Privacy Policy
Last updated: June 2, 2026
This Privacy Policy describes how Ping2Buy ("we", "us", or "our"), operated by Intequra Consulting and Advisory Service FZE, collects, uses, and protects information when you use our platform at ping2buy.com and related services (the "Service").
We are committed to protecting your privacy and being transparent about our data practices.
1. Information we collect
When restaurants ("Tenants") use our platform, we collect:
Account information:
- Email addresses of restaurant staff with dashboard access
- Phone numbers registered for WhatsApp messaging
- Names and roles of authorized users
- Business name, address, and trade license information
Business information:
- Menu items, prices, categories, and product descriptions
- Restaurant configuration and operating settings
- WhatsApp Business Account identifiers and phone number IDs
Order data:
- Customer phone numbers who message restaurants
- Customer-provided delivery addresses
- Order details (items, quantities, totals)
- Order status and fulfillment information
- Message content within order conversations
Technical data:
- IP addresses and device/browser information
- Service usage logs and audit records
- Error logs for service operation
2. Data received from Meta / WhatsApp Business Platform
Our Service integrates with Meta's WhatsApp Business Cloud API. Through this integration, we receive:
- Customer phone numbers (when customers message our Tenants' WhatsApp Business numbers)
- Customer message content (text, button taps, list selections) sent to Tenants
- WhatsApp profile names where shared by customers
- Webhook event data including delivery, read, and failure statuses
We process this data solely to facilitate ordering between customers and restaurants. We do not:
- Sell this data to third parties
- Use this data for advertising or marketing
- Share this data outside what is necessary for service operation
- Retain message content longer than necessary for order fulfillment
3. How we use information
We use collected information to:
- Operate the WhatsApp ordering platform
- Process orders between customers and restaurants
- Send WhatsApp messages on behalf of restaurants (menus, confirmations, status updates)
- Authenticate restaurant staff and protect account access
- Improve service reliability and security
- Detect and prevent abuse or fraud
- Comply with legal obligations
4. Legal basis for processing (GDPR)
For users in the European Economic Area, our legal bases are:
- Performance of a contract (operating the Service)
- Legitimate interests (security, fraud prevention, service improvement)
- Consent (where specifically obtained)
- Legal obligation (compliance with applicable laws)
5. Data sharing
We share data only with:
- Meta Platforms Inc. — for WhatsApp Business Platform message delivery
- Hetzner Online GmbH — for hosting infrastructure (Germany)
- Service providers strictly required for operations (e.g., email delivery)
We do not sell personal data to anyone. We do not share data with advertisers, data brokers, or marketing services.
6. Data retention
- Account data: retained while the account is active and for 90 days after closure
- Order data: retained for 2 years after order completion for business records, then deleted
- Customer conversation states: retained for 30 days after last activity
- Message content: retained only as needed for order fulfillment, then archived
You may request earlier deletion as described in Section 7.
7. Your rights and data deletion
Depending on your location, you have rights to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to erasure")
- Restrict or object to processing
- Data portability
- Withdraw consent (where applicable)
To delete your data:
- Restaurant accounts: email admin@noortechpro.com with subject "DELETE MY ACCOUNT" — we will delete all account, business, and customer data associated with your tenant within 30 days
- Customers (end users who messaged a restaurant): contact the restaurant directly, or email admin@noortechpro.com with your phone number and reasonable proof of ownership; we will delete your data within 30 days
Meta requires us to process deletion requests within 90 days; we typically complete them within 30.
8. Security
We implement reasonable security measures including:
- HTTPS encryption for all data in transit
- Encrypted storage of authentication tokens
- Multi-tenant data isolation enforced at the database level
- Regular security updates and access controls
- Audit logging of administrative actions
No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. International data transfers
Our infrastructure is hosted in Germany (Hetzner). Meta's WhatsApp Cloud API processes data in the United States and other regions. By using our Service, you acknowledge that your data may be processed outside your country of residence under appropriate safeguards.
10. Children's privacy
Our Service is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately so we can delete it.
11. Changes to this policy
We may update this Privacy Policy. We will post revisions on this page and update the "Last updated" date. For material changes, we will notify active accounts via email.
12. Contact us
For privacy questions, data requests, or concerns:
Email: admin@noortechpro.com
Business: Intequra Consulting and Advisory Service FZE, United Arab Emirates
See also our Terms of Service at https://ping2buy.com/terms