← Ping by SEAES Last updated: 10 April 2026

Privacy Policy

How Ping by SEAES collects, uses, and protects your data — including the Meta (Facebook) permissions we request and why.

1. Who we are

Ping by SEAES is operated by SEAES, a partnership firm registered in India, based in Nagpur, Maharashtra, India. We act as an independent software provider — we are not an agent, reseller, or affiliate of Meta Platforms, Inc.

2. What data we collect

Data you provide directly

• Account details — name, work email, phone number, company name, billing address
• WhatsApp Business Account (WABA) identifiers, phone number IDs, display names
• Contacts, message templates, broadcast lists, chat history you upload or sync
• Payment information processed by our payment gateway (we never store full card numbers)

Data we receive from Meta when you connect your account

• Long-lived Meta user access token (encrypted at rest with AES-256-GCM)
• Facebook user ID, name, email address (via public_profile and email scopes)
• Ad account IDs, balances, currencies, time zones
• Facebook Page IDs, names, and metadata you grant us access to
• Business Manager, WABA, and phone number metadata for setup

Data we collect automatically when you use the service

• IP address, browser type, device type (standard web server logs)
• Feature usage (anonymized analytics)
• Error logs scrubbed of personal data

3. Meta permissions (scopes) we request and why

When you click Connect with Facebook in Ping's Setup Wizard, we request the following 15 permissions. You are shown this list by Meta's consent dialog before any data is shared. You can opt out of any individual permission — the features depending on it will simply be disabled.

Permission	What we do with it
public_profile	Show your name in the Ping setup UI so you know which account is connected.
email	Pre-fill the billing contact and send setup confirmation email.
ads_read	Display your existing Meta campaigns and ad sets inside Ping's Campaigns tab (read-only).
ads_management	Create, pause, resume, and delete campaigns you launch from Ping. We never change campaigns you created outside Ping without your explicit action.
pages_show_list	List your Facebook Pages during the Setup Wizard so you can pick which one publishes ads.
business_management	Discover the Business Manager, WABAs, and ad accounts you own so Ping knows which ones to work with.
pages_manage_metadata	Link your WhatsApp number to your Facebook page so Click-to-WhatsApp ads open a real chat (not a fallback web URL).
pages_read_engagement	Read engagement metrics on your own Page posts so we can show you which content is converting.
pages_manage_ads	Publish and manage ads attached to your Facebook Page.
pages_manage_engagement	Reply to comments or mentions on ad-originated posts when you ask us to.
pages_read_user_content	Read the content of user-submitted posts/comments on your page so we can surface them in Ping's inbox.
pages_messaging	Show previews of messages from users who tap a Click-to-WhatsApp ad inside Ping's unified inbox.
page_events	Receive conversion events from Meta's Conversion API for accurate attribution.
catalog_management	Run dynamic product ads from your Meta catalog — only if you enable that feature.
leads_retrieval	Sync leads submitted via Meta Lead Ads into Ping's Leads tab and into your CRM workflows.

We also request whatsapp_business_management and whatsapp_business_messaging for the WhatsApp Business API (messaging, templates, webhooks). These are governed by the WhatsApp Business Platform Terms.

4. How we use your data

• Provide the service — run your campaigns, deliver your messages, show your analytics
• Improve the product — aggregate anonymized usage data to decide what to build next
• Security — detect abuse, prevent fraud, respond to incidents
• Legal compliance — respond to valid subpoenas, tax obligations, audit requirements

We do not sell your data. We do not share it with advertisers. We do not use it to train external AI models.

5. How long we keep it

• Encrypted Meta tokens — until you disconnect or Meta invalidates them (whichever first)
• Message history — 90 days rolling, unless you configure a longer retention
• Contacts — until you delete them or request deletion
• Billing records — 8 years, per the Indian Income Tax Act
• Server logs — 30 days

6. Your rights

Under India's Digital Personal Data Protection Act, 2023, the EU GDPR, and California's CCPA, you have the right to:

• Access a copy of your personal data — email [email protected]
• Correct inaccurate data
• Delete your data (see our data deletion page)
• Port your data to another service
• Object to certain processing
• Withdraw consent — disconnect your Meta account from Ping at any time via the Setup tab

We respond to verified requests within 30 days.

7. Data security

• All Meta user access tokens are encrypted at rest with AES-256-GCM, unique IV per record
• Every Graph API call is signed with appsecret_proof (HMAC-SHA256) to prevent replay attacks
• All traffic uses TLS 1.2+ (HTTPS enforced)
• Database access is restricted to the Ping backend process
• We keep a 90-day audit log of access to sensitive fields

8. International transfers

Our servers are located in India and Germany. When you connect Meta, data is transferred via encrypted channels to Meta's global infrastructure per their Platform Terms.

9. Children

Ping is a B2B tool. We do not knowingly collect data from anyone under 18.

10. Changes to this policy

We will post updates here and notify account holders by email for material changes. Continued use after notification constitutes acceptance.

11. Contact us

Privacy queries: [email protected]
Data deletion requests: ping.seaes.ai/legal/data-deletion/
Grievance Officer (India DPDP Act): Vaibhav Kochar, [email protected]