The plain-language rules we hold ourselves to.

Office Pigeon is the data controller for information collected through this website, our dashboard and our academy. When we build and operate systems on a client's behalf — a chatbot answering their customers, or a calling agent handling their enquiries — the client is the controller of the end-customer data and we act as their processor under a written agreement.

Contact for any privacy matter, including data-protection requests: help@officepigeon.com, or +92 335 2229301.

We collect only what a stated purpose needs.

Our products and the systems we build for clients use AI models to draft replies, transcribe calls, classify enquiries and trigger automations. These systems assist people; they do not make decisions with legal or similarly significant effects about you without human involvement. You can ask for a human to review anything an AI system produced about you.

We do not sell your data, and we do not use client or end-customer content to train our own general models. Where a third-party model provider is used, we choose configurations that exclude your content from their training wherever the provider offers it.

We share personal data only with processors who need it to deliver our service, each under a contract that limits them to our instructions: cloud hosting and storage, email and messaging delivery, telephony and speech providers for calling agents, AI model providers, payment processors, analytics, and accountants or legal advisers where required. We publish the current list on request.

We may disclose data where the law requires it, to enforce our terms, or in connection with a merger or acquisition — in which case you will be told before your data becomes subject to a different policy.

We operate from Pakistan and serve clients worldwide, so your data may be processed in countries other than your own, including the United States and the European Union. Where data leaves the UK or the EEA we rely on adequacy decisions or the UK/EU Standard Contractual Clauses together with transfer risk assessments, and we apply encryption in transit and at rest.

Depending on where you live, you have some or all of the following rights, and we honour all of them for everyone regardless of location: access to a copy of your data; correction of inaccurate data; deletion; restriction of processing; objection to processing based on legitimate interests; portability in a machine-readable format; withdrawal of consent; and the right not to be discriminated against for exercising any of them.

Under the GDPR and UK GDPR you may also complain to your supervisory authority. Under the CCPA/CPRA you may request disclosure of categories collected, deletion, correction, and opt out of "sale" or "sharing" — we do neither, and we honour Global Privacy Control signals. Under Pakistan's data-protection framework and PECA you may contact us on the same address.

Email help@officepigeon.com with "Data request" in the subject. We verify your identity, reply within 30 days, and never charge for a first request.

We use encryption in transit and at rest, role-based access, least-privilege credentials, audited admin actions, staff confidentiality agreements and regular backups. No system is perfectly secure, so if a breach affects your personal data we will notify you and the relevant authority without undue delay and within 72 hours of becoming aware of it where the law requires.

Our services are not directed at children under 16, and we do not knowingly collect their data. Academy students under 18 may enrol only with a parent or guardian, who accepts these terms on their behalf and may exercise the student's rights.

We will post any change here with a new date, and email account holders before a material change takes effect.