Privacy Policy

Last updated: 7 November 2026

1. Who we are

So.com.pk is a web push notification service. Website owners ("customers") use it to collect subscribers on their own websites and send them notifications.

2. Two kinds of people, two kinds of data

Customers (people who create an account with us): we are the controller of the account data described below.

Visitors who subscribe to a customer's website: the website owner decides what to send them and is responsible for asking their permission. We store and process this data on the customer's behalf, only to deliver the service.

3. What we collect from customers

Name, email address and password (the password is stored only as a one-way hash), the organization and website names and domains you add, the notifications you write, your team members' names and emails, and the payment details you send us when you buy a plan (the amount, the method, the order or transaction ID and the screenshot you upload).

Basic security records: sign-in events and the actions you take in the admin tools, with the IP address they came from, so we can investigate abuse.

4. What we store about subscribers

The browser's push address (encrypted in our database), the browser, operating system and device type, the country and language the browser reports, when the visitor subscribed and was last seen, and any tags the website owner assigns. We do not store the visitor's IP address with their subscription.

We use this only to send notifications from the website the visitor subscribed to and to show the website owner how many were delivered and clicked.

5. Cookies

We use only the cookies needed to keep you signed in and to protect forms against forgery. We do not use advertising or tracking cookies on this website.

6. How we use data

To run the service, send you account emails (verification, password reset, invitations, payment decisions), prevent abuse, and answer your requests. We do not sell your data or the subscribers' data, and we do not use it for advertising.

7. Who else sees it

Our hosting and email providers process data for us so the service can run. Notifications travel through the push services of the browser makers (for example Google, Mozilla, Apple and Microsoft). We may disclose data if the law requires it.

8. How long we keep it

Account data is kept while the account exists. Delivery logs and old technical records are deleted automatically after a limited time. When a customer deletes a website or an account, we delete its data, except what we must keep for security or by law.

9. Security

Subscriber push addresses and keys are encrypted, passwords are hashed, connections use HTTPS, and access is limited by role. No system is perfectly secure, so please use a strong, unique password.

10. Your choices

You can ask us to access, correct or delete your account data. A visitor can turn notifications off at any time in their browser settings or with the unsubscribe option the website provides, and can ask the website owner to delete their data.

11. Children

The service is for businesses and is not directed to children under 13.

12. Changes

If we change this policy we will update the date above, and tell customers by email when the change is important.

13. Contact

Questions or requests: WhatsApp +923054500000.