1. Who we are
The data fiduciary/controller is PagerCo India Ltd., Bangalore, Karnataka, India. Privacy contact: privacy@pagerco.ai. Grievance Officer (India): To be appointed — grievance@pagerco.ai.
2. Data we collect
- Account & profile: name, work email, phone number, job title, avatar, role, organisation.
- Authentication: managed by our auth provider (Clerk); we receive an identifier and basic profile.
- Incident & operational data: alerts, incidents, schedules, escalation policies, on-call assignments, timelines, attachments and the raw payloads sent by your monitoring tools.
- Notification data: the phone numbers, email addresses and channel preferences used to page responders, and delivery metadata.
- Billing: plan, seat count and payment status. Card details are handled directly by our payment processors — we do not store full card numbers.
- Usage & device: log data, IP address, browser type, and cookies (see our Cookie Policy).
3. How we use data
- To provide the Service — routing alerts, resolving on-call and delivering notifications.
- To operate AI features (summaries, root-cause suggestions, postmortems). Content sent to our AI subprocessor is used only to generate output for you and is not used by us to train foundation models.
- To process payments, prevent fraud and abuse, and provide support.
- To secure, monitor, debug and improve the Service.
- To send service and, where permitted, marketing communications (you may opt out of marketing).
4. Legal bases
Where the DPDP Act or GDPR applies, we process personal data on the bases of: performance of a contract; your consent (e.g. certain communications); our legitimate interests in operating and securing the Service; and compliance with legal obligations. For responder data submitted by a business customer, that customer is responsible for the lawful basis and any required notices/consents.
5. How we share data
We do not sell personal data. We share it with: (a) subprocessors that help us run the Service (hosting, database, messaging, email, AI, payments) — see /subprocessors; (b) your own organisation’s administrators and members; (c) authorities where required by law; and (d) a successor in a merger or acquisition (with notice).
6. International transfers
Our infrastructure is primarily hosted in Singapore, and some subprocessors are located in the United States and elsewhere. Where we transfer personal data across borders, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.
7. Retention
We retain personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, subject to legal, accounting or security requirements. On account termination, Customer Data is available for export for a limited window and is then deleted.
8. Security
We use industry-standard measures including encryption in transit, access controls, network isolation and least-privilege practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
9. Your rights
Subject to applicable law, you may request to access, correct, update, delete or export your personal data, withdraw consent, or nominate a representative (DPDP Act). To exercise a right, contact privacy@pagerco.ai. If we act as processor for a business customer, we will refer your request to that customer. You may also complain to the Data Protection Board of India or your local authority.
10. Children
The Service is not directed to individuals under 18, and we do not knowingly collect their data.
11. Changes
We may update this Policy and will post the new effective date. Material changes will be notified by email or in-app.
12. Contact
PagerCo India Ltd. · Bangalore, Karnataka, India · privacy@pagerco.ai.