Pingbo Request an invite

Privacy Policy

Last updated: July 10, 2026

Who we are

Pingbo is a product of A40 Labs, Inc., a Delaware corporation with its principal office at 10 Fitzroy House, Longfield Avenue, London W5 2JG, United Kingdom (“Pingbo”, “we”, “us”). We are committed to protecting your personal data in compliance with applicable privacy laws, including the UK and EU GDPR. Questions and requests: hello@a40.ai.

What Pingbo does

Pingbo is an AI email agent. With your explicit consent, it connects to your Gmail account to track the matters (“lines”) you are pushing forward, surface the ones going quiet, and help you draft and send replies that you review and approve. Two things follow from that which we want to be plain about: when you approve a reply, Pingbo sends it through your own Gmail account; and Pingbo keeps your Gmail tidy by reflecting what you do in Pingbo back onto your mailbox (labels, archiving, read state). It never sends anything you did not approve, and its own tidying is non-destructive and reversible: Pingbo never deletes mail on its own, and marks mail read only when you actually read it. When you trash or delete something in Pingbo, that action is carried out on your Gmail just as if you had done it there.

What we process, and why

a. Visitors to this website

pingbo.ai sets no cookies and loads no third-party trackers. Our hosting provider’s server logs may record IP addresses and request metadata for security and reliability. Legal basis: our legitimate interest in operating a secure website.

b. The invite list

If you request an invite, we store the email address you submit, solely to manage the beta and contact you about your invite. We do not use it for marketing and we do not share it. Legal basis: the steps you ask us to take before entering a contract. Ask us at hello@a40.ai and we will remove it.

c. Users of the Pingbo service

When you connect Gmail, Pingbo accesses your Gmail messages and metadata through the Google Gmail API, strictly under the OAuth scopes you grant. We store:

We use this data solely to provide Pingbo’s features to you: organizing your matters, surfacing silent ones, preparing briefs, and drafting replies that you review before anything is sent. We do not use your data for advertising. We do not sell your data. We do not share it for third-party marketing. Legal bases: performance of our contract with you, and your consent for Gmail access (revocable at any time).

AI processing

Pingbo's AI reads your messages to produce the derived records above — summaries, next steps, and drafts you review before anything is sent. The models run on our own infrastructure, never a third party's: your mail is not sent to any third-party AI provider, and models are never trained on your data.

Google API Services: the Limited Use disclosure

Pingbo’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share personal data with

Only the cloud infrastructure providers that host Pingbo, acting as processors under contract — there are no AI processing providers, because Pingbo's AI runs on our own infrastructure. We will disclose data where required by law. No other sharing occurs. A current list of sub-processors is available on request.

Where your data is stored

Depending on our providers, your data may be stored and processed in the United States, the United Kingdom, or the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

Retention and deletion

We keep your data while your account is active. If you close your account, Pingbo’s copies of your data are purged. Before closing, you can ask us at hello@a40.ai for an export of your data. Closing your Pingbo account never deletes or alters your Gmail account itself. Your Gmail stays yours.

Security

Data is encrypted in transit (TLS). Your mailbox credentials are encrypted with AES-256-GCM, under keys held separately from the data. Message bodies are stored encrypted, alongside a search index derived from them. Gmail access uses scoped OAuth tokens that you can revoke at any time from your Google account settings.

Your rights

Depending on where you live, you have the right to access, correct, export, restrict, object to the processing of, and delete your personal data, and to withdraw consent at any time. Exercise any of these in the app or via hello@a40.ai. If you are unhappy with how we handle your data, you may complain to your supervisory authority; in the UK that is the Information Commissioner’s Office (ico.org.uk).

Changes

If we make material changes to this policy, we will announce them on this page and update the date above.