Privacy Policy

1. Data we collect from Members

• Account info: name, email, password (handled by our auth provider, never stored in plain text).
• Business profile: whatever you enter — services, prices, hours, address, phone, website, social links, brand colors.
• Billing info: handled entirely by Stripe — we store your plan and subscription status, never your full card number.
• Usage data: which AI tools you use and how often (to enforce your plan's monthly limits and show you the meters).

2. Data we collect from Visitors (your customers' customers)

When someone chats with a Member's AI receptionist widget or fills in a form on a Member's AI-built website, we may collect:

• Lead details they choose to give: name, phone number, email, and what they asked about.
• The conversation transcript itself.
• Appointment details, if they book one.
• Basic visit info: page visited, referring site, and an approximate country/city (from network-level location, not GPS/precise location) — used to show the Member simple visitor stats. No advertising cookies or cross-site tracking.

This data belongs to the Member (the business the Visitor was talking to) — we process it on that Member's behalf so they can follow up. If you're a Visitor and want your data removed, contact the business you spoke with, or reach us directly (Section 7) and we'll route it to them.

3. How we use this data

• To run the service: answer chats, capture leads, send booking confirmations and follow-ups, generate your website/marketing content.
• To send Members transactional emails (lead alerts, daily reports) and, if you've agreed, product updates.
• To bill paid plans and prevent abuse of free-tier limits.
• To improve the product — in aggregate, not by reading individual conversations for any purpose beyond delivering the service.

4. Who we share it with

We don't sell personal data. We share it only with the service providers that make Pipeliner work, each acting as our data processor:

• Supabase — database and authentication (where almost all your data actually lives).
• Anthropic (Claude) — powers the AI receptionist and content drafting; conversation/profile text is sent to their API to generate replies.
• Hugging Face — generates AI photos from a text description of your business.
• Stripe — payment processing.
• Resend — transactional email (lead alerts, follow-ups, receipts).
• Vercel — hosting.
• Google (Places API) — only for the Lead Finder tool, and only public business listing data.
• Telegram — only if you connect the daily-report bot yourself.
• Whichever social platforms (Facebook/Instagram/LinkedIn/YouTube/TikTok) you personally connect for posting — only what's needed to publish the posts you approve.

We may also disclose data if legally required to, or to protect the security of the service.

5. How long we keep it

We keep account and lead data for as long as your account is active, plus a reasonable period after cancellation in case you resubscribe. Ask us to delete it sooner (Section 7) and we will, other than what we're legally required to keep (e.g. billing records).

6. Your rights

Wherever you're located, you can ask us to access, correct, export, or delete the personal data we hold about you, or to stop processing it. Members can self-serve most of this from the portal (edit or delete your own profile/lead data). For anything else, or if you're a Visitor, contact us using Section 7 and we'll respond promptly.

7. Contact

Members: use the Support tab in your portal. Anyone else: info@pipeliner.eu, or by post at Terbregseweg 120, 3056 JX Rotterdam.

8. Children

Pipeliner is for businesses — it isn't directed at children, and we don't knowingly collect data from anyone under 16.

9. Changes to this policy

If we materially change how we handle personal data, we'll update this page and, for significant changes, let Members know directly.