Plain answers for sellers who take PDPA seriously.
What happens to your customers' details after you move them in.
30 minutes. You choose the day and the time.
Where your records are kept, and how they're backed up
Your pipelines, records, notes and deals sit in a database in Singapore. Everything travels to and from it over HTTPS.
Files you attach to a card go into private storage, up to 10 MB each. They don't sit on a public link.
A backup runs every night and is encrypted before it's stored. One copy is kept for 7 days and another for up to 14 days, so deleted data can stay in an encrypted backup for up to 14 days.
You choose who on your team sees each pipeline.
Your pipelines are yours alone until you share one. Share a pipeline with your team to read, edit or manage it, and decide separately who may download it, so someone can work a pipeline without taking a copy home. Your team's owner and admins see every pipeline in the team. Take someone off the team and their access ends.
One login on our side can read every pipeline in Palby CRM: the founder's. It can't edit or delete anything.
Signing in, and locking the app on your phone
Sign in with your password or with a link sent to your email. On your phone, you can lock the app with a PIN, or with Face ID where your phone has it, once you've been away for 1 to 60 minutes.
Where AI reads your records, and where it doesn't
Most of Palby CRM uses no AI. The lead score is plain arithmetic, and the card shows the reason for every point.
Three things send part of a record to an AI model: importing a spreadsheet, scanning a business card and asking the assistant about a customer.
- Importing a spreadsheet. Columns the importer can't match by name go to TypeSafe, then to Google's Gemini if TypeSafe can't place them. Each sends the column's header and up to three sample values, never whole rows.
- Scanning a business card. The photo goes to Gemini to be read, and Palby doesn't keep it.
- If you use the assistant on Telegram or WhatsApp, a question about a customer sends that customer's record to Gemini.
If you link a WhatsApp number, how those chats are kept is on the WhatsApp security page.
Consent and Do not contact, kept on the record
Each record keeps consent for WhatsApp messages, email and calls, with when and how it was given or withdrawn, such as "Yes since 12 Oct, Facebook form". Tick Do not contact and it counts as a no on all three. Anything Palby would send on its own then skips that person, though a message you type yourself still goes.
We don't check numbers against Singapore's Do Not Call Registry yet.
Your records are yours: download them, or have them deleted.
Download any pipeline as a CSV file, in the same columns as the grid, and Palby CRM's own importer reads it back. Your account download, a zip file, includes the pipelines you own.
Delete a contact and it's gone for good. There's no button yet to delete your whole account, so email us and we'll delete it. Deleted records can stay in an encrypted backup for up to 14 days.
Where we fall short today
Here's what's missing today, so you don't find it later.
- There's no two-factor sign-in yet.
- We hold no security certificate, such as SOC 2 or ISO 27001.
- The founder's login can read every pipeline, though it can't change one.
- Numbers aren't checked against the Do Not Call Registry.
- Deleting your account takes an email to us.
Still have questions? Ask a person first.
Bring your questions about your customers' data to the walkthrough.
30 minutes. You choose the day and the time.