Privacy Policy

1. Introduction

PipeBase ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer relationship management platform ("Service"). Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, and password when you register
• Billing Information: Payment card details processed securely through Stripe
• CRM Data: Contacts, deals, communications, contracts, and other business data you upload
• Communications: Emails, support requests, and feedback you send us

2.2 Information Collected Automatically

• Usage Data: Features used, actions taken, time spent on the Service
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, referring URLs
• Cookies: Session cookies for authentication and preferences

2.3 Information from Third Parties

If you connect third-party services (such as Twilio or AWS SES), we may receive information about your usage of those services as necessary to provide our Service.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent or unauthorized activities
• Personalize and improve your experience
• Comply with legal obligations

4. Data Storage and Security

4.1 Storage: Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the United States. We implement industry-standard security measures including encryption at rest and in transit.

4.2 Security Measures: We use technical, administrative, and physical safeguards to protect your information, including:

• SSL/TLS encryption for data in transit
• AES-256 encryption for sensitive data at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data protection

4.3 Data Retention: We retain your data for as long as your account is active or as needed to provide you services. After account termination, we retain data for 30 days to allow for data export, after which it is permanently deleted.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist in providing the Service (e.g., payment processing, hosting, analytics)
• Legal Requirements: When required by law, subpoena, or other legal process
• Protection of Rights: To protect the rights, property, or safety of PipeBase, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Consent: With your explicit consent for any other purpose

6. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Export: Export your data in a machine-readable format
• Opt-out: Opt out of marketing communications
• Restrict Processing: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at privacy@getpipebase.com

7. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including standard contractual clauses approved by relevant authorities.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including rights to access, rectification, erasure, restriction, data portability, and objection. Our legal basis for processing your data includes contract performance, legitimate interests, and consent where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: