Privacy Policy

1. Introduction

Pipeline ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered LinkedIn outreach automation platform ("the Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk). If you subscribe to a paid plan, payment information is processed by our payment provider (Stripe) - we do not store your full payment card details.

LinkedIn Account Data

When you connect your LinkedIn account, we access your LinkedIn profile information and activity data as necessary to provide the Service. This includes your profile details, connection data, and messaging activity performed through Pipeline.

Usage & Activity Data

We track outreach activity performed through the platform, including connection requests sent, profile visits, messages sent, and content interactions. This data is used to enforce safety limits, provide analytics, and improve the Service. Activity counters reset daily.

Prospect Data

You may upload or import prospect data (names, job titles, company information, LinkedIn profile URLs) into the Service. This data is stored within your workspace and is accessible only to authorized workspace members.

AI Processing Data

When you use AI features (research, message generation, content creation), your inputs and the resulting outputs are processed by third-party AI providers (Anthropic). We do not use your data to train AI models.

Google User Data

When you connect your Google account, Pipeline requests access to your Google Sheets and Google Drive (read-only) data. Specifically, we access:

• Google Sheets - We read and write to spreadsheets you select within your campaign workflows. This is used to export prospect data (names, job titles, company information, LinkedIn URLs) to your designated Google Sheets.
• Google Drive (read-only) - We list your Google Sheets files so you can select which spreadsheet to use. We do not read, modify, or delete any other files in your Drive.

Pipeline's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google data to provide and improve the Service features you explicitly configure. We do not use Google user data for advertising, and we do not sell Google user data to third parties.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Track and enforce activity safety limits
• Process your transactions and manage your subscription
• Provide customer support and respond to inquiries
• Generate analytics and usage reports within your workspace
• Improve the Service, including AI model performance and accuracy
• Send important service-related communications
• Detect and prevent fraud, abuse, or security incidents

4. Data Sharing & Third Parties

We do not sell your personal data. We share data with third-party service providers only as necessary to operate the Service:

• Clerk - Authentication and user management
• Supabase - Database hosting and storage
• Stripe - Payment processing
• Anthropic - AI processing (message generation, research, content)
• Google - Google Sheets and Google Drive integration (OAuth 2.0)
• Unipile - LinkedIn API integration
• Tavily, Firecrawl, Exa - Research and data enrichment
• PostHog - Product analytics
• Vercel - Application hosting

We may also disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of Pipeline, our users, or others.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure database access with row-level security policies, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Research cache data is automatically expired based on configurable time-to-live settings.

Google user data: OAuth tokens for Google integrations are stored in encrypted form for as long as your integration remains connected. When you disconnect your Google account from Pipeline, we immediately delete your stored OAuth tokens and cease all access to your Google data. You can also revoke Pipeline's access at any time through your Google Account permissions.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access - Request a copy of the personal data we hold about you
• Correction - Request correction of inaccurate or incomplete data
• Deletion - Request deletion of your personal data
• Portability - Request your data in a portable format
• Objection - Object to certain processing of your data

To exercise any of these rights, contact us at privacy@pipeline.help.

8. Cookies & Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser. We use PostHog for product analytics to understand how the Service is used and to improve it.

9. International Data Transfers

The Service is available globally. Your data may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these locations. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy regardless of where it is processed.

10. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at privacy@pipeline.help.