Privacy Policy

PingLoyal ("PingLoyal", "we", "us") is a WhatsApp loyalty automation platform operated by Bhoyee Global Enterprise, Lagos, Nigeria. This policy explains what personal data we collect, why, and what rights you have over it — whether you're a business using PingLoyal (a "tenant") or a customer of one of our tenants.

Account & business information: business name, owner/staff name, email address, phone number, and business address, collected when you register and use the dashboard.

Customer information (collected by our tenants):when a business uses PingLoyal, their customers' names and phone numbers are collected — either entered manually, imported via CSV, or captured when a customer scans a QR code or messages the business's WhatsApp number. We process this data on behalf of the tenant, who controls and is responsible for it.

Payment information: subscription payments are handled by Paystack and/or Stripe. We never see or store full card numbers — only a payment reference and the last four digits, where applicable.

Usage data: log data, device/browser information, and how you interact with the dashboard, used to keep the service reliable and improve it.

Cookies and similar technology: see our Cookie Policy for details.

To provide and maintain the service (sending WhatsApp messages on a tenant's behalf, tracking loyalty points, processing transactions); to process subscription payments and prevent fraud; to send transactional emails (verification codes, receipts, support replies); to provide customer support; and to improve and secure the platform.

We only share data with service providers who help us run PingLoyal:

• Meta / WhatsApp Business Platform (via our messaging partner) — to deliver WhatsApp messages.
• Paystack and Stripe — to process subscription payments.
• Resend — to deliver transactional emails.
• Cloudflare — to store uploaded files (logos, support attachments).

We do not sell personal data to third parties, and we only disclose it elsewhere if required by law.

We keep account and customer data for as long as a tenant's account is active. If a tenant deletes their account, we permanently erase their data after the 24-hour cancellation grace period shown in the dashboard. We may retain limited records where required for tax, accounting, or legal purposes.

Depending on where you're located, you may have rights under the Nigeria Data Protection Act/Regulation (NDPR/NDPA) or, for EU/UK visitors, the GDPR — including the right to access, correct, delete, or export your personal data, and to object to certain processing. Tenants can manage and delete their own account data directly from the dashboard; customers of a tenant should contact that business directly, or reach us at the email below and we'll route the request.

PingLoyal is intended for business use and is not directed at children. We do not knowingly collect personal data from children under 13.

We use industry-standard measures — encryption in transit, hashed passwords, and access controls — to protect personal data. No system is perfectly secure, but we work to keep yours as safe as possible.

We may update this policy from time to time. Material changes will be announced on this page with an updated "last updated" date.

Questions about this policy or your data? Email hello@pingloyal.com or use our Contact page.