, grades, and announcements from school portals you connect, and events from calendar feed links you add
• Payment status from our payment providers. We never see your full card number.
• Ad and referral details, such as which campaign or invite link brought you to Pally

When you come to Pally from a link or our website, we record the page, campaign tags, referring site, and device type, and link that record to your account when you sign up, to understand which links and channels bring people to Pally. For this, we store nothing on your device: no cookie, local storage, or identifier. We remove the link to your account when you delete your account.

California Notice at Collection

Under the CCPA/CPRA, we collect the categories below. Each line gives examples, why we use them, and who receives them. Categories can overlap, and what we collect depends on the features you use, the accounts you connect, and what you or others share with Pally.

• Identifiers: names, phone numbers, email addresses, account IDs, IP addresses, and cookie IDs; to run and secure your account, deliver messages, handle RSVPs, and measure website use and ads; shared with hosting, messaging, AI, analytics, and payment providers, advertising partners, people, businesses, or event hosts you ask us to share with, and other Pally users in an introduction you accept.
• Customer records (California Civil Code section 1798.80(e)): contact, shipping, t-shirt size and fit, traveler, bank, and payment details; to carry out requests, fulfill merch, and handle transactions and billing; shared with hosting, AI, app-connection, payment, banking, and booking providers, our support team for merch, and people or businesses you authorize. We never see your full card number.
• Protected characteristics: age, date of birth, gender, or nationality you provide; to complete bookings and enforce age limits; shared with hosting and AI providers as needed, and booking providers and airlines for bookings.
• Commercial information: purchases, including those recorded from your email receipts, bookings, recurring charges, payment status, and transaction summaries; to complete and track transactions, answer money questions, warn you before renewals, find money you may be owed back, and meet accounting obligations; shared with hosting, AI, app-connection, browsing, payment, banking, and booking providers, and merchants or people you authorize.
• Internet or other electronic network activity: website use, referral and campaign details, device and browser details, tool activity, and diagnostics; to operate, secure, support, and improve Pally and measure website use and ads; shared with hosting, AI, app-connection, messaging, browsing, and analytics providers, advertising partners, and connected services needed for your tasks.
• Geolocation data: general location and location you choose to share; to help with nearby suggestions, reminders, travel, and other location-based requests; shared with hosting, messaging, AI, research, and task-specific providers, and people or services you authorize.
• Audio, electronic, visual, or similar information: messages, email, media, files, and call audio or transcripts; to understand and answer requests, deliver communications, and provide support; shared with hosting, messaging, email, call, AI, app-connection, browsing, and media-creation providers, and people or services you authorize.
• Professional or employment-related information: work details, professional profiles, and meeting notes and transcripts from recorders you connect; to personalize assistance, prepare meetings, follow up on recorded meetings, coordinate work, and handle RSVPs; shared with hosting, AI, messaging, app-connection, and research providers, and people, services, or event hosts you authorize.
• Education information: courses, assignments, due dates, grades, and announcements from school portals you connect; to answer questions about your classes and keep track of your work; shared with hosting, AI, app-connection, and browsing providers.
• Inferences: remembered preferences, interests, summaries, and relationship notes; to personalize Pally, remember context, and improve response quality; shared with hosting and AI providers, and people or services you authorize.
• Sensitive personal information: government identification numbers, such as passport and driver's license numbers, citizenship or nationality, precise location, health details, sign-in credentials, and private communications from connected accounts; to complete bookings, provide requested features, and secure accounts; shared as needed with hosting, AI, app-connection, messaging, secure sign-in, banking, and payment providers, booking providers and airlines for bookings, and people or services you authorize.

We do not sell personal information. When our ad measurement tools run, identifiers and internet activity are shared with advertising partners for cross-context behavioral advertising, as described in Cookies and Tracking. Any category may also be shared for the legal and business reasons in How We Share It.

The uses, Google-data limits, and retention criteria for these categories are in How We Use It, Google User Data, and Retention.

Under EU and UK GDPR, we rely on the legal basis listed for each purpose below.

• To run Pally and do what you ask, including its intelligence features, transactions, product searches, Pally Page RSVPs, and merch requests (contract, Article 6(1)(b))
• To record purchases from your email receipts, and use them for spending summaries, renewal warnings, savings, and money back checks (contract, Article 6(1)(b))
• To match you with other Pally users for a goal you opt in to, and introduce you when everyone accepts (consent, Article 6(1)(a))
• To personalize Pally for you (contract, Article 6(1)(b))
• To support you and send you service messages (contract, Article 6(1)(b))
• To keep Pally safe, and to prevent fraud and abuse (legitimate interests in a secure service, Article 6(1)(f))
• To maintain and improve Pally, including to fix bugs, analyze usage, and build new features (legitimate interests in a reliable, useful service, Article 6(1)(f))
• To train and evaluate our AI models, unless you opt out as described below (legitimate interests in improving our models, Article 6(1)(f))
• To respond to people who message, email, or call your Pally assistant (legitimate interests in delivering those conversations, Article 6(1)(f))
• To use app connections, optional location sharing, and optional diagnostics you authorize, and send optional product or marketing messages (consent, Article 6(1)(a))
• To measure website use and ads (consent where required, Article 6(1)(a); otherwise legitimate interests in understanding usage and measuring campaigns, Article 6(1)(f))
• To measure which links and channels bring people to Pally, including linking the visit that brought you here to your account when you sign up (legitimate interests in understanding how people find Pally, Article 6(1)(f))
• To meet our legal obligations (legal obligation, Article 6(1)(c))
• To enforce our terms (legitimate interests in protecting Pally and our users, Article 6(1)(f))

You can turn off model training under Data retention in your settings at my.pally.com. If you do, we will not use your data to train our models.

We may also turn data into aggregated or de-identified form that no longer identifies you, and use it for any purpose.

Purchases from your email receipts

When a receipt, order confirmation, or renewal notice arrives in an email account you connect, Pally records the merchant, the items, the amount, the date, and when the charge repeats. Pally uses these records to answer questions about your spending, warn you before a renewal, track what Pally saved you, and check whether a merchant owes you money back, such as for a price drop or a late delivery. Pally claims that money only after you say yes. When you disconnect the email account, Pally deletes the purchases it recorded from it.

Introductions to other Pally users

Pally can introduce you to other Pally users when an introduction clearly helps everyone, such as two founders looking for a cofounder in the same city. This happens only for a goal you opt in to, and you approve a short preview that other users may see. To find matches, Pally compares your goal and any limits you set, such as your city, with the goals other users opted in. An intro offer shows each person only the other members' approved previews. Nothing else about you is shared unless every member accepts that intro. Then Pally starts a group text with the members, which shares your phone number with them. One decline ends the intro for everyone. You can pause or stop matching at any time, and deleting your account deletes your goals and intros.

Shopping links

When you ask Pally to find something to buy, Pally may send your product search, with any price and country filters, to a product catalog partner. It sends no name, phone number, email address, or account ID. Buy links from this partner are affiliate links. When you open one, the partner and the retailer record the click and any purchase under their own privacy policies, and the retailer may pay Pally a commission. You never pay more through these links, and a commission never changes what Pally recommends.

School portals and calendar feeds

When you connect a school portal, such as Canvas, Brightspace, Blackboard, or Moodle, Pally saves your login in its encrypted password vault, signs in through its secure browser, and reads your courses, assignments, due dates, grades, and announcements when it needs them to help you. Google Classroom connects like your other Google apps and gives Pally the same kinds of information. A calendar feed link you add is stored encrypted, and Pally reads its events with your other calendars. Pally only reads school portals and calendar feeds. You can disconnect any of them at any time.

Meeting follow-ups

When you connect a meeting recorder, such as Granola, Fathom, Fireflies, or Plaud, Pally checks it for meetings that just ended and reads their notes and transcripts. Pally then researches questions a meeting left open and texts you the answers, with sources, and the follow-ups you own. To research, Pally sends search queries to its web search providers, and a query can include a question from the meeting. You can turn meeting follow-ups off, or disconnect the recorder, at any time.

• With service providers that help us run Pally, such as hosting, messaging, AI, analytics, and payment providers
• With the people and businesses you ask Pally to work with. When Pally books, buys, calls, or emails for you, we share what it needs to get that done, including with payment processors to complete a transaction. A merchant that issues a booking, such as an airline, hotel, rental car company, or travel agent, handles that booking under its own terms and privacy policy.
• With event hosts, when you RSVP to a Pally Page
• With other Pally users in an introduction that every member accepts
• With our team at support@pally.com, when you ask for merch
• With advertising partners, as described in Cookies and Tracking
• When the law requires it, or to protect the rights, property, and safety of Pally, our users, or others
• As part of a merger, acquisition, financing, or sale of assets
• With anyone else when you ask us to or agree to it

We do not sell your data. Our providers are listed on our Subprocessors.

International Data Transfers

Pally Technologies, Inc. is based in the United States, and your data may be processed there. For transfers from the EU or UK, we rely on Standard Contractual Clauses (SCCs), data processing agreements with our service providers, and appropriate technical and organizational safeguards. To request a copy of these safeguards, including the relevant SCCs, email privacy@pally.com.

Pally only reads your Google data, such as Gmail, Google Calendar, and Google Classroom, after you connect your account, and only uses it to provide the features you use. Our use of data from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We do not sell Google data, use it for ads, or use it to train generalized AI models. People at Pally do not read it unless you ask us to, or we need to for security or to follow the law. You can disconnect Google at any time in Pally or in your Google account settings.

Our website uses essential cookies and Google Analytics. Our ad campaign pages use the Meta Pixel to measure ads, which shares page visits with Meta. Where required, these run only with your consent. We honor Global Privacy Control signals, but we do not respond to Do Not Track signals.

You can change these choices at any time on Your Privacy Choices.

• Turn off model training in your settings at my.pally.com
• Disconnect any account, or ask Pally to forget something
• Stop marketing emails with the unsubscribe link. You will still get emails about your account. Reply STOP to stop texts from Pally.
• Opt out of ad measurement on Your Privacy Choices, or with Global Privacy Control

Depending on where you live, you may also have rights to access, correct, delete, or export your data, to object to or limit how we use it, to withdraw consent, and to opt out of the sale or sharing of personal information. To use them, email privacy@pally.com. We may need to verify your identity first, and we will not treat you differently for using your rights. If you are in the EU or UK, you can also complain to your local data protection authority.

We keep your data while your account is active, and after that only as long as we need it for the reasons in this policy. When you delete your account, we delete your personal data or make it no longer identify you. We may keep some data longer when the law requires it, to resolve disputes, or to prevent fraud and abuse. Copies in backups are removed as the backups expire.

When you ask for merch, Pally emails your shipping address, t-shirt size, and fit to support@pally.com so our team can order it manually. Pally keeps no separate record of those details beyond your conversation and that email. The request receipt records only your account, the request time, and the email's message ID.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except our messaging providers that deliver the texts. Reply STOP to opt out. Reply HELP for help.

We encrypt your data in transit and at rest and limit who can access it. No system is perfectly secure.

Pally may link to or work with other websites and services. Their own privacy policies apply to what you share with them.

Pally is for people 18 and older. If we learn we have data from someone younger, we will delete it.

We may update this policy. If we make significant changes, we will let you know.