Privacy Policy

Pebbl lives in your WhatsApp. It reads your email, watches your calendar, and tells you what matters. Pebbl is operated by Billionaire Technologies. This Privacy Policy explains how we collect, use, store, and protect your information.

1. Consent & Opt-In

Pebbl is a fully opt-in service. By sending your first message to Pebbl and connecting your Google account, you consent to:

• Proactive notifications — Real-time alerts about important emails that need your attention (e.g., urgent invoices, investor communications, team requests).
• Briefings — Scheduled morning and evening summaries of your email and calendar.
• Reminders — Notifications you explicitly request at times you specify.
• Service messages — Responses to your messages and account-related updates.

We will never send promotional, marketing, or unsolicited messages. Every message Pebbl sends is related to your email, calendar, or reminders.

2. How to Opt Out

You can stop all messages from Pebbl at any time by:

• Sending "stop" to Pebbl on WhatsApp.
• Disconnecting your Google account by saying "disconnect google".
• Blocking Pebbl on your device.
• Emailing us at contact@pebbl.space.

Once you opt out, we immediately stop all messages, revoke Google access tokens, and delete cached email data.

3. Information We Collect

When you use Pebbl, we collect:

• Phone Number — Your WhatsApp number, used to identify your account and send messages.
• Messages — The messages you send to Pebbl, including text, voice notes, and images.
• Reminder Data — Tasks, dates, and times you set for reminders.
• Conversation History — Recent messages to provide context-aware responses.
• Timezone — Auto-detected from your phone number to deliver notifications at appropriate times.

4. Google Account Data

When you connect your Google account, Pebbl accesses:

• Gmail (read-only) — We read your email messages and metadata to identify what needs your attention. This includes sender, subject, body content, labels, and thread information.
• Google Calendar — We read your calendar events to include them in briefings, and create or manage events on your behalf when you ask.

5. How We Use Google Data

Your Gmail and Calendar data is used to:

• Filter noise — Automatically identify and skip newsletters, marketing emails, and automated notifications so only important emails reach you.
• Generate summaries — Create thread summaries that track the state of ongoing conversations (who's involved, what's pending, what was resolved).
• Send proactive notifications — Alert you via WhatsApp when an email needs your immediate attention (e.g., overdue invoices, vendor follow-ups, investor communications).
• Compile briefings — Generate morning and evening summaries of your inbox and calendar so you know what matters without checking email.
• Build your profile — Understand your role, team, and contacts from email patterns to personalize which emails are flagged as important.
• Track resolutions — Detect when you've replied to or resolved pending items, and stop notifying you about them.

Email content is processed by AI language models to generate summaries and make notification decisions. The AI does not store your email content — it processes it and returns a structured decision (e.g., "ping", "briefing", "skip").

6. Data Storage

We store the following email-related data in our database:

• Email metadata — Sender, subject, snippet, date, labels, and thread ID for every email received.
• Email body — Full email body content for non-noise emails, used to generate accurate summaries.
• Thread summaries — AI-generated summaries of email threads (1-2 sentences per thread), updated as new emails arrive.
• Decision log — A record of every notification decision (ping, briefing, skip) with the reason, for transparency and quality improvement.
• Contact profiles — Names, email addresses, organizations, and behavioral data (email frequency, reply patterns) derived from your email activity.
• Google OAuth tokens — Encrypted authentication tokens to maintain your Google connection.

Data is stored on Supabase (PostgreSQL) with encryption in transit and at rest.

7. Data Retention

• Email metadata and summaries are retained while your account is active.
• Full email body content is retained for active thread analysis and deleted when the thread is resolved or after 90 days of inactivity.
• Decision logs are retained for quality improvement and deleted after 90 days.
• Upon account deletion or Google disconnection, all email data, summaries, and tokens are permanently deleted within 30 days.

8. Google API Limited Use Disclosure

Pebbl's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google data to provide and improve the email intelligence features described in this policy.
• We do not transfer Google data to third parties, except as necessary to provide the service, comply with applicable law, or with your explicit consent.
• We do not use Google data for serving advertisements.
• We do not allow humans to read your email content unless: (a) you give explicit consent, (b) it is necessary for security purposes, or (c) it is required to comply with applicable law.

9. AI Processing

Pebbl uses AI language models (Google Gemini, Groq, Cerebras) to process your email content. When an email arrives:

• The email content is sent to the AI model as part of a prompt.
• The AI returns a structured decision (summary, action, notification text).
• The email content is not stored by the AI provider — it is processed in real-time and discarded.
• We store only the AI's output (summary, decision), not the full prompt.

10. Third-Party Services

We use trusted third-party services to operate Pebbl:

• WhatsApp Business API (Meta) — For sending and receiving messages.
• Google APIs (Gmail, Calendar) — For email and calendar access, governed by Google's API Services User Data Policy.
• AI Language Models — Google Gemini, Groq, and Cerebras for email processing. Content is processed in real-time and not stored by these providers.
• Supabase — Cloud database for data storage (PostgreSQL with encryption).
• Render — Cloud hosting for our backend service.
• Vercel — Hosting for our website.
• Deepgram — Voice transcription for voice notes.

11. Data Sharing

We do not sell, rent, or trade your personal information. We only share data with:

• Service providers necessary to operate Pebbl (listed above), bound by data processing agreements.
• Legal authorities when required by applicable law.

12. Your Rights

You have the following rights:

• Access — Request a copy of your data by emailing contact@pebbl.space.
• Deletion — Request deletion of all your data by emailing us. We will delete everything within 30 days.
• Opt-out — Stop all messages at any time by sending "stop" or emailing us.
• Disconnect Google — Revoke Google access by saying "disconnect google" on WhatsApp or emailing us. All Google tokens and cached email data will be deleted immediately.
• Correction — Request correction of inaccurate data by contacting us.

13. Security

We implement industry-standard security measures:

• All data is encrypted in transit (TLS) and at rest.
• Google OAuth tokens are stored securely and refreshed automatically.
• Database access is restricted and monitored.
• WhatsApp webhook signatures are verified using HMAC-SHA256.

14. Children's Privacy

Pebbl is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through our service. Continued use after changes constitutes acceptance of the updated policy.

16. Contact Us