Legal

Privacy Policy

Last updated: April 28, 2026 · Effective date: April 28, 2026

Piggyback (“Piggyback,” “we,” “us”) operates the website at https://piggybk.app/ and the business messaging service of the same name. This policy describes how we collect, use, share, and protect personal information.

This policy applies to: (a) visitors to our website, (b) people who join our pre-launch waitlist, (c) end-users who receive SMS messages from businesses using our platform, and (d) businesses that subscribe to Piggyback once the platform is generally available.

1. Information we collect

1.1 From visitors and waitlist members

When you visit piggybk.app or join our waitlist, we may collect:

• Name and work email address (required for waitlist)
• Company name and vertical (industry segment)
• Phone number (optional)
• Free-text description of what you’re hoping to solve (optional)
• Standard analytics data (browser, IP, referrer, device type) via the website

1.2 From end-users who receive SMS via Piggyback

If you receive a text message sent through Piggyback’s platform, we process the following on behalf of the sending business:

• Your phone number
• The message content sent to you and any replies you send
• Delivery status, timestamps, and carrier metadata
• Opt-in records: when, how, and what disclosure you saw when you consented
• Opt-out records: when you replied STOP and on what number

We do not share mobile information with third parties for promotional or marketing purposes. No mobile information collected via SMS opt-in is sold, rented, or shared to third parties for their marketing.

2. How we use information

We use information for the following purposes:

• To operate, maintain, and improve the Piggyback service
• To respond to waitlist inquiries and notify you when access is available
• To enable businesses on our platform to send and receive messages with their consenting end-users
• To produce litigation-ready audit trails of consent and message events as required by TCPA, state law, and carrier rules
• To meet our compliance obligations under TCR (The Campaign Registry), 10DLC carrier rules, and other applicable regulations
• To detect, prevent, and respond to fraud, abuse, and security incidents

3. SMS messaging consent and opt-out

If you receive SMS messages through a business using Piggyback, your phone number was provided to that business with your consent. By submitting your number to a business or via our website, you agreed to receive SMS messages on the topics disclosed at the time of opt-in.

Message frequency varies based on your activity and the business’s use case. Standard message and data rates may apply, depending on your wireless carrier plan.

You can opt out at any time by replying STOP to any text message. We will send a single confirmation message acknowledging the opt-out, and you will receive no further messages from that sender on that number unless you explicitly re-subscribe.

For help, reply HELP to any message, or contact hello@piggybk.app.

Opt-out lists are maintained per business and per phone number. Re-subscription requires explicit affirmative consent.

4. How we share information

We share information only as needed to operate the service, comply with the law, or with your authorization. Categories of recipients include:

• Service providers under contract — communications platform-as-a-service vendors who deliver SMS on our behalf, cloud hosting providers, and analytics tools. Each is bound by data-protection terms.
• Carriers — wireless network operators that deliver messages to handsets. Required for the service to function.
• The Campaign Registry (TCR) — for brand and campaign registration data required by federal carrier rules.
• Legal authorities — when required by law, court order, or to protect rights, property, or safety.
• In a business transfer — in connection with a merger, acquisition, financing, or sale of assets, with notice provided where legally required.

We do not sell or rent personal information. We do not share mobile information with third parties for their direct marketing.

5. Data retention

We retain consent records, opt-out events, and message metadata for at least five (5) years to satisfy TCPA litigation safe-harbor requirements and applicable state record-retention laws. Message content may be retained for shorter periods at the sending business’s discretion. We delete or de-identify data when retention obligations no longer require it.

6. Security

We use industry-standard security practices: encryption in transit and at rest, access controls, audit logging, and limited employee access on a need-to-know basis. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify you as required by law.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict use of your personal information, and to data portability. To exercise any of these rights, email hello@piggybk.app with the subject “Privacy Request.” We will respond within thirty (30) days.

California residents: the California Consumer Privacy Act (CCPA/CPRA) gives you specific rights including the right to know, delete, and opt-out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

8. Children’s privacy

Piggyback is intended for use by businesses and adults. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. International users

Piggyback is operated from the United States. By using the service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated via the website or, where required, by email.

11. Contact

Questions about this Privacy Policy or our data practices?

Email: hello@piggybk.app
Website: https://piggybk.app/