Privacy Policy

1. Who We Are

Pindura is a product of Naiah Ltd, a company registered in the United Kingdom. This policy explains how we collect, use, and protect your personal information when you use the Pindura platform at pindura.naiah.tech.

2. Information We Collect

We collect the following types of information:

• Account data: Name, email address, phone number, and password (hashed) when you register.
• Workspace data: Business name, industry, website, and settings you configure.
• Contact data: Information about your customers that you import or collect through connected channels.
• Message data: Conversations and messages processed through the platform to deliver the service.
• Billing data: Subscription and invoice records for your Pindura account, processed via Stripe. Card details are handled by Stripe and not stored by us.
• Usage data: Log data, IP addresses, browser type, and how you interact with the platform.

3. How We Use Your Information

• To provide, maintain, and improve the Pindura service
• To process subscription billing and send payment confirmations
• To send service-related emails (account activity, password reset, invitations)
• To respond to support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Data Sharing

We do not sell your personal data. We share data only with:

• Infrastructure providers: Railway (hosting), Resend (transactional email), Stripe (card payments)
• Messaging platforms: Meta (WhatsApp/Facebook/Instagram) to deliver messages on your behalf
• Legal authorities: Where required by law

5. Data Retention

We retain your account data for the duration of your subscription. After cancellation, data is retained for 30 days to allow export, then deleted. Message and contact data is retained for as long as your workspace is active. You can request earlier deletion by contacting us.

6. Security

We use industry-standard security measures including encrypted data storage, HTTPS in transit, bcrypt password hashing, and optional two-factor authentication. Channel credentials (API keys, tokens) are encrypted at rest. No system is completely secure; we encourage you to use strong passwords and enable 2FA.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Export your contact and conversation data (CSV export available in the platform)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@naiah.tech.

8. Cookies

We use session cookies for authentication and local storage for user preferences. We do not use third-party advertising cookies.

9. Changes to This Policy

We may update this policy periodically. We will notify you by email for material changes. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

10. Contact

For privacy enquiries: privacy@naiah.tech
Naiah Ltd, United Kingdom — www.naiah.tech