What we hold, why, and who else can touch it.
Written for the person running the business rather than for a lawyer: what comes in, where it goes, what we will never do with it, and how to get all of it back.
This is a plain-language description, not the legal notice.
Everything on this page is something the software genuinely does, and it is accurate. It has not been through legal review, and it does not yet name a data controller or a legal basis for each purpose. The reviewed notice replaces this page before Piggles opens to the public.
What Piggles holds
What you tell us to open an account
Your name, your email address, the name of your business, and a password we never store in a readable form. This is the minimum the account needs to exist and to be recoverable if you forget the password.
What you put into the software
Your customers, products, orders, bookings, invoices, messages, pages and files. This is your business’ information, not ours. We hold it so the software can show it back to you, and we do not mine it, sell it, or use it to build anything.
What your own customers give you
When somebody buys from your site or books an appointment, their details land in your Piggles. Legally that is your responsibility and we are handling it on your behalf — same isolation, same encryption, same rules about who can see it.
How much room you are using
Storage, email volume, customer records and team seats, counted daily. That is what the price is based on, so it has to be measured; it is a set of numbers about volume, not a record of what you did.
How the workspace gets used
Inside the workspace, which screens get opened and where something broke — so we can find out that a screen is confusing before you have to tell us. None of this runs on the marketing site you are reading now.
Four things that never happen.
This is the part worth reading twice, because it is where most software gets you.
We do not sell it
Not to advertisers, not to data brokers, not to anybody. There is no arrangement under which your information or your customers’ information leaves us for money.
We do not train AI on it
Not a model of ours, not a shared assistant, not anonymised, not aggregated. Any AI feature runs on a key you connect yourself, so the data goes where you agreed and nowhere else — and you can disconnect it whenever you want.
We never hold your card
Card numbers go straight to the payment provider and come back as a token before they reach us. There is no copy of your card in Piggles to lose, and the same is true of the cards your own customers use.
We do not advertise to you elsewhere
Nothing on a Piggles site follows you onto somebody else’s website. There is no ad pixel on any of the three.
Who else touches it
Two different lists, and the difference matters more than the names. The first is running whether you think about it or not. The second only exists because you went and switched it on.
Always, to run the service
Microsoft Azure and Google Cloud
Run the servers, the databases and the file storage. Everything lives in managed data centres in a region we can tell you — not on a machine in an office.
Stripe and PayPal
Take the money. Your subscription goes through them, and so do your own customers’ payments if you sell. They see the card; we see a token and the fact that it worked.
Mailgun
Delivers the mail Piggles sends on your behalf — order confirmations, booking reminders, password resets, and anything you send from Messages — from piggles.email.
Twilio
Sends text messages and carries phone calls, where you use those. Only involved if the feature is.
PostHog
Records how the workspace gets used so we can fix what is confusing. Inside the workspace only — never on this site, and never the contents of anything you have stored.
Cloudflare
Sits in front of the sites to keep them fast and to absorb attacks. It sees requests in transit; it does not hold your business’ records.
Only if you connect it
None of these are on until you turn them on, and every one can be disconnected in the same place you connected it.
Social platforms
Facebook · Instagram · Threads · TikTok · LinkedIn · Pinterest · X · YouTube · Google Business
If you connect an account, Piggles can publish to it and read back how the post did. What goes over is what you told it to post, plus the metrics that come back.
Sales channels
Amazon · eBay · Etsy · Walmart · TikTok Shop · Faire · Google Shopping · Meta · Pinterest
Listing on a marketplace sends your products, prices and stock counts there, and brings orders back — which means the buyer’s name and delivery address come back with them.
Suppliers and print-on-demand
Printful · Printify · Spocket · DSers
When a supplier ships to your customer directly, that customer’s name and address has to go to the supplier. There is no version of dropshipping where it does not.
Shipping and postage
Shippo · EasyPost · UPS · FedEx · USPS · DHL
Buying a label sends the delivery address and parcel details to the carrier, and brings tracking back.
Sales tax
Avalara · TaxJar
Working out what tax to charge sends the amounts and the addresses involved — not who the customer is.
AI you bring yourself
Your own key — OpenAI, Anthropic, or another
Piggles never runs AI on our account. You connect your own provider, so anything an assistant reads goes to the company whose key you used, under your agreement with them. Disconnect it and it stops.
What happens when you connect something.
Connecting an outside account is genuinely a decision, so it is worth knowing exactly what it does.
Their rules apply once it arrives
What you send to TikTok is held by TikTok, under TikTok’s privacy policy and not ours. We can control what leaves; we cannot control what happens after. Before connecting something you are not sure about, their policy is the one to read.
Only what the job needs
A social connection gets posts and their metrics. A carrier gets a delivery address. A tax service gets amounts and places, not names. Your customer list is never handed over wholesale to anybody.
You are the one deciding
If a supplier ships to your customer, that customer’s address has to reach the supplier — there is no version where it does not. Telling your own customers what you have connected, and having the right to send it, is yours to do rather than ours.
Disconnecting stops it
Revoke a connection and Piggles stops sending immediately, and the stored key is deleted. What the other company already received is theirs to delete — ask them, and their policy says how.
Signing in with Google
You can create an account with an email and a password, or with Google. Choosing Google means Google tells us your name, your email address and that the sign-in worked — nothing else, and no access to anything in your Google account. It also means Google knows you signed in to Piggles.
A password works just as well and involves nobody else. Every cookie either route sets is listed on cookies.
Where it all sits
In managed data centres run by major cloud providers, in a region we can tell you. Several of the companies above operate internationally, so information reaching them may be handled outside the country you are in — which is normal for software of this kind and worth knowing rather than discovering.
How it is kept separate from every other business, and encrypted on the way and at rest, is on trust.
What you can always do
Take it with you, whenever
Customers, products, orders, invoices and everything you have written, in formats other software can actually open. You do not have to ask, you do not have to be leaving, and nobody will make it slow on purpose.
Correct it
Everything about you and your business is editable in the software. If something is wrong somewhere you cannot reach, ask and we will fix it.
Have it deleted
Cancel and your information is kept for a short window in case you change your mind or forgot to export, then deleted — including from backups as those age out. Want it gone sooner? Ask.
Ask who has looked at it
Access is limited to the people who need it to run the service, and it is logged. If a support person opened your business to help with something, that is recorded rather than ambient.
How your information is kept safe and separate is on trust, and every cookie we set is listed on cookies.