Snapshot 92834
Normalized text
Scripts and page chrome removed; this is what change detection compares.
1.1 Introduction and Scope
This Privacy Policy ("Policy") explains how MathiVerse, Inc. ("Pana", "we", "us", "our"), a Delaware corporation, collects, uses, shares and protects personal information in connection with Pana Events, Pana Olai, our websites, mobile applications (iOS and Android), APIs and related services (the "Services").
Pana Events is an event GTM platform for businesses. Teams use it to capture leads at events, track expenses, measure ROI, manage team workflows, run pre-event outreach and generate post-event analytics.
Pana Olai is a digital business card and lead capture app for individuals. Users capture contacts and leads, scan business cards and badges, dictate notes with voice-to-text, qualify and categorise leads, buy extra credits, and get follow-up reminders.
Our role depends on whose data it is and which product is used:
Pana is the data controller for information about our account holders (Pana Olai users and Pana Events users), website visitors, and information we process for our own business purposes, such as billing, security and product improvement.
For Pana Olai, the individual user decides why and how to capture and use information about the people they meet. The user is responsible for that use. Pana processes that information to provide the Services to the user.
For Pana Events, the customer organisation is the data controller for Contact Data captured in its Workspace. Pana acts as its data processor or service provider.
This Policy applies to account holders, people whose information is captured through the Services ("Contacts"), and visitors to our websites. It does not apply to third-party products or services linked from the Services, which have their own privacy policies.
Pana Events and Pana Olai are delivered through one mobile app. The data collected, features available and who can access the data differ by account type, as described below.
1.2 Information We Collect
A. Account and profile information
Name, email address, phone number, job title, company name, profile photo, password and other details you give when registering or editing your profile.
Digital business card details you choose to publish, such as your contact details, all added external links and photos.
For Pana Events: organisation, Workspace, role, membership and permissions.
B. Contact and lead information you capture (Pana Olai and Pana Events)
Contacts and leads: names, email addresses, phone numbers, job titles, companies, social profile links and other professional details you enter or capture about the people you meet.
Business cards and badges: images of business cards, event badges, ID cards and QR codes you scan, and the text we extract from them to create contact records.
Notes and personal information you enter: free-text notes, context about the conversation, and any other information you choose to record about a contact.
C. Voice-to-text notes
Voice dictation: when you dictate a note, your speech is processed in real time only to convert it into text. Pana does not store the audio. The resulting text note is stored in your account.
D. Lead qualifications and tasks
Lead qualification and categorisation: scores, tags, categories or priority levels assigned to leads by you, or suggested by AI where that feature is available.
Tasks, reminders and follow-ups: tasks, due dates, reminders and follow-up records you create or accept, and related calendar entries if you connect Google Calendar.
E. Pana Events Workspace data
Events, leads, notes, qualification tags, follow-up records, expenses, budgets, demo bookings, event assets and reports created in a Workspace. These are private to the Workspace and accessible to authorised members according to their permissions.
F. Payment and subscription information
Web purchases (Pana Olai): processed by Stripe. We receive billing details such as name, billing address, the last digits and type of card, and transaction status. We do not store full card numbers or CVV data.
App Store and Google Play purchases (Pana Olai): processed by Apple or Google. We receive purchase, subscription, renewal, expiry, cancellation and transaction information needed to give you access, including for purchases of extra credits.
Pana Events: purchase orders, Order Forms, invoices and payments made through Stripe payment links.
G. Communications
Messages to our support team, feedback, privacy requests and other correspondence.
H. Information collected automatically
Device and usage data: IP address, browser type, operating system, device identifiers, device model, language, features used, time and duration of use.
Logs and diagnostics: server logs, error reports, crash reports and performance metrics.
Location: approximate location from your IP address. Precise location only if you grant permission and use a feature that needs it.
Cookies and similar technologies: see our Cookie Policy.
Digital card viewers: when someone opens a digital business card or submits a lead form on it, we collect their IP address and derive their approximate location from it.
Analytics and logs: we use product analytics to understand how the Services are used, which may involve cookies or similar technologies, and log tools to store and search server logs for security and troubleshooting.
I. Information from third parties
Integrations you connect: Integrations you connect: Pana Olai users may connect Google Calendar. Pana Events customers may connect HubSpot, Salesforce, Pipedrive, Zoho CRM, Attio, Slack, Calendly, Google Calendar, Microsoft Calendar, Microsoft Teams and Microsoft Dynamics. We receive data from them as you authorise.
Email mailboxes (Pana Events): if you connect a Gmail or Outlook mailbox, we access the email data needed for the features you use, such as sending outreach and tracking replies.
Messaging and telephony (Pana Events): if your organisation runs WhatsApp campaigns, LinkedIn messaging, we process the messages, call details and contact information involved.
Publicly available sources (Pana Events): for pre-event research, we collect publicly available information from websites and social platforms, such as event, company and professional information. If we collect information about you this way, you can object or ask us to delete it at [email protected].
Contact enrichment: we use Apollo.io to add professional information to contact records. Enrichment is used only for professional contact management, not for advertising, credit scoring or unrelated profiling.
Analytics providers: usage and diagnostic information to improve the Services.
J. Mobile app permissions
You can choose to grant these permissions and revoke them at any time in your device settings:
Camera: scanning QR codes, business cards, badges, and taking photos.
Photos and media library: uploading business cards and profile images you select.
Microphone and speech recognition: dictating notes with voice-to-text.
Notifications: reminders, follow-up alerts, event updates, subscription and account notices.
Contacts (optional): saving a contact you select to your device's address book. We do not read, import, sync or upload your device contacts.
Location (optional): enhancing event-related features when you enable it.
1.3 Your Responsibility When Capturing Information About Other People
You are responsible for ensuring that you have the appropriate rights, permissions, notices, or consents required to collect, record, store, process, or use information about other individuals through Pana Olai, including contact information, business card information, event badge information, photographs, audio recordings, conversations, and other personal information.
The same applies to Pana Events users and the organisations they work for.
This means, at a minimum:
Tell people where the law requires it. Let people know you are capturing their information, and get their consent where it is required.
Use voice-to-text for your own notes. Do not use it to record other people's conversations.
Respect objections. If someone asks you to delete what you captured about them, act on it where the law requires.
Use information only as people would expect. For example, following up on a conversation you had with them at an event.
Respond to requests from the people you captured. If a Contact asks you to access, correct or delete their information, you can do so by editing or deleting the record in your account.
Pana does not obtain consent on your behalf and does not provide legal advice. See Section 2.10 of our Terms & Conditions.
If your information was captured by a Pana user: please contact the person or organisation who captured it first. You can also contact us at [email protected]. We will help where we can, for example by passing your request to the account holder or, where appropriate and lawful, acting on it ourselves.
1.4 How We Use Information
We use personal information for these purposes, on the legal grounds noted where applicable law requires a legal basis:
Purpose Examples Legal basis
Providing the Services Creating accounts, digital business cards, lead capture, scanning, voice-to-text, contact enrichment, AI insights in Pana Events, lead qualification, tasks and reminders, Workspace features Contract performance; legitimate interests
Payments and subscriptions Processing or validating subscription and credit purchases, managing renewals, cancellations, entitlements and billing support Contract performance; legal obligation
Processing for Pana Events customers Handling Contact Data on the customer's instructions, including email, WhatsApp and LinkedIn outreach, and pre-event research Contract with the customer
Improving the Services Analysing usage, fixing errors, testing and building features Legitimate interests
Communications Service notices, security alerts, support replies, and marketing emails where you opt in Contract; consent
Security and fraud prevention Detecting abuse, enforcing our Terms, protecting users and third parties Legitimate interests; legal obligation
Legal compliance Responding to lawful requests and exercising legal rights Legal obligation
We do not sell personal information. We do not share it for cross-contextual behavioural advertising, and we do not advertise to you based on your contacts, notes or event data.
1.5 AI Features and Their Limitations
The Services use AI, including third-party AI providers, for features such as contact enrichment and, in Pana Events, AI event discovery, pre-booking signals.
Recommendations only. AI Output can be inaccurate or incomplete. Review it before relying on it.
No significant automated decisions. Pana does not use AI to make decisions that have legal or similarly significant effects on you or the people in your contacts. Lead qualifications are suggestions to help you prioritise follow-ups.
No training without consent. We do not use your content or notes to train AI models without your consent.
Voice is not used to identify people. We do not use voice dictation to create voiceprints or to identify individuals by their voice.
1.6 How We Share Information
We share personal information only as described below, under appropriate contractual and legal safeguards:
Service providers: cloud hosting, database, file storage and background-processing providers; payment processors (Stripe for web payments, and Apple and Google for app-store purchases); AI providers for OCR, AI features and event discovery; contact enrichment and public web data providers; email delivery, messaging and telephony providers; product analytics, logging and IP geolocation providers; and customer support tools. They may use the information only to provide services to us.
Integrations you connect: Google Calendar for Pana Olai; HubSpot, Salesforce, Pipedrive, Zoho CRM, Attio, Slack, Calendly, Google Calendar, Gmail, Microsoft Outlook, Calendar, Teams and Dynamics for Pana Events. Data is shared according to your settings.
Your Workspace: if you belong to a Pana Events Workspace, its administrators and authorised members can access Workspace data, usage and team reports according to their permissions. If you migrate Pana Olai data into a Workspace, the migrated data becomes visible to that Workspace.
People you choose to share with: for example, when you share your digital business card or a link.
Legal authorities: where required by law, subpoena, court order or government request, or to protect the safety and rights of Pana, our users and the public.
Business transfers: in a merger, acquisition, reorganisation, financing or asset sale. We will give notice where required by law.
We do not sell personal information, and we do not share Contacts' information with other Pana users.
1.7 Data Retention
Data How long we keep it
Audio from voice-to-text dictation Not stored by Pana. Processed in real time to convert speech to text, then discarded
Notes, contacts, leads, tasks and reminders (Pana Olai) While your account is active, until you delete them; then 90 days after account deletion
Account data Life of the account, then 90 days after deletion
Pana Events Workspace and Contact Data Duration of the customer's subscription, then 90 days after cancellation, unless the customer agreement says otherwise
Data migrated from Pana Olai into a Workspace Under the Workspace's retention, as above
Payment records Up to 7 years, for tax, accounting and legal requirements
Security logs 12 months
Analytics Up to 24 months, in anonymised or aggregated form
Backups Up to 30 days after deletion from live systems
We may keep information longer where the law requires it, or where needed for security, fraud prevention or legal disputes. Where a customer contract requires a different period, that period may apply.
1.8 International Data Processing and Transfers
MathiVerse, Inc. is based in the United States. Our hosting, database, file storage and background-processing providers store and process data in the United States. Some of our other service providers, including AI providers, may process data in other countries.
When we transfer personal information across borders, we use appropriate safeguards:
From the EU/EEA and UK: Standard Contractual Clauses approved by the European Commission, and the UK International Data Transfer Agreement or Addendum where applicable.
From other countries, including India: equivalent contractual protections and compliance with local transfer rules.
A copy of our Data Processing Agreement and transfer mechanisms is available on request at [email protected].
1.9 Your Privacy Rights
Rights for all users
Access: ask for a copy of the personal information we hold about you.
Correction: ask us to fix inaccurate or incomplete information.
Deletion: ask us to delete your personal information, subject to legal retention duties.
Portability: ask for your personal information in a structured, machine-readable format where applicable law gives you this right.
Marketing opt-out: unsubscribe from marketing emails at any time.
California residents (CCPA / CPRA)
You may have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing (we do not sell or share it for cross-contextual behavioural advertising); to limit use of sensitive personal information where applicable; and not to be discriminated against for exercising these rights. Authorised agents may need to provide written proof of authority, and we may verify the request directly with you.
EU, EEA, UK and Swiss residents (GDPR / UK GDPR)
You may also have the right to object to processing based on legitimate interests or for direct marketing, to restrict processing, to withdraw consent at any time, and to complain to your local data protection authority.
Canadian residents (PIPEDA)
You may have the right to access your personal information, challenge its accuracy, and withdraw consent for non-essential processing, subject to legal limits.
Indian residents (DPDPA 2023)
You may have rights under the Digital Personal Data Protection Act, 2023 and its rules, including rights to access information about processing, correction and erasure, grievance redressal and nomination. Our Grievance Officer can be reached at [email protected].
How to make a request
Email [email protected] or use our Privacy Request form at https://www.pana.space/privacy-request. We will respond within 30 days, or the period required by law. We may need to verify your identity first.
Pana Events Workspace data: if your request concerns data in an organisation's Workspace, we may refer you to that organisation, as it controls the data.
Deleting your account
You can delete your Pana Olai account in the app, or by emailing [email protected] for both Pana Olai and Pana Events. Deletion removes your access and starts deletion of your data under Section 1.7.
Deleting your account does not cancel an App Store or Google Play subscription. Cancel it in your Apple or Google account settings to stop future charges.
Data you migrated into a Pana Events Workspace stays with that Workspace. To ask for its deletion, contact the Workspace administrator.
1.10 Security and Data Breaches
We use technical and organisational measures to protect personal information, including TLS encryption in transit, HSTS and secure cookies, content security policies and security headers, encryption of stored third-party credentials (such as OAuth, CRM and mailbox access tokens), access controls, automated secret scanning and dependency security checks in our development process, and incident-response procedures.
No method of transmission or storage is completely secure. Security controls may vary by infrastructure and provider.
If a breach happens, we will investigate, take steps to contain it, and notify affected individuals, customers and authorities as required by applicable law. For Pana Events Workspace data, we will notify the customer so it can meet its own obligations.
Your part: keep your password secure, use a locked device, and tell us at [email protected] if you suspect unauthorised access to your account.
1.11 Children
The Services are not intended for anyone under 16, or the age of digital consent or majority in their jurisdiction if higher. We do not knowingly collect personal information from children. Users must not capture information about children through the Services. If you believe we hold a child's information, contact [email protected] and we will delete it where required.
1.12 Changes to This Policy
We may update this Policy from time to time. For material changes, we will notify you by email or in the app where appropriate and as required by law, and update the "Last updated" date. Continued use after the effective date means you accept the updated Policy, to the extent the law allows.
1.13 Contact and Data Controller Details
Data controller: MathiVerse, Inc.
Privacy enquiries and Grievance Officer: [email protected]
Mailing address: 16192 Coastal Highway, Lewes, Delaware 19958, County of Sussex
For Pana Events Workspace data, the customer organisation may be the controller, and Pana acts as its processor or service provider. You may also contact your organisation or Workspace administrator.