Privacy Policy
Last updated: July 11, 2026
What Pell is
Pell is a memory assistant that works through WhatsApp and Instagram. You send it things you want to remember (text, voice notes, photos, reels, links, documents) and it saves them. When you want something back, you ask.
What we store
- Extracted text from your messages. If you send a voice note, we transcribe it and store the transcript. If you send a photo, we describe/read it and store that description. If you send a document, we extract the text content.
- Your account identifier: your phone number (WhatsApp) or Instagram user ID. This is how we keep your notes separate from others.
- Conversation metadata: timestamps and what operations were performed (save, search, delete).
We do NOT store your raw media. Photos, voice recordings, and documents are processed in memory and discarded immediately. Only the extracted text is kept.
What we do NOT do
- We do not use your data to train any AI model.
- We do not sell your data to anyone.
- We do not share your data with advertisers or third parties for their purposes.
- We do not read your notes. Access to production data is restricted.
Who processes your data
To understand your messages (classify them, transcribe voice, read images), we send them to OpenAI's API. Here is what that means:
- We have a signed Data Processing Agreement (DPA) with OpenAI Ireland Ltd., effective July 11, 2026.
- OpenAI does not train on API inputs. This is contractually binding, not just a policy.
- Voice transcriptions have zero data retention at OpenAI.
- Text and image inputs are retained by OpenAI for up to 30 days for abuse monitoring, then permanently deleted.
- Data transfers between the EU and US are covered by Standard Contractual Clauses (SCCs).
Our database is hosted on infrastructure that encrypts data at rest (AES-256) and in transit (TLS 1.2+).
How long we keep your data
- Your notes: Until you delete them. They do not expire.
- Your profile: As long as you use Pell.
How to delete your data
- Email us at hi@pellbot.com to delete specific notes or wipe all your data. We respond within 30 days.
- Self-serve deletion from the user dashboard is coming soon.
Security
- Database encrypted at rest.
- All connections over TLS.
- No raw media files stored.
- Production access restricted.
- Messages in transit are protected by platform encryption (WhatsApp end-to-end encryption; Instagram encrypted DMs).
Children
Pell is not for anyone under 16. If you believe a child has used Pell, contact us and we will delete their data.
Changes
If we change this policy in a meaningful way, we will notify you via chat.