Pally procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ You can request a copy of the safeguards we rely on for these transfers, including the relevant Standard Contractual Clauses, by emailing privacy@pally.com.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right of access (Art. 15) Right to rectification (Art. 16) Right to erasure, the right to be forgotten (Art. 17) Right to restriction (Art. 18) Right to portability (Art. 20) Right to object to processing (Art. 21)” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Pally Technologies, Inc. is based in the United States, and your data may be processed there. If you are located in the EU or UK, we rely on legally recognized safeguards for these transfers:” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ You can exercise any of these rights at any time by contacting privacy@pally.com, and we may take reasonable steps to verify your identity. If you are in the EU or UK and you are not satisfied with how we handle your request, you can complain to the data protection authority where you live or work, or to the UK Information Commissioner's Office. Many controls are also available right in the chat: you can ask Pally what it remembers, tell it to forget something, or disconnect any connected app. You can also download a copy of your Pally account data from your dashboard.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right not to be subject to automated decision-making (Art. 22) Right to lodge a complaint with a supervisory authority (Art. 77)” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Messages and Pally's replies, memory, saved assistant presentation settings, saved contact details, call transcripts, saved files, finance data, location data, and tenant-scoped email-observation, task, automation, and action records may be retained while your account is active. You can delete supported individual items in chat or the dashboard, ask Pally to forget a saved detail, or ask it to delete your data. Removing one saved contact detail does not delete an underlying message or historical work record that also contains it. Deleting your account deletes these tenant-scoped items and archived agent-work records from Pally's systems, subject to the exceptions below. Account deletion: Pally removes and verifies deletion of your tenant-scoped account data. Billing records that we must keep for legal obligations remain. Messages you shared into a group remain available to that group after Pally removes their link to your account. Short-term memory-consolidation quality records can remain for up to seven days after deletion. Pally also retains a limited deletion receipt, scrubbed audit and referral attribution records, and a deleted-account identifier with lifecycle timestamps for verification, security, fraud prevention, and legal compliance. To enforce and review age restrictions, we retain the stated age and a short excerpt in restricted account audit records while the account exists, and in diagnostic logs for up to six months. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ You can ask Pally to keep structured logs of things you choose to track, such as meals, workouts, medications, or expenses. Entries are stored so Pally can answer questions about your totals and trends, and they appear in your dashboard. You can correct or delete individual entries in chat, archive a whole tracker, and everything is deleted with your account.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ LinkedIn: your session stays in your Mac's Keychain and never reaches Pally's servers; the connections and message history cached on your Mac, and their search embeddings, are deleted when you disconnect LinkedIn or delete your data. Apple Notes: read on demand from your Mac through a folder grant you give the companion app; nothing from your notes is copied to Pally's servers, and access ends the moment you revoke the grant in the companion app. Personal referral invites: pending introductions are removed with the referrer's data, and the introduction on a completed referral is scrubbed when either account is deleted or reset. Linked bank accounts: unlinking deletes the balances and transaction summaries stored by Pally and revokes access at Plaid. AI processing: handled by AI providers configured so your data is not used to train AI models, under their privacy policies and API data commitments. Secure browser sign-in: session credentials are stored, fully encrypted, by our browsing providers to keep you signed in, and removed when you disconnect or delete. Account and authentication data: kept while you maintain an account. Internal analytics and service-quality records: we use records of how Pally performs, including where it falls short, to keep the service reliable and improving. Individual records are retained for a limited period, and we may keep de-identified, aggregated statistics that do not identify you, including after account deletion. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Support communications: kept only as long as needed to resolve your issue.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Pally stores attachments and emails you explicitly ask it to save, along with files it creates for you, such as spreadsheets and PDFs. Files are encrypted, subject to size caps, and deletable at any time.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “Account deletion scrubs the audit detail; those logs expire on their retention schedule. After account deletion, we retain revoked Pally email addresses and their provider identifiers. These records no longer contain your account link or display name. A custom email address can still identify you. Service communications: campaign message copy and aggregate delivery results are retained as operational records. When you delete your account, recipient-level account, connection, conversation, and provider identifiers are removed or anonymized, and delivered chat messages are deleted with your conversations. Connected apps (other than WhatsApp): Pally accesses data when you make a request, when a saved automation runs, or when an enabled observation or contact-sync feature receives or refreshes the data it needs. Pally does not bulk-copy entire connected accounts. It keeps only the information described in this policy, including observed email records, memories and contact details derived while helping you, and files you ask it to save. Outreach lists: retained while the list is active so Pally does not contact anyone twice. You can ask Pally to delete a list or an individual entry, and every list is deleted with your account. WhatsApp: processed and stored on a dedicated per-user server, encrypted in transit and at rest, and removed when you disconnect or request deletion. Cloud Mac: your Apple ID password is used once to sign your dedicated Mac in to iMessage, never stored, and the dedicated Mac is signed out and wiped when you turn Cloud Mac off or delete your data. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Pally is intended for adults, and you must be at least 18 to use it. If a user states that they are under 18, Pally suspends the account. Existing account data remains until deletion. To enforce and review that restriction, we retain the stated age and a short excerpt in restricted account audit records while the account exists, and in diagnostic logs for up to six months. Account deletion scrubs the audit detail; those logs expire on their retention schedule. Contact privacy@pally.com to request deletion of account data.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We use first-party, internal analytics and private agent-turn quality records to keep Pally reliable and improve response quality. These records can include your request, task context from connected accounts, model output, and the tool names and results used for a turn. Tenant-scoped agent-turn records are encrypted and deleted with your account. Short-term memory-consolidation quality records are encrypted and expire within seven days, including after account deletion. We do not use these records for advertising. We use Google Analytics on our website to understand which pages are useful. We do not use advertising trackers, and we do not send marketing emails.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ When you ask Pally to refer a friend personally, the short introduction you approve - their name and how you think Pally could help them - is stored so their Pally can be genuinely useful from their first message. The same applies in reverse: if a friend referred you personally, your Pally may start off knowing the introduction they shared. Either of you can ask Pally to forget it at any time, and it is scrubbed automatically when either account is deleted or reset.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ We may suspend or terminate your access to the Service at our discretion, including if you violate these Terms, if we discontinue the Service, or if we reasonably believe your use poses a risk to you, to us, or to others. You may stop using Pally at any time. On termination, your right to use the Service ends, and we will handle your data as described in the Privacy Policy, including deleting it at your request. We may retain transaction, billing, and security records after account closure as required for legal, accounting, and safety purposes. Provisions that by their nature should survive termination (such as intellectual property, disclaimers, limitation of liability, indemnification, and dispute resolution) will survive.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Website passwords and reusable credentials use our secure sign-in providers rather than chat. During a sign-in you authorize, Pally may read a short-lived verification code from a connected inbox or use one you provide, and submit it to the sign-in provider. Verification-code messages you share in chat are stored and deleted like other conversation messages. Verification codes are not saved as long-term memories. To keep you signed in for the tasks you authorize, these providers may store your session credentials, fully encrypted in transit and at rest. Their handling is governed by their own privacy policies: Kernel , Bright Data . For live availability and prices on restaurant, event, home-listing, and retail sites, Pally sends your search details, such as the site, dates, and filters, to Parse, a data provider, which returns the results under its own privacy policy. Parse receives no account credentials.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If you choose to link a bank account through Plaid, Pally stores the account balances and transaction summaries you authorize so it can answer your money questions. This access is read-only by design: Pally cannot move money, pay bills, or make transfers. Your bank credentials stay with Plaid. Pally stores access tokens encrypted in its database, with encryption keys managed by AWS KMS. Unlinking your bank deletes the stored finance data and revokes access at Plaid.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Stripe Subscription billing Payment details; we do not store full card numbers US Plaid Bank account linking, read-only Account balances and transactions you authorize US AgentCard Saved-card checkout and single-use virtual cards for purchases you approve Approved amount and checkout details; card numbers are never stored by Pally US Duffel Flight booking and flight payment processing (merchant of record; Stripe processes the card) Traveller booking details (name, date of birth, gender, title, email, phone) and flight payment transactions UK/US Kiwi.com Flight search and hosted checkout for some fares (Kiwi.com is the merchant for those bookings) Trip search details (route, dates, traveller count) and, when you book on Kiwi.com's checkout, the traveller and payment details you enter there EU Kernel, Bright Data Secure browsing and account sign-in you direct, and access to public pages Pally reads for you Encrypted session credentials, plus page content and actions for the tasks you request US ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Right to opt out of sale or sharing (we do not sell or share data for advertising)” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ You can connect Pally to AI apps like ChatGPT or Claude and talk to it from there. When you do, Pally's replies, including personal information they contain, are delivered into that app and handled under the app provider's privacy policy. You choose to connect, and you can disconnect at any time by asking Pally or revoking the app. Pally never sends anything to an AI app you haven't connected.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We name a provider here when the name changes a decision you make: it holds your money or your credentials, or it is the merchant you buy from.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ When you approve a purchase at checkout, Pally may use a payment method already saved in your connected merchant account, a card saved through AgentCard's secure vault, or a single-use virtual card issued by AgentCard. A merchant-saved card remains with that merchant: Pally selects the existing payment method but does not receive or store its card number. For AgentCard Vault payments, AgentCard handles the saved card through its secure checkout flow, and Pally does not store its card number. Single-use virtual-card details are held in memory only for checkout and are never logged; the card is capped at the exact total you approve and closed after the charge. If AgentCard requires identity verification, it happens on AgentCard's own surfaces, and Pally does not keep your identity documents.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ When you book a flight through Pally, we collect and store the traveller details needed to complete the booking: name, date of birth, gender, title, email, and phone number. Card payments for flights are processed by Duffel, our travel booking provider, acting as merchant of record with payment processing by Stripe; Pally never stores your card number. Traveller details are shared with Duffel and the airline solely to complete your booking, and are retained by Pally to prefill your future bookings until you delete them or your account. Some fares come from Kiwi.com. When you choose one, you complete payment on Kiwi.com's own secure checkout under Kiwi.com's privacy policy; Pally shares only the trip details needed to find and book that fare, and never sees your card number.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Pally can connect to third-party services (such as WhatsApp, Google, Microsoft, Slack, Notion, Linear, Granola, and others) at your direction. Your use of those services remains subject to their own terms and privacy policies. You represent that you have the right to connect each account and to authorize Pally to access and act within it. You can disconnect any service at any time, which revokes Pally's access. We are not responsible for third-party services, their availability, or their content, and you connect them at your own risk.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ If Pally is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, and it will remain subject to commitments at least as protective as this policy. We will post notice of any change of ownership on this page.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may access, preserve, or disclose your information if we believe in good faith that it is reasonably necessary to comply with a law, regulation, legal process, or enforceable governmental request; to enforce our Terms and policies; to detect, prevent, or address security, fraud, or technical issues; or to protect the rights, property, or safety of our users, the public, or Pally. Where we are legally permitted, we will make reasonable efforts to notify you of legal requests for your data.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Pally offers Free, Pro, and Max plans. If you choose a paid plan, payments are handled by Stripe. We do not store full card numbers.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ You can talk to Pally on the phone on any plan by calling the same number you text. Pally verifies that it is you with a PIN before the call can access your information. Incoming calls are not recorded. On every plan, Pally can place an outbound call with your go-ahead and can record it only after the other participant agrees. Each plan includes a monthly allowance of call minutes, and Pally Max also gets its own dedicated number to call from. Twilio carries the call and temporarily stores the original recording, and an AI provider processes the call live. Pally imports the audio into your private file store, deletes Twilio's audio copy before the recording is ready, and sends the audio into your chat only when you request it. Pally keeps the private audio and text transcript until you delete them or your account. Twilio may retain recording metadata under its own retention policy.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Pally uses this information to run the automation, track replies, avoid duplicate actions, and update contact context. Separately, Pally can read recent sent-mail recipient and timestamp metadata from connected Gmail or Outlook to update contact identity and interaction timing. These records follow the retention and deletion rules below. OAuth app connections are brokered by Composio. Pally's database stores the connection status, not the OAuth tokens. You can disconnect any app at any time, which revokes Pally's access. With WhatsApp, Pally watches connected chats only to flag messages that need you and prepare your catch-ups; it never joins or replies in your conversations, and never sends anything without your approval. So it can work in the background, your WhatsApp data is processed and stored on a dedicated per-user server, encrypted in transit and at rest. It is removed when you disconnect WhatsApp or delete the data.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We work with a small set of service providers, each bound by data-processing agreements. They process only what their function requires, and none of them receive your data for advertising.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Cloud hosting and infrastructure Running the Pally service, including the dedicated macOS instances behind Cloud Mac Account metadata, encrypted data in transit and at rest, system logs US Message and chat delivery Carrying your iMessage, RCS, SMS, and Telegram conversations with Pally Messages, media, and any location you share, in transit between you and Pally US, UAE Phone-call carriage Connecting calls with Pally Call audio and phone numbers in transit, temporary outbound-call recordings, and recording metadata retained under the carrier's retention policy US AI model providers Understanding your requests, producing Pally's replies, and processing call audio live Your request and the task context needed for that turn, under privacy policies and API data commitments that keep your content out of model training US Email delivery Pally's own email address on Pally Max Email sent and received with Pally's address US App-connection brokering Connecting the apps you authorize (MCP access) Authorization to connected accounts; Pally stores connection status, not OAuth tokens US Search, research, and media creation Web search, reading public pages, and the image, photo-editing, video, and music work you ask for The query, link, or creative instruction needed for the task, which can include names from your calendar when Pally preps a meeting US Site availability and price reads Live availability and prices from restaurant, event, home-listing, and retail sites Search details (site, dates, filters); no account credentials US Meeting-notes integration Reading your meeting notes when you connect that app Your meeting notes, accessed on demand as authorized US Website analytics Understanding which pages on our website are useful Aggregated” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ website usage; never used for advertising US Task-specific lookups Narrow lookups for tasks you request, such as flight status or weather Only the specific query needed for that task US ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not sell or share your data with advertisers. Every company in the categories above is named, with its purpose and region, on our subprocessors page, which we keep current: Subprocessors . ” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Pally offers Free, Pro, and Max plans. Payments for paid plans are processed by Stripe. The applicable fees, billing cycle, and payment processor are presented to you before you are charged. Subscriptions renew automatically unless cancelled; we may change pricing with notice, and continued use after a change takes effect constitutes acceptance; you may cancel at any time and keep access through the end of the paid period; and refunds are granted at our discretion. Prepaid usage credits do not expire while your account is open. Credits are non-refundable and any remaining balance is forfeited when your account is deleted.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Use the Service in a multi-user, organizational, or enterprise environment, except through collaboration features Pally provides or with our written permission Interfere with, disrupt, or overload our systems, APIs, or infrastructure We reserve all rights not expressly granted.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.