Privacy policy

This policy explains what personal data Pipeluma (“we”, “us”) processes, why, and what rights you have. It covers two groups of people: users of Pipeluma, and business contacts who appear in the company and contact data Pipeluma works with. Questions go to hello@pipeluma.com.

1. Data about our users

• Account data: your name, email address and, if you sign in with Google, your Google account identifier.
• Workspace content: the profiles you write, the companies and contacts in your workspace, the emails Pipeluma drafts and you edit, notes, tasks and settings such as your signature.
• Usage records: an event log of actions in your workspace (for example “email put in Gmail drafts”), kept so you can see what happened and so the product works correctly.

We use this data to provide the service you signed up for (legal basis: performance of a contract) and to keep it secure (legal basis: legitimate interests).

2. Data received from Google (Gmail)

If you connect a Gmail or Google Workspace mailbox, Google asks you to grant Pipeluma specific permissions. Pipeluma uses them only as follows:

• Create drafts: to place each email Pipeluma prepares in your Drafts folder, for you to review and send.
• Send email: only if you switch on automatic sending for campaigns. It is off by default.
• Read email: to notice when you have sent a draft Pipeluma created, to read replies in threads Pipeluma started, and to detect delivery-failure notices so a bounced address can be marked invalid.
• Email address: to identify which mailbox is connected.

Pipeluma does not read, index or store the rest of your mailbox. We do not sell Gmail data, we do not use it for advertising, and we do not use it to train or improve AI models. People at Pipeluma do not read it unless you ask us to for support, it is needed for security, or the law requires it. Pipeluma's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The access Google grants is stored encrypted, and you can revoke it at any time in Pipeluma's settings or in your Google account.

3. Data about business contacts

Pipeluma helps companies find other companies to work with. To do so it processes business information about people in a professional role:

• name, job title and the company they work for;
• a work email address, either published by the company or derived from the company's address format and checked with the mail server;
• where and when each piece of information was found, for example a company's team page or a public company register.

This information comes from public sources: company registers, startup directories, public job boards and companies' own websites. We do not scrape social networks and we do not buy contact databases. We process it on the basis of legitimate interests: helping businesses find relevant business partners, limited to people in their professional capacity, with clear information and an easy way to object.

When a Pipeluma user contacts you, that user decides to send the email and is responsible for it. Every email prepared through Pipeluma says who is writing, why, where your details came from, and how to opt out. If you object, by replying or by writing to us, your work address is added to a do-not-contact list so you are not contacted again through Pipeluma.

4. Who processes data for us

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep data

• Account and workspace data: while your account is open. When you close it, we delete it within 30 days, except what we must keep by law.
• Gmail access: until you disconnect the mailbox or close your account.
• Business contact data: while it is current and useful. Information we can no longer confirm is removed or refreshed.
• Do-not-contact list: kept for as long as needed to respect the objection, with only the address and the date.

6. Your rights

Depending on where you live, you can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive a copy in a portable format. You can object to the processing of business contact data at any time, without giving a reason. Write to hello@pipeluma.com; we answer within one month. You can also complain to your local data protection authority.

7. Security

Mailbox access is encrypted at rest, every workspace is kept separate, actions are logged, and opt-outs are checked whenever an email is prepared. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Cookies

Pipeluma uses only the cookies needed to keep you signed in and to complete the Google connection securely. We do not use advertising or tracking cookies.

9. Changes

If we change this policy in a way that matters, we will tell users by email or in the app before the change takes effect. The date at the top always shows the latest version.