Legal

Privacy Policy

Effective September 30, 2026

1. Introduction and Scope

This Privacy Policy explains how Pongg Inc., a Delaware corporation ("Pongg," "we," "us," or "our"), collects, uses, discloses, and protects personal information. It applies to information we collect through pongg.com and related sites (the "Site"), through our AI receptionist platform and related services (the "Services"), and in our sales, marketing, and support activities.

Pongg provides the Services to businesses ("Customers"), such as home-service contractors. When a person calls, texts, or otherwise contacts one of our Customers and interacts with the Services (an "End Caller"), we process that End Caller's information on behalf of our Customer, as its service provider or processor. In that case, the Customer's own privacy policy governs how the Customer uses the information, and End Callers should contact that Customer with questions or requests. See Section 6 for more detail.

This Privacy Policy is incorporated into our Terms of Service, which also govern use of the Site. By using the Site or Services, you acknowledge the practices described here.

2. Information We Collect

Information you provide to us. We collect information you give us directly, including:

• Contact and business information, such as name, business name, job title, email address, phone number, mailing address, and service area, when you request a demo, fill out a form, sign up, or contact us.
• Account information, such as login credentials, user profiles, and account settings.
• Business configuration information, such as hours, services, pricing, scripts, call-routing rules, team contacts, and integration settings.
• Billing information, such as billing contact and address. Payment card and bank account details are collected and processed directly by our third-party payment processor; we do not store full card numbers.
• Communications, such as emails, chats, support requests, survey responses, and feedback.

Information collected through the Services on behalf of Customers. When End Callers interact with the Services, we collect and process, on our Customers' behalf:

• Phone numbers, caller ID information, names, addresses, and other details End Callers provide.
• Call audio and recordings, transcripts, call summaries, and call metadata (such as date, time, duration, and routing).
• Text messages and emails sent or received through the Services, including opt-in and opt-out records.
• Service requests, appointment details, lead information, and other content of the interaction.

Information collected automatically. When you use the Site or Services, we and our service providers automatically collect:

• Device and usage information, such as IP address, browser type, operating system, pages viewed, links clicked, referring URLs, and dates and times of access.
• Approximate location derived from IP address.
• Information collected through cookies, pixels, and similar technologies (see Section 8).

Information from other sources. We may receive information from business data providers, marketing partners, event organizers, public sources, referral partners, and integrations Customers connect (such as calendars and CRM systems).

Voice data. Pongg uses call audio to transcribe, understand, and respond to calls. We do not use voice recordings to create voiceprints or other biometric identifiers, and we do not identify individuals by their voice.

3. Summary of Categories

The table below summarizes the categories of personal information we collect, their sources, and the purposes for which we use them.

4. How We Use Information

We use personal information to:

• Provide, operate, and maintain the Services, including answering calls, generating transcripts and summaries, sending follow-up messages, routing leads, and providing analytics to Customers.
• Set up and manage accounts, process payments, and provide customer support.
• Communicate with you, including service notices, billing messages, and responses to inquiries.
• Market our products and services, including by email, phone, and text message where permitted by law and with any required consent.
• Monitor, troubleshoot, develop, and improve the quality, accuracy, and performance of the Services, including by using call recordings, transcripts, and messages (de-identified where reasonably practicable) to train, test, and improve our own AI models. We do not use data received through Google integrations for this purpose.
• Create de-identified or aggregated information that does not identify any individual or Customer, for benchmarking, analytics, and product development.
• Detect, prevent, and respond to fraud, abuse, security incidents, and illegal activity.
• Comply with legal obligations, enforce our terms, and protect the rights, property, and safety of Pongg, our Customers, and others.
• For any other purpose we disclose when we collect the information or with your consent.

5. How We Disclose Information

Pongg does not sell personal information for money. We disclose personal information as follows:

• Customers: information about End Callers and their interactions is made available to the Customer they contacted.
• Service providers: vendors that perform services for us, such as cloud hosting, telephone carriers, messaging providers, speech-recognition and AI model providers, payment processors, analytics, customer support, and email providers. They may use personal information only to perform services for us.
• Integrations: third-party applications a Customer chooses to connect, such as calendars and CRM systems, at that Customer's direction.
• Advertising and analytics partners: through cookies and similar technologies on the Site, as described in Section 8.
• Legal and safety: when we believe in good faith it is required by law, subpoena, or court order, or necessary to protect the rights, property, or safety of Pongg, our Customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.
• With consent: when you direct or authorize us to share information.

Text messaging data. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that help us deliver messages. This does not limit the Customer's access to End Caller information described above.

6. Information We Process for Customers (End Callers)

When you call, text, or email a business that uses Pongg, your communication may be answered, recorded, transcribed, and analyzed by the Services on that business's behalf. That business decides how your information is used and is responsible for providing any notices and obtaining any consents required by law, including for call recording and text messaging.

Pongg processes End Caller information under our Customers' instructions and our agreements with them. We do not sell End Caller information or use it to market Pongg's own products to End Callers. Separately, as permitted by our agreements with Customers and applicable law, we may use End Caller information, de-identified where reasonably practicable, to train and improve our own AI models and Services.

If you are an End Caller and want to access, correct, or delete your information, or stop receiving messages, please contact the business you called. You can stop text messages at any time by replying "STOP." If you contact us directly, we will refer your request to the relevant Customer and assist it as required by law.

7. Artificial Intelligence and Integrations

The Services use artificial intelligence, including models provided by third-party AI vendors, to understand and respond to calls and messages. Personal information may be processed by these vendors to provide the Services. We require our AI vendors to protect personal information and to use it only to provide services to us, and we seek to use vendors and settings that do not use personal information processed through the Services to train their own general-purpose models.

AI-generated content may be inaccurate. Customers are responsible for reviewing AI-generated summaries and information before relying on them.

Integrations. Customers may connect third-party applications to the Services, such as calendars, CRM, field-service, and scheduling systems. When a Customer connects an integration, we access, store, and update the data needed for the integration to work (for example, checking availability, creating and updating appointments, and syncing lead and job details), and we store authorization tokens in encrypted form. We use integration data only to provide the Services to that Customer and do not use it for advertising.

Google user data. If a Customer connects a Google account (such as Google Calendar), Pongg accesses calendar lists, events, attendees, and free/busy information to check availability and create, update, or cancel appointments booked through the Services. Pongg's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train general-purpose AI models, and humans do not read it except with the Customer's consent, for security purposes, to comply with law, or as needed to operate the Services.

Disconnecting an integration. Customers can disconnect an integration at any time in their account settings or through the third-party provider (for Google, at myaccount.google.com/permissions). Disconnecting stops the related features from working. Upon disconnection or account deletion, we delete stored authorization tokens and cached integration data within 30 days, except as required by law.

8. Cookies and Tracking Technologies

We and our partners use cookies, pixels, tags, and similar technologies on the Site to operate the Site, remember preferences, understand how visitors use the Site, and measure and improve our marketing, including by showing ads on other websites.

You can control cookies through your browser settings or by enabling Global Privacy Control. Blocking some cookies may affect how the Site works.

Global Privacy Control. Where required by law, we treat a Global Privacy Control (GPC) signal sent by your browser as a request to opt out of targeted advertising and the "sale" or "sharing" of personal information through the Site for that browser. The Site does not otherwise respond to "Do Not Track" signals.

9. Data Retention

We keep personal information for as long as needed to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Call recordings, transcripts, and messages processed for Customers are kept according to our standard retention settings and the Customer's instructions, and are kept for as long as the Customer's account is active and for one (1) year after the account ends, after which they are deleted, except where retention is required by law or the data is in routine backups that are overwritten over time. We may keep de-identified or aggregated data, which can no longer reasonably be linked to an individual or Customer, for analytics and to improve our Services. Customers may request earlier deletion of their recordings by contacting legal@pongg.com.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Choices

• Marketing emails: use the unsubscribe link in any marketing email.
• Text messages: reply "STOP" to any text message to opt out. Reply "HELP" for help.
• Calls: ask to be placed on our internal do-not-call list.
• Cookies: adjust your browser settings or enable Global Privacy Control.
• Account information: Customers can update account information in their account settings or by contacting us.

Even if you opt out of marketing, we may still send service, billing, and account messages.

12. State Privacy Rights

Depending on where you live, including in California, Texas, Colorado, Connecticut, Virginia, and other states with consumer privacy laws, you may have some or all of the following rights, subject to legal exceptions:

• Know and access: to confirm whether we process your personal information and to obtain a copy of it, including the categories of information, sources, purposes, and recipients.
• Correct: to correct inaccurate personal information.
• Delete: to delete personal information we have collected from you.
• Withdraw consent: where we rely on your consent, to withdraw it at any time, without affecting processing before withdrawal.
• Portability: to receive your personal information in a portable format.
• Opt out: of targeted advertising, the "sale" or "sharing" of personal information, and profiling that produces legal or similarly significant effects.
• Limit sensitive information: we do not use or disclose sensitive personal information for purposes that require an opt-out or consent under applicable law.
• Non-discrimination: we will not discriminate against you for exercising your rights.

How to make a request. Email legal@pongg.com with the subject line "Privacy Request," or use any request form we provide on the Site. We will verify your request by matching information you provide with information we hold, and we may ask for more information to do so. You may use an authorized agent, who must provide proof of authorization. We will respond within the time required by law.

Appeals. If we decline your request, you may appeal by emailing legal@pongg.com with the subject line "Privacy Appeal." We will respond to your appeal within the time required by law. If you are not satisfied, you may contact your state attorney general.

End Caller requests. Requests about information we process for Customers should be made to the relevant Customer, as described in Section 6.

California disclosures. In the past 12 months, we have collected the categories of personal information described in Section 3 and disclosed them for business purposes to the categories of recipients described in Section 5. We do not sell personal information for money. We may "share" identifiers and internet activity with advertising partners for cross-context behavioral advertising through cookies on the Site; you may opt out as described in Section 8. We do not knowingly sell or share the personal information of consumers under 16.

13. Children

The Site and Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16 for our own purposes. If you believe a child has provided us personal information, contact us at legal@pongg.com and we will delete it as appropriate.

14. Data Location

Pongg is based in the United States, and personal information is stored and processed in the United States and in other countries where our service providers operate. The Site and Services are intended for businesses located in the United States.

15. Disputes

Any dispute relating to this Privacy Policy or our privacy practices is subject to the dispute resolution, arbitration, and governing law provisions of our Terms of Service, to the extent permitted by law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and change the "Last Updated" date. If we make material changes, we will notify Customers by email or through the Services before the changes take effect.

17. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

• Pongg Inc.
• Email: legal@pongg.com