Privacy Policy

Pipeline Simple, Inc. ("Pipeline Simple", "we" or "us") is a Delaware corporation in the United States. This policy covers pipelinesimple.com, the Pipeline Simple app, booking pages, and the website agent and tracking script that customers add to their own sites.

Our customers are businesses. When a customer uses Pipeline Simple to keep information about other people, such as leads, website visitors or people who book a meeting, the customer decides how that information is used and we process it for them. The customer's own privacy policy then applies as well, and we handle the information under our agreement with them.

Questions about this policy go to support@pipelinesimple.com.

What we collect depends on how you use Pipeline Simple.

• Account details. Your name, work email and the workspaces you belong to. You sign in with a link we email you, so we never store a password. When a teammate adds you to a workspace, they give us your email address.
• What you add to a workspace. Briefs, company facts, prompts, competitors, websites, leads, notes, files you import, the knowledge base for the website agent, meeting types and availability.
• Google Calendar. If you connect Google Calendar, we receive the data described in Google user data.
• Bookings. When you book a meeting through a booking link or a website chat, we collect your name, email, time zone, the notes and answers you give, any reason you give for moving or canceling, and where you came from, such as the site that sent you or the campaign tags in the link.
• Website chats. When you chat with the website agent on a customer's site, we collect your messages, the name and email you choose to share, and a keyed hash of your IP address that changes every day. We never store the address itself. The chat keeps a token in your browser so the conversation can continue when you come back.
• The tracking script. Customers can add our ps.js script to their sites. It keeps the first page of your visit, the site you came from and any campaign tags in your browser's session storage, and adds them to forms the customer marks. It sets no cookies. When a visit comes from an AI assistant such as ChatGPT, it reports only the assistant's site and the page you landed on.
• Contact requests. When you use our contact form, we collect your name, email, phone number, the products you are interested in and your message.
• Usage and device information. Our hosting provider records requests to our servers, including IP address, browser and the pages requested, for security and to keep the service running. On our public pages, Google Analytics measures how visitors use the site.

• To provide the service: run the agents, show results, keep your pipeline, offer open times, book meetings, and send the emails you expect, such as sign in links, alerts, reports and booking notices.
• To keep Pipeline Simple safe: prevent abuse, limit requests, secure accounts and investigate problems.
• To support you and to tell you about your account and changes to the service.
• To understand and improve our public website, using Google Analytics on public pages only.
• To meet legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use what customers keep in Pipeline Simple, or any Google user data, to advertise to anyone.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: performing our contract with you; our legitimate interests in running, securing and improving the service and in telling business customers about it; your consent where we ask for it, such as when you connect Google Calendar; and complying with the law.

Pipeline Simple uses AI models from OpenAI, Anthropic, Google, Perplexity, xAI and Microsoft to do the work you ask for. For example, the GEO agent asks AI assistants the questions buyers ask about your market, and the website agent uses a model to answer visitors from the knowledge base you provide. We send each provider only what the task needs.

We do not train AI models on your information, and we never send Google user data to AI providers.

You can connect Google Calendar so people can book times when you are free. This section explains what Pipeline Simple accesses in your Google account, how we use it, and how to remove it.

When you connect, Google asks you to allow:

• Your Google account's email address. We show it on the Scheduling page so you know which account is connected.
• When you are busy (calendar.freebusy). We read the busy periods on your primary calendar: only when each one starts and ends. We cannot see event titles, descriptions, locations or guests.
• Events Pipeline Simple creates (calendar.events.owned). When someone books, we add the meeting to your primary calendar with them as a guest. When the meeting is moved or canceled, we change or remove that event. We do not read, change or delete your other events.

How we use it:

• Busy times are fetched when someone looks for open times or books, to work out which times to offer. We do not store them.
• Events we create hold the meeting title and time, the guest's name and email, their notes, the meeting place and a link to reschedule or cancel. If the meeting uses Google Meet, Google adds a Meet link. Google sends the invite and any updates to the guest from your calendar.
• We store your Google account email, the tokens Google gives us to act for you, encrypted with AES-256-GCM, and the ID and Meet link of each event we create, so we can update or cancel it.

How we share it:

• People who open your booking page see the times you are free, never your events.
• The person who books gets the event details through Google's invite.
• We do not sell Google user data, use it for advertising, or transfer it to data brokers or information resellers. We do not use it to decide credit-worthiness or for lending.
• We do not send Google user data to AI providers, and we do not use it to develop, improve or train generalized AI or machine learning models.

No one at Pipeline Simple reads your Google user data unless you ask us to for support and agree to it, we need to for security, such as investigating abuse, or the law requires it. Otherwise our systems handle it automatically, only to provide the features above.

We keep your Google tokens until you disconnect. Press Disconnect on the Scheduling page and we revoke our access with Google and delete the tokens at once. You can also remove our access at any time from your Google Account permissions page. Events already on your calendar stay there, since they are yours. To have us delete the rest, including the event IDs kept with your bookings, email support@pipelinesimple.com.

Pipeline Simple's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We share information only as described here.

• Service providers. Companies that run parts of Pipeline Simple for us, under contracts that limit what they may do with the information. They are listed under Service providers.
• Your workspace. Teammates in a workspace can see the work, leads and bookings kept in it.
• The business you deal with. If you book a meeting or chat on a customer's website, the customer and their team receive what you share, and it is saved as a lead in their workspace.
• Certified specialists. On done-for-you plans, a specialist certified on our agents, from our team or our partner network, works in your workspace. They see what the work needs and must keep it confidential.
• Legal reasons. When the law requires it, or to protect the rights, property or safety of our users, the public or Pipeline Simple.
• Business transfers. If Pipeline Simple is part of a merger, acquisition or sale of assets, information may pass to the new owner under this policy. We will tell you first, and Google user data will only move with your explicit consent.
• With your permission. In any other case, only when you ask us to or agree to it.

• Supabase. Database and sign in.
• Netlify. Hosting for the website and app.
• Resend. Email delivery.
• Inngest. Background jobs.
• Google. Google Calendar, Google Analytics on our public pages, Gemini models, and the PageSpeed and YouTube APIs.
• OpenAI, Anthropic, Perplexity, xAI and Microsoft Azure. AI models.
• DataForSEO and other public data services. Search and web data. They receive the keywords, sites and topics we look up.

We update this list when it changes.

• Sign in cookies keep you signed in to the app.
• A workspace cookie remembers the workspace you last opened, for up to a year.
• A short-lived cookie protects the Google Calendar connection while you sign in to Google. It lasts ten minutes.
• On our public pages, Google Analytics sets cookies to count visits and see how people use the site. We do not use it inside the app.
• The website chat stores a token in your browser so your conversation can continue. The tracking script uses session storage, which clears when you close the tab.

You can block or delete cookies in your browser settings, but the app needs its sign in cookies to work. You can also install the Google Analytics opt-out add-on.

• Account and workspace information stays while your account is open. When you ask us to close it, we delete it within 30 days, except what we must keep for legal, tax or accounting reasons.
• Google tokens stay until you disconnect Google Calendar or close your account. Busy times are never stored.
• Booking and chat records stay in the customer's workspace until the customer closes their account or asks us to delete them.
• AI visit counts from the tracking script are deleted after 400 days, and request counters used for rate limits after two days.
• Contact requests stay while we follow up, and then as business records until you ask us to delete them.
• Copies in backups are removed as the backups expire, normally within 30 days.

We protect information with encryption in transit, encryption of Google tokens at rest, database rules that keep each workspace's data apart, and staff access only when the work needs it. No system is perfectly secure, so we cannot promise that information will never be accessed without permission. If a breach affects your information, we will tell you as the law requires.

Pipeline Simple is based in the United States. We and our service providers may process information in the United States and other countries. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we use safeguards such as the European Commission's Standard Contractual Clauses.

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and get a copy.
• Correct it if it is wrong.
• Delete it.
• Object to or limit how we use it, and move it to another service.
• Withdraw consent you gave, for example by disconnecting Google Calendar.
• Opt out of the sale or sharing of personal information. We do not sell or share it.

To use these rights, email support@pipelinesimple.com. We will confirm who you are, answer within the time the law requires, and never treat you differently for asking. You may use an authorized agent, and you can complain to your local data protection authority.

If a customer holds your information, for example because you booked a meeting or chatted on their website, please contact the customer first. If you contact us, we will pass your request to them and help them answer it.

Pipeline Simple is for businesses and is not meant for children. We do not knowingly collect information from anyone under 16. If you think a child has given us information, email us and we will delete it.

We may update this policy. We will change the date at the top, and if a change is significant we will tell you by email or in the app before it takes effect.

Pipeline Simple, Inc. is responsible for the information in this policy, except where we process it for a customer. Email support@pipelinesimple.com with any question or request.