Privacy Policy

Overview

Pangora is a WhatsApp ordering, product catalog, customer communication and business workspace platform designed for restaurants and local businesses.

This Privacy Policy explains how Pangora collects, uses, stores and shares information when businesses, business owners, team members, administrators, customers or other users interact with Pangora services, websites, applications, integrations and related features.

Pangora is currently in private beta / early access. Some features may change as the product evolves, including WhatsApp Business Platform integrations, product catalog synchronization, order management, customer management and business workspace functionality.

For purposes of this Policy, “Pangora,” “we,” “us” and “our” refer to the Pangora service. “Business” refers to a restaurant, local shop, merchant or organization using Pangora. “Customer” refers to an individual who communicates with a Business, places an order, interacts with a product catalog or otherwise communicates through WhatsApp or related channels.

Who This Policy Applies To

This Policy applies to:

• Business owners, administrators and team members who create or manage a Pangora workspace.
• Businesses that connect or intend to connect WhatsApp Business Platform assets to Pangora.
• Customers whose information may be processed by Pangora on behalf of a Business.
• Visitors to pangora.app and related legal or informational pages.

In many cases, Pangora processes Customer information on behalf of the Business that uses Pangora. The Business is responsible for determining what Customer information is collected, how Customer communication is initiated and whether it has the required permission, consent or legal basis to communicate with Customers.

Information We Collect

Depending on how Pangora is used, we may collect and process the following categories of information:

• Account and workspace information.
• Business profile and contact information.
• Team member and administrator information.
• WhatsApp Business Platform connection information.
• Customer contact and conversation information.
• Order, product and catalog information.
• Technical, usage, device and log information.
• Support and communication information.

We only collect information that is reasonably necessary to provide, secure, improve or support the Pangora service.

Business Account and Workspace Information

When a Business creates or manages a Pangora workspace, we may collect:

• Business name.
• Business contact details.
• Owner or administrator name.
• Email address and phone number.
• Workspace settings and preferences.
• Business role and team membership information.
• Authentication and session information.
• Billing or plan-related information if paid features are introduced.

This information is used to create and manage the Business workspace, authenticate users, provide support, maintain security and operate the service.

WhatsApp Business Platform Data

If a Business connects or intends to connect WhatsApp Business Platform assets to Pangora, we may process information related to those assets. This may include:

• WhatsApp Business Account identifiers.
• WhatsApp phone number identifiers.
• Display phone numbers.
• Business profile information.
• Message templates and template status information.
• Message, conversation and webhook event metadata.
• Message delivery, read, failed or status events.
• Customer contact identifiers used in WhatsApp communication.
• Order events and interactive message events.
• Configuration information required to send, receive and manage WhatsApp messages on behalf of the Business.

Pangora may use WhatsApp-related permissions, including permissions such as whatsapp_business_messaging and whatsapp_business_management, where applicable, to help Businesses send and receive WhatsApp messages, manage customer conversations, manage message templates, process order-related events and configure WhatsApp Business Platform assets.

Customer, Conversation and Order Data

Businesses may use Pangora to manage customer communication and orders. In doing so, Pangora may process information such as:

• Customer name or display name.
• Customer phone number.
• Conversation history or message content where available through connected services.
• Order details.
• Delivery or pickup notes.
• Order status.
• Customer preferences or notes added by the Business.
• Support, inquiry or service-related messages.

Pangora processes this information to help the Business view, respond to, organize and manage customer communication and orders.

Businesses are responsible for ensuring that they have the necessary rights, permissions, notices and opt-ins to communicate with Customers, including any opt-in required for WhatsApp messages and any requirements under applicable local law.

Product and Catalog Data

Pangora may allow Businesses to manage products, menus, product catalog records and catalog-related data. This may include:

• Product names.
• Product descriptions.
• Prices and currencies.
• Product images or image URLs.
• Availability and active/inactive status.
• Category information.
• SKU or internal identifiers.
• External product identifiers.
• Catalog identifiers.
• Sync status and error information.
• Product/order relationship data.

If catalog synchronization features are enabled, Pangora may process product and catalog data for the purpose of publishing, updating or managing product catalog information through connected third-party platforms such as Meta or WhatsApp Business Platform.

How We Use Information

Pangora may use information to:

• Provide, operate and maintain the service.
• Create and manage Business workspaces.
• Authenticate users and secure accounts.
• Enable WhatsApp Business Platform workflows.
• Help Businesses manage conversations, orders, customers and product catalogs.
• Send and receive messages on behalf of a Business where authorized.
• Process order events and catalog-related events.
• Provide support and respond to inquiries.
• Monitor, troubleshoot and improve service reliability.
• Prevent fraud, abuse, security incidents and unauthorized access.
• Comply with legal, regulatory and platform obligations.
• Develop and improve Pangora features.

Legal Bases and Business Instructions

Where Pangora processes information on behalf of a Business, the Business is generally responsible for determining the purpose and legal basis for processing that information. Pangora processes such information according to the Business’s instructions, our agreements with the Business and applicable law.

Where Pangora processes information for its own operational purposes, such as account security, service improvement, support, legal compliance or fraud prevention, Pangora does so based on legitimate business interests, contractual necessity, consent where required or other applicable legal bases.

Businesses are responsible for providing appropriate notices to their Customers and obtaining any required consent, opt-in or authorization before sending messages or processing Customer information through Pangora.

How We Share Information

We may share information with the following categories of recipients:

• Meta and WhatsApp, where necessary to operate WhatsApp Business Platform features.
• Hosting, infrastructure and cloud service providers.
• Communication, support and operational service providers.
• Security, monitoring and error-reporting providers.
• Professional advisors where necessary.
• Public authorities, regulators or law enforcement where legally required.
• Business administrators and authorized team members within the relevant workspace.
• Successors or assignees in connection with a merger, acquisition, financing, restructuring or sale of assets.

We do not sell user data to advertisers.

Meta, WhatsApp and Third-Party Services

Pangora may rely on third-party platforms and services, including Meta, WhatsApp Business Platform, hosting providers, infrastructure providers and support tools.

When a Business connects or uses a third-party service through Pangora, that third-party service may process information according to its own terms, policies and privacy practices. Pangora does not control Meta, WhatsApp or other third-party platforms.

Businesses are responsible for reviewing and complying with applicable third-party terms and platform policies, including WhatsApp Business Platform rules, commerce policies, messaging policies and local legal requirements.

Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain Business workspaces, support integrations, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud and maintain security.

Retention periods may vary depending on the type of information, the Business’s settings, legal requirements, operational needs and whether deletion has been requested.

When information is no longer needed, we may delete, anonymize or securely archive it.

Data Security

We use reasonable technical, administrative and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration or disclosure.

However, no internet-based service or electronic storage method is completely secure. Businesses and users are responsible for protecting their account credentials, limiting workspace access to authorized team members and using Pangora in a secure manner.

International Processing

Pangora may process and store information in countries other than the country where a Business, user or Customer is located. These countries may have data protection laws that differ from local laws.

Where required, we take steps designed to ensure that information receives appropriate protection in accordance with applicable law.

Your Choices and Data Deletion

Businesses and users may request deletion of their information by following the instructions on our Data Deletion Instructions page or by contacting us at support@pangora.app.

A deletion request may cover account information, workspace information, integration records, product data, customer records, order records or other data associated with a Pangora workspace, subject to verification and applicable legal, security, fraud prevention, accounting or compliance requirements.

If information was also processed by Meta, WhatsApp or another third-party platform, the Business or user may need to manage or delete certain information directly through that third-party platform’s own tools or account settings.

Children’s Privacy

Pangora is intended for use by Businesses and is not directed to children. We do not knowingly collect personal information from children. If we learn that we have collected information from a child without appropriate authorization, we will take reasonable steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time as Pangora evolves, as legal requirements change or as we add new features. When we update this Policy, we will revise the “Last updated” date above.

Continued use of Pangora after an update means that the updated Policy applies to future use of the service.

Contact Us

For questions about this Privacy Policy or to request data deletion, contact us at:

Email: support@pangora.app