Encryption in transit and at rest
All traffic uses TLS. Sensitive credentials and tokens are encrypted at rest and never shown in full after they are saved.
Security
Security and data protection
Your conversations, catalog and customer details should be as safe as your shop. Here is how we approach it.
Protection status
ActiveEncryptionTLS + encrypted at rest
Active
Access controlRole-based permissions
Enforced
RetentionYou decide what stays
Configurable
DeletionExport or delete on request
72h
Clear policies, no surprises
Least-privilege access
Team roles limit what each person can see and change. Access to production systems is restricted and logged.
Data minimisation
We collect what is needed to run the service. You can export or delete customer data as described in the privacy policy.
Monitoring and response
We monitor for errors and abuse, keep audit logs, and maintain a process to investigate and respond to incidents.
How we handle data
PingVend acts as a processor for the customer conversations your shop receives, and as a controller for the account and billing data you give us. In practice:
- Conversations and orders are processed to provide the service you signed up for.
- Catalog and knowledge data are used only to answer your customers accurately.
- Payment data is handled by the payment provider you connect. We do not store full card numbers.
- Marketing emails are sent only with consent, and every message includes an unsubscribe link.
Service providers
We use a small set of service providers to run the platform, including hosting, email delivery, error monitoring and payment processing. They are bound by contracts that require appropriate safeguards. A current list is available on request from [email protected].
Your choices
You can request access, correction, export or deletion of personal data. See the data deletion page or email [email protected].
Responsible disclosure
If you believe you have found a security issue, please email [email protected]. We will acknowledge your report and work with you on a fix. Please do not access or modify other people’s data.
Compliance note: this page describes current practices.
It is not a certification. Formal audit reports and data processing
agreements are available for business customers on request.
Questions about security?
Our team can walk you through data handling, retention and access controls.