Last updated: October 17, 2026
Pisa Cloud is a business management platform (ERP/CRM) operated by Pisa Solutions S.A.C. (trade name: Pisa Cloud), based in Lima, Peru. It lets businesses manage their operations, customers, sales and omnichannel communications: WhatsApp, Facebook Messenger, Instagram and TikTok.
Regarding the data of each business's end customers (their contacts and conversations), the business using Pisa Cloud is the data controller and Pisa Cloud acts as a data processor: we process that data only to provide the service and according to the business's instructions.
All integrations are optional: the business enables them by authorizing access through each platform's official login and can disconnect them at any time from Pisa Cloud's settings or from the platform itself. We only request the permissions needed for the feature described.
We use Meta's WhatsApp Business Cloud API so the business can send and receive messages with its customers. Through Embedded Signup the business authorizes Pisa Cloud to manage messages for its number. If the number is connected in coexistence mode (the same number in the WhatsApp Business app and in Pisa Cloud), with the business's authorization we sync its contacts and the conversation history that Meta makes available, so the inbox shows the full conversation.
Use of this data is also governed by the WhatsApp Business Data Processing Terms.
With Facebook Login, the business connects its Facebook Page and its Instagram professional account to receive and reply to direct messages in Pisa Cloud. The permissions we request are: listing the Pages it manages (pages_show_list), subscribing the Page to new-message webhooks (pages_manage_metadata), reading and sending Page messages (pages_messaging), basic data and messages of the Instagram account (instagram_basic, instagram_manage_messages) and the name and profile picture of the person who writes (Business Asset User Profile Access). We do not post on behalf of the business or access its ads.
Data received from Meta is used in accordance with the Meta Platform Terms.
If the business connects its TikTok for Business account, we access, depending on the permissions it authorizes: the direct messages the account receives and the replies it sends from Pisa Cloud (TikTok Business Messaging API), the comments on its videos so it can read and reply to them, basic account data (name, username and profile picture), lead forms from its ads (to record them as prospects), and conversion events for its campaigns (for example, that a conversation started from an ad resulted in a sale), which we send to TikTok only to measure those campaigns.
Data received from TikTok is used in accordance with the TikTok for Business terms and is never combined with data from other businesses using Pisa Cloud.
Sign in with Google: if the user links their Google account, we receive their Google identifier, name and email, only to let them log in to Pisa Cloud with that account.
Google Calendar: with the https://www.googleapis.com/auth/calendar scope we read and import calendar events (title, description, dates, location, time zone, recurrence and guests) and create, edit or delete the events the user manages in the platform. We store the synced events and the OAuth refresh token to keep the connection. When the user disconnects, we revoke the token and remove the link; the user can also choose to keep or delete the imported events.
Pisa Cloud's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data is stored on Google Cloud Platform (Cloud Run, Cloud SQL and Cloud Storage) in the us-east1 region, United States. We apply encryption in transit (TLS) and at rest, token-based authentication, access control per business and per user profile, and access logging. Integration tokens are kept on the server and are never exposed to the browser; platform secrets are managed with Google Secret Manager.
We keep data while the business account is active or as needed to provide the service. When an integration is disconnected, we stop receiving data from that platform and deactivate the connection; upon the business's request we also delete its credentials and the data received. Records deleted in the platform are permanently purged after 7 days. The business can request deletion of its data at any time.
We do not sell or rent data. We share it only with:
Under Peru's Personal Data Protection Law (Law No. 29733), you have the right to access, rectify, delete and object to the processing of your data, and to request its portability. If you are an end customer of a business that uses Pisa Cloud, you may also contact that business.
To exercise these rights, email us at support@pisa-cloud.com.
To request deletion of your data, email support@pisa-cloud.com with your name, the business and the scope of the deletion. We process it within 30 business days and confirm by email.
If you connected Facebook, Instagram or TikTok, you can also remove Pisa Cloud's access from that platform's settings (Facebook: Settings → Business Integrations; TikTok: your account's security or connected apps settings). We then stop receiving data and, upon request, delete the data already received.
We may update this policy. For significant changes we will notify you by email or within the platform. Continued use of Pisa Cloud after such changes means you accept them.