Privacy Policy

Executive Summary

Engagive ("Engagive", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy ("Policy") is a legally binding agreement between you ("User", "you", or "your") and Engagive, with registered operations at 2nd Floor, 160-D Commercial Broadway, DHA Phase 8 Lahore, Pakistan, and its group companies where applicable.

This Policy explains how we collect, use, and disclose personal information collected from individuals themselves or from other third parties, and describes individuals' rights with respect to their personal information.

We may use personal information provided to us for any of the purposes described in the relevant section of this Policy or as otherwise stated at the point of collection. Our goal is to process personal information as necessary for our legitimate business purposes in a transparent manner.

This Policy covers www.engagive.io, related marketing pages, demo and contact forms, the Engagive business portal, Public APIs, SDKs, and related services where we act as a data controller for account and website data. It also explains how we process customer and end-user data when businesses use Engagive as a service provider.

This Policy is intended to align with applicable data protection and privacy laws, including requirements applicable in Pakistan and, where relevant to our customers or transfers, comparable principles under other jurisdictions. If you have questions, contact us as set forth in the Contact Us section below.

Lawful Basis for Processing

Engagive ensures that processing of personal data is carried out on a lawful basis. Depending on the context, this may include:

• Consent explicitly provided by the data subject
• Necessity for entering into or performing a contract with you or your organization
• Compliance with a legal or regulatory obligation to which we are subject
• Our legitimate interests (for example securing our services, improving products, or managing business relationships), provided such interests do not override the rights and freedoms of the data subject and do not involve inappropriate processing of sensitive personal data
• Public interest or vital interests where permitted by applicable law

We do not rely on legitimate interest as a basis for processing sensitive personal data where applicable law requires a stricter ground (such as explicit consent or another permitted basis).

What Data We Collect and How We Process It

Engagive operates a customer engagement platform where WhatsApp Business and In-App Chat (AppChat) are first-class products, with related features such as shared inbox, campaigns, AI knowledge and replies, session push, Meta WhatsApp Flows, Public APIs and business webhooks, Flutter SDK / widget, and Automations. The categories below describe how we process personal data depending on your relationship with us.

1. Business Contacts

Information collection. We collect business contact details from individuals linked to current and potential Engagive clients to manage our relationships. This may include name, employer, title, phone, email, and other business contact details. We may also record interactions from email, calendar, demo, and sales systems. We aim to collect only what is necessary and periodically review and remove outdated or irrelevant data.

Information use. We use this information to administer and develop our business and services, including managing client relationships; providing customer support; identifying needs and improving delivery; performing sales and account analytics; maintaining IT systems; hosting or facilitating events; conducting surveys; and administering our website, portal, and applications. We may also provide information about Engagive products and services where permitted.

Information retention. Personal information is retained for as long as we have, or need to keep a record of, a relationship with a business contact, and longer where required by law, regulation, or professional standards, or to establish, exercise, or defend legal rights. We securely destroy or anonymize personal data when retention is no longer required, subject to valid data-subject requests where applicable.

Disclosure may occur as described in the Information Disclosure section below.

2. Clients

Our practice is to collect only the personal information necessary for agreed purposes. We ask clients to share personal information with us only when it is needed for those purposes. When we need to process personal information relating to individuals other than our clients (for example end customers of a business using Engagive), we ask clients to provide any required notices to those individuals.

Information collection. Categories of personal information processed in connection with client services may include:

• Contact details (e.g. email address, phone number, postal address)
• Login credentials and account identifiers (e.g. email or username, authentication tokens, roles and permissions)
• Commercial and billing details needed for admin-assigned plans and invoicing (we do not operate self-serve card checkout on this marketing website)
• Job or organization details (e.g. role, company, team)
• Survey or feedback responses you choose to submit
• Platform operational data needed to deliver the service — channel configuration (WhatsApp / AppChat settings), contacts and conversation content you or your end users submit, campaign and template content, AI knowledge you upload, Automations and Flows configuration, API and webhook activity, and usage metrics related to your plan

This information is generally collected from clients or parties acting on their instructions, and may occasionally be obtained directly from data subjects or from publicly available sources on behalf of clients. For certain engagements, limited identity or verification information may be processed where required for account security or compliance.

Controller and processor roles. When businesses use Engagive to message or support their own customers, those businesses typically determine the purposes of processing end-customer data. In that case Engagive processes such data on their behalf as a service provider / processor, subject to applicable law and any processing terms we agree with them. For website visitors, prospect contacts, and client account administration data, Engagive typically acts as a controller.

Information use. We use client-related personal information to:

• Provide professional services and products — including WhatsApp and In-App Chat, shared inbox, campaigns, AI, Flows, Automations, Public APIs, webhooks, and SDKs
• Administer and manage websites, applications, and online services made available to clients, including authentication and preventing unauthorized access
• Support client engagement and acceptance procedures
• Perform security monitoring to detect, investigate, and resolve threats (for example abuse, spam, or phishing attempts)
• Comply with laws, regulations, and policies, and keep records demonstrating compliant provision of services

Information retention. We retain personal information processed for clients in accordance with client agreements and our operational needs. We securely destroy or anonymize personal data when the purpose of collection has been fulfilled, or upon a valid request where applicable, subject to legal retention requirements. Business customers may control retention of certain conversation and contact data through product settings or by requesting deletion, subject to legal and operational limits.

In addition to the Information Disclosure section, we may disclose personal information to third-party organizations that assist us in providing services (for example hosting, email, or channel providers such as Meta for WhatsApp), and we may include personal information in deliverables to clients where needed to provide the service.

3. Website Users

When you access or otherwise use our Site, we collect information about you and how you interact with our Site through: (1) information you provide; (2) automatic tracking technologies; and (3) third parties where applicable.

Information you provide. You may choose to provide information such as your name, address, email address, telephone number, job title, and company name — for example when requesting a demo, contacting sales or support, subscribing to communications, or submitting a form.

Automatically collected information. We use cookies or similar technologies on our Site. Information collected may include IP address and other identifiers, as well as information about your internet activity and browsing behavior on our Site. We may also use website analytics providers that set tracking technologies on your device.

Information use. We use this information to operate and improve the Site; fulfill your requests; understand how the Site is used; develop and grow our business; maintain safety and security; prevent fraud, spam, harassment, intellectual-property infringement, and other risks; improve products and services; run operations; comply with law; respond to inquiries; and send marketing communications about Engagive products, services, and events where permitted.

Information retention. We keep personal information from the Site as long as needed for these purposes or as required by law, then securely destroy or anonymize it.

Managing cookies. Most browsers allow you to decline or delete cookies. In most cases you may refuse cookies and still access our Site, but some functionality may be impaired. See the Cookies section below for more detail.

4. Personnel

We collect personal information concerning our own personnel (staff and contractors) to administer the employment or contracting relationship and manage our business. Separate privacy notices may apply in employment or contractor agreements.

5. Candidate Recruitment

If you formally apply for an open position at Engagive, you may be presented with additional privacy notices at the point of collection. If you join Engagive, employment-related privacy terms may also apply.

During recruitment we may collect contact details; education and professional qualifications; employment history; locations and interest in opportunities; survey responses if you choose to participate; areas of interest or specialized knowledge; and other information included on a resume/CV you submit.

We use this information to attract and evaluate talent, manage applications, communicate about roles or events, administer careers processes, and conduct limited statistical analyses of recruitment activity. We retain recruitment data as long as considered necessary for these purposes, and longer where required by law or to establish, exercise, or defend legal rights.

6. Suppliers

We collect and process personal information about our suppliers (including subcontractors and individuals associated with them) to manage supplier relationships, receive services, and, where relevant, help deliver services to our clients. This generally includes business card information — name, employer, phone, email, and related communications.

We use this information to receive services; administer supplier relationships; develop our business; maintain IT systems; conduct surveys; host events; administer websites and applications; support security and risk management; provide information about our services unless asked not to; and comply with legal or regulatory requirements. Retention lasts as long as necessary for these purposes, subject to legal holds and data-subject rights.

7. Attendees of Engagive Events

We may collect personal information from attendees and participants of Engagive events. Unless separate privacy terms are provided at or in connection with the event, personal information collected will also be treated in accordance with the section of this Policy that applies based on the attendee's relationship with Engagive (for example business contact, client contact, supplier contact, or job applicant).

Event information is typically provided voluntarily and may include business card details and information specific to the event or accommodations. We use it to manage registration, attendance, and participation. We may take photographs in public areas at events and may use these in marketing materials where permitted.

8. Visitors to Our Offices

We maintain security measures to protect our offices and the people within them. Depending on the location, these may include visitor management procedures, access controls, and, where used, security cameras or alarm systems. Video or access records, if collected, are used for security and investigative purposes on a need-to-know basis.

If guest Wi‑Fi is provided, network traffic may be monitored using industry-standard security controls. This may include limited information about network behavior such as source and destination addresses.

Data Transfer

Engagive may process and store personal information in Pakistan and in other countries where we or our service providers operate. Some jurisdictions may not offer the same level of protection as your home country. Where we transfer personal information across borders, we implement measures appropriate under applicable law to protect the information — for example contractual safeguards with processors, access controls, and due diligence on providers.

Channel providers required to deliver messaging (for example Meta for WhatsApp) may process message-related data according to their own policies and infrastructure when you enable those channels. You are responsible for configuring channels and obtaining end-user consents as required for your use case.

Security

Engagive has implemented generally accepted standards of technology and operational security designed to protect personal information from loss, misuse, alteration, or destruction. These may include encryption in transit, authentication and access controls, monitoring, and organizational measures appropriate to the nature of the service. Only authorized personnel and the third parties described in this Policy are provided access to personal information, and they are expected to maintain its confidentiality.

No method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Information Disclosure

We do not sell your personal information. We will only disclose personal information to others for a business purpose and when we are legally permitted to do so. When we disclose information, we put contractual arrangements and security mechanisms in place as appropriate to protect the information and to comply with our confidentiality and security standards.

We may disclose personal information to the following categories of recipients:

• Group companies. Where necessary for administrative purposes and to provide services to our clients.
• Service providers. Third parties that provide applications, data processing, or IT services — for example cloud hosting, identity management, website hosting, email delivery, analytics, backup, security, and storage. Servers facilitating that infrastructure may be located in more than one country.
• Messaging and platform providers. Providers required to deliver the channels you enable (for example Meta / WhatsApp), subject to their terms and your configuration.
• Auditors, professional advisors, and insurers. As necessary to obtain advice, establish or defend legal rights, or manage insurance claims.
• Law enforcement or regulators. Where required or permitted by applicable law or regulation.
• Corporate transactions. In connection with a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or capital.
• With your consent or at your direction.

Your Rights Regarding Processing of Your Personal Data

Depending on your location and applicable law, you may have rights regarding your personal information, including:

• Right to be informed about how we process your data
• Right of access to your personal data
• Right to request correction of inaccurate or incomplete data
• Right to request destruction / deletion of your personal data
• Right to object to or restrict certain processing, where applicable
• Right to data portability, where applicable
• Right to withdraw consent where processing is based on consent

If you are an end customer of a business that uses Engagive, please contact that business first — they control most messaging and contact data. To exercise rights regarding data Engagive holds as controller (for example website or account data), contact us using the Contact Us section below. We may need to verify your identity before fulfilling a request.

Automated Decision-Making and AI

Engagive provides optional AI features (for example AI bindings, knowledge-based replies, and follow-ups) that businesses may enable to assist with customer conversations. These features generate or suggest responses based on content and configuration provided by the business customer.

We do not use automated decision-making that produces legal or similarly significant effects about individuals solely by automated means, unless such processing is expressly disclosed, permitted under applicable law, and subject to appropriate safeguards. Business customers remain responsible for how they configure AI, what knowledge they upload, and how AI outputs are used with their end users — including providing any required notices and human review.

Cookies

We use cookies and similar technologies to operate our website, remember preferences, support authentication where applicable, and understand traffic and usage. You can instruct your browser to refuse cookies or to indicate when a cookie is being sent. Some features may not function properly without cookies. After you finish browsing, you may delete Site cookies from your system if you wish.

Changes to the Privacy Policy

Engagive may update this Policy at any time by publishing an updated version on this page. You can access the most current version of this Policy at any time on this Site. We may also provide notice in other ways at our discretion, such as through the contact information you have provided.

An updated version of this Policy will be effective upon posting unless otherwise specified. Your continued use of the portal and services after the effective date of the revised Policy will constitute your acceptance of those changes, to the extent permitted by applicable law.

Agreement to the Privacy Policy

You acknowledge that you have read this Policy. Your use of our Site, portal, and services signifies your acceptance of this Policy and the related terms that govern them, including our Terms of Service. If you do not agree to this Policy, you must not use the content or services offered.

Contact Us / Data Protection Contact

For privacy questions, data-subject requests, or to contact our data protection contact regarding this Policy, reach us at:

• Email: it@engagive.io
• Phone: +92 3321866306
• Address: 2nd Floor, 160-D Commercial Broadway, DHA Phase 8 Lahore, Pakistan

If you are dissatisfied with our handling of your data or believe we have not complied with applicable data protection laws, you may also escalate your complaint to the competent supervisory or regulatory authority in your jurisdiction, where available.