Effective date: [OWNER: effective date]
This policy explains what data Pipeback collects, why, who receives it, how long it is kept and what rights you have. [OWNER: have a lawyer review this whole document before launch].
Who we are
Pipeback is run by Vp Technology Ltda (CNPJ 30.286.117/0001-44), Rua Maestro Elias Lobo, 994, Apt 21, Bloco C, Jardim Paulista, São Paulo, SP, 01433-000, Brazil, a company organized under the laws of Brazil. You can reach us at privacy@pipeback.com.
If you run Pipeback on your own server, you are the operator of that installation, you are the controller of its data, and this document does not describe how you handle it. Replace it with your own policy.
Our role
- For your account, we are the controller of the data you give us.
- For form submissions, the owner of the form is the controller and Pipeback is the processor: we store and deliver answers on the owner's behalf and do not use them for our own purposes.
If you answered a form and want to see, correct or delete your answers, contact the owner of that form first.
Data we collect
Account holders
- Name, email address and a password hash, or the Google or GitHub account you link to sign in.
- Workspace, team and billing details, and the preferences you set (language, time zone, time format, week start).
- Content you create: forms, folders, templates, settings and the answers collected through your forms, including uploaded files.
- Technical data needed to run the service: sessions, security logs and error reports.
People who answer a form
- The answers and files they submit.
- Only strictly necessary cookies on form pages: a session cookie and a CSRF (XSRF) token cookie that keep the page working and protect it from forged requests, and, on a password protected form, a session entry that remembers the password was entered. These are not used for tracking.
- Each submission keeps a keyed hash of the IP address (used to apply the duplicate-submission limit, and not reversible without the server key), the country from the proxy header and a browser session id, for as long as the submission is kept. Unlike the visit hash, this hash does not change from day to day.
- Browser storage on the respondent's own device, used only to save a partly filled form for later.
- Form visit counting is cookieless. A visit is recorded with a hash of the IP address, the browser and the form, built with a salt that is rotated every day, so it can only be used to avoid counting the same visit twice and cannot be followed across days. The country is read from the request headers of the network proxy. The raw address is not stored with the visit, and raw visits are deleted after 35 days.
- The form owner may add analytics trackers (such as Google Analytics 4 or Meta Pixel) to their own forms. Those tools are controlled by the owner and their providers, not by Pipeback, and may set their own cookies.
Integrations and services you connect
Form owners can connect third-party services: Google Sheets, Notion, Airtable, Slack, Discord, Coda, Linear, Attio and webhooks to addresses of their choice. When you connect one, the submission data you choose is sent to it and is then governed by that service's own terms and privacy policy. Pipeback does not control what those services do with the data.
Payments
Billing is handled by Stripe. Card details go to Stripe and are never stored by Pipeback. Stripe also sends billing emails. Stripe's privacy policy applies to the data it handles.
Service providers
We use these providers to run the service: Amazon Web Services (hosting, database and file storage, United States), Laravel Forge (server management, United States), Laravel Nightwatch (error monitoring, United States), PostHog (product analytics, United States), Crisp (support chat, France), Stripe (billing, United States) and Sendkit (email delivery, Brazil).
How long we keep data
- Deleted forms, folders and answers stay in the trash for 90 days, then they are erased.
- Version history of a form is saved on every plan and kept for 90 days. Viewing and restoring it is a Pro feature.
- Submission exports are available for 24 hours.
- When an owner deletes a workspace, its forms, folders, answers, files and settings are erased right away. Billing records stay with Stripe as the law requires.
- Backups are kept for up to 90 days.
- Answers are kept as long as the form owner keeps them. Other data is kept as long as your account is open, unless this policy says otherwise.
Your rights
Depending on where you live (for example under the GDPR or the LGPD), you may ask to access, correct, export or delete your data, object to or restrict its use, and complain to your data protection authority. Write to privacy@pipeback.com. We answer within 15 days.
Children
Pipeback is not directed at people under 18.
Changes
We will update the effective date above when this policy changes and tell account holders about material changes by email.
Contact
Vp Technology Ltda (CNPJ 30.286.117/0001-44), Rua Maestro Elias Lobo, 994, Apt 21, Bloco C, Jardim Paulista, São Paulo, SP, 01433-000, Brazil. Privacy contact: privacy@pipeback.com