Privacy Policy

Last updated: 27 July 2026

PingFlow ("PingFlow", "we", "us", "our") is operated by Lofty Systems, based in Bengaluru, Karnataka, India. This policy explains what information we collect when a business uses PingFlow, how we use it, and how it's protected — including when we send messages on your behalf through the WhatsApp Business Platform.

1. Who this policy covers

This policy applies to two groups of people:

• Business customers — coaching institutes, clinics, salons, gyms, and other organisations that sign up to use PingFlow to manage and automate their WhatsApp communication.
• End customers — the students, patients, clients, or members that a business customer communicates with through PingFlow (for example, a parent receiving a fee reminder).

2. Information we collect

When a business signs up for PingFlow, we collect and store:

• Business details — name, address, phone number, and contact email of the business customer.
• End-customer records the business uploads or enters — names, phone numbers, fee/payment schedules, attendance records, appointment or booking details, and similar operational data needed to trigger the right message at the right time.
• Message activity — which messages were sent, delivered, and read, so the business can see delivery receipts on their dashboard.
• Payment information processed through Razorpay for fee collection, where enabled. PingFlow does not store full card or bank account numbers; that data is handled directly by Razorpay under its own privacy and security terms.
• Basic technical data (login activity, device/browser info) used to keep accounts secure.

3. How we use this information

• To detect the operational events a business has configured (a missed class, an overdue fee, an upcoming appointment) and trigger the corresponding WhatsApp message automatically.
• To send messages through the official WhatsApp Business Platform (Cloud API) provided by Meta.
• To show the business its own dashboard — delivery rates, active leads, fee status, and similar reporting.
• To provide customer support and troubleshoot delivery issues when a business reports one.
• To improve PingFlow's reliability and features. We do not use end-customer data to build advertising profiles, and we do not sell any data to third parties.

4. WhatsApp messaging and Meta

5. Data sharing

We share data only where necessary to operate PingFlow:

• Meta / WhatsApp Business Platform — to deliver messages and manage template approvals.
• Razorpay — to process payments where a business has enabled fee collection.
• Google Sheets — only where a business customer has explicitly connected a sheet for data import/export.
• We do not share business or end-customer data with any other third party for marketing purposes, and we never sell personal data.

6. Data retention

We retain business and end-customer data for as long as the business maintains an active PingFlow account, plus a reasonable period afterward to comply with legal, accounting, or dispute-resolution requirements. A business can request deletion of its data at any time (see Section 8).

7. Data security

We apply role-based access controls so that staff at a business only see what their role permits (for example, front-desk staff can mark attendance but not pull fee reports). Data is stored on access-controlled infrastructure, and we take reasonable technical and organisational measures to protect it against unauthorised access, alteration, or loss.

8. Your rights and choices

• A business customer can request a copy, correction, or deletion of the data it has stored in PingFlow by contacting us (Section 10).
• An end customer who wants a business to stop sending them WhatsApp messages should contact that business directly, since the business — not PingFlow — controls its own customer list and messaging triggers.
• End customers using our public "live demo" feature are only contacted for that single demo message and are not added to any ongoing list.

9. Children's data

PingFlow is used by businesses such as coaching institutes to communicate with parents about their children (for example, attendance or fee alerts). We do not knowingly collect data directly from children; all such records are entered and controlled by the business customer as the data controller for its own students.

10. Changes to this policy

We may update this policy from time to time as PingFlow's features evolve. The "Last updated" date at the top will reflect the latest revision. Continued use of PingFlow after an update means you accept the revised policy.