The paperwork, written to be read
Four documents. Each says what actually happens rather than what a generator thought a company like this might do, and each one includes the part its genre usually leaves out — what we collect and refuse to, and what we have not built.
Last updated 27 August 2026
Draft. These describe how pinguHQ works today and have not yet been reviewed by a lawyer. If something here matters to a decision you are making, ask us first: hello@pinguhq.com.
- Privacy policyWhat we collect, who else sees it, how long we keep it, and how to get it back or get rid of it.
- Terms of serviceThe agreement for using pinguHQ, including acceptable use, billing and refunds, and what we do and do not promise.
- SecurityHow tenants are isolated, how outbound checks are fenced in, and the certifications we do not have.
- SubprocessorsEvery third party that touches customer data, what each one does, and what each one can see.
Need a signed data processing agreement, a security questionnaire filled in, or an answer that is not in any of the four? Email hello@pinguhq.com and a person will reply. We do not have a SOC 2 report or an ISO certificate, and the security page says so in a list rather than making you find out at the end of a procurement cycle.