Privacy Policy

This Privacy Policy explains how Doppler HQ, Inc. ("Pebble", "we", "us") collects, uses, and shares information when you use Pebble via WhatsApp or our website at pebble.exchange. If you have questions, email us at hi@pebble.exchange.

1. What we collect

We collect only what we need to make the intro work.

• Information you give us in chat. When you talk to Pebble on WhatsApp, we store the messages you send, and things you share in them — your name, city, email address, what you're looking for, what you can help others with, people you'd vouch for, and any links (LinkedIn, personal site) you share.
• Your WhatsApp phone number. We receive it from WhatsApp each time you message Pebble, and we use it as your account identifier.
• Your email address, once verified. If you choose to verify an email (by sending Pebble a note from that address), we store it and mark it verified.
• Calendar availability, only if you grant it. If you grant Pebble access to your Google Calendar to schedule an intro meeting, we read your free/busy times and create the meeting event you approve. We do not read the content of your other events.
• Public profile pages you share. If you paste a LinkedIn URL or personal website, we may fetch the public page to enrich your profile.
• Delivery signals. When we send email intros, we receive delivery, bounce, and complaint signals from our email provider so we can stop sending to bad addresses.

We do not ask for or handle payment information at this time. We do not track you across other websites.

2. How we use it

We use what you share to:

• Understand what you're looking for and match you with someone in the Pebble network who might fit.
• Ask the potential match on your behalf, and — only if they say yes — offer the intro back to you.
• Send the intro email (or schedule the calendar meeting, if you opted in) once both sides agree.
• Improve Pebble's replies and matching quality.
• Keep the service safe and running, and comply with law.

We do not sell your personal information. We do not use your messages or profile to train third-party foundation models. If we ever want to train our own model on user content, we will ask for your consent first.

3. Who we share it with

Pebble relies on a small set of service providers to operate. The messages and profile data you share with Pebble may be processed by:

• Meta (WhatsApp Business Cloud API) — to receive your messages and send our replies.
• Google Cloud (asia-southeast1) — to host our servers and database.
• Google Vertex AI (Gemini) — to run the conversational model that reads your messages and drafts replies. Vertex AI is configured as a data processor; per Google Cloud's terms, your prompts and responses are not used to train Google's foundation models.
• Bird (SparkPost) — to send and receive email on Pebble's behalf.
• Google Calendar API — only if you grant calendar access, and only to read free/busy and create the intro meeting you approve.
• Third-party LinkedIn enrichment providers accessed via the RapidAPI marketplace — used narrowly to enrich profile information you share with us. The specific provider may change; we choose providers that offer commercially reasonable data-handling terms.

We share the minimum information each provider needs to do its job. We do not share your information with advertisers.

4. How intros work — what we share with other users

Pebble is a warm-intro service. It only shares your identity with another user in two situations, and only after you both say yes.

• When someone is looking for help you might give, Pebble asks you first — anonymously describing the ask. If you say yes to being introduced, Pebble then asks the person looking for help whether they'd like the intro too.
• When both sides say yes, Pebble exchanges each side's name, phone number, and (where available) email address. From that moment, the two of you talk directly. Pebble steps back.

Your name and contact details are never shared with someone who has not said yes to being introduced. Your ask or offer may be described anonymously to another user to see whether they'd like an intro.

5. How long we keep it

We keep your profile and intro history for as long as your Pebble account is active, so we can stay useful to you and continue to make matches. WhatsApp message contents in our systems are kept while the account is active and, for accounts that have gone inactive without asking us to delete them, for up to 12 months afterwards.

If you ask us to delete your account, we remove your identifying profile information within 30 days. Backups may take up to a further 30 days to fully rotate. We may retain a limited set of records for longer where the law requires it, or where we need them to defend a legal claim.

6. Security

We use technical and organisational measures we consider appropriate to protect your data — encryption in transit (HTTPS), encryption at rest for sensitive fields (calendar tokens are encrypted with keys held separately from our database), logged staff access, and short-lived credentials for our staff.

We do not currently hold SOC 2, ISO 27001, or similar third-party security certifications, and we do not claim any. No online service is perfectly secure. If we ever discover a data breach that affects you, we will notify you without undue delay and as required by law.

7. Your rights

Depending on where you live, you may have rights under laws such as the EU / UK General Data Protection Regulation, the California Consumer Privacy Act, the Hong Kong Personal Data (Privacy) Ordinance, and similar consumer-privacy laws in your jurisdiction. These include the right to:

• Ask what personal data we hold about you and receive a copy.
• Ask us to correct information that is inaccurate.
• Ask us to delete your data.
• Withdraw consent for optional integrations (for example, revoke calendar access) at any time.
• Object to or restrict certain processing.

To exercise any of these rights, email us at hi@pebble.exchange. We respond as soon as we can — typically within 30 days where practicable, and in any case no later than the period required by applicable law.

You can also revoke Pebble's access to your Google Calendar at any time from your Google Account settings.

If you live in the EU, UK, or Switzerland you can complain to your local data protection authority. If you live in Hong Kong you can complain to the Office of the Privacy Commissioner for Personal Data (PCPD). If you live in the United States you can raise a complaint with the Federal Trade Commission or your state Attorney General.

8. Age

Pebble is intended for people aged 18 and over. If you are younger than 18, please do not use Pebble. If we learn that we have collected information from someone under 18, we will delete it.

9. International transfers

Pebble is operated by Doppler HQ, Inc., a United States corporation. Our primary hosting and database sit in Google Cloud's asia-southeast1 region (Singapore). Some of our service providers process data in other countries (for example, Meta's WhatsApp Cloud API and Bird operate globally). Where required, we rely on standard contractual clauses and other lawful transfer mechanisms provided by our processors.

10. Google API Services Limited Use

Pebble's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice: we use Google Calendar access only to check your free/busy times and create the intro meeting you approve. We do not use calendar data for advertising, we do not sell it, we do not let humans read it except when you ask for support or where required by law, and we do not use it to train AI models.

11. Automated processing

Pebble uses automated processing to suggest possible matches between people in the network. A match is only ever surfaced to another user after Pebble asks them and they say yes, and after you separately confirm the intro. No automated decision by Pebble has a legal or similarly significant effect on you — a real person on the other side always gets the final say before any intro happens.

12. Cookies and analytics

pebble.exchange does not currently use analytics cookies, tracking pixels, or third-party trackers. If we add analytics in future, we will update this policy and, where required, ask for your consent first.

13. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date and, where appropriate, notify you via WhatsApp or email. Continued use of Pebble after a change means you accept the updated policy.

14. Contact

For privacy questions or to exercise your rights, email hi@pebble.exchange. We have not appointed a formal Data Protection Officer; privacy queries are handled by the small team behind Pebble at the same address.

Data controller: Doppler HQ, Inc., 3830 94th Ave NE, Yarrow Point, WA 98004, United States.