Privacy notice

Pipeline Habit stores account details, legal acceptance date and document version, project settings, team memberships, lead and contact records, message templates, drafts, immutable sent-message snapshots and template-version attribution, import metadata, sales activity, automation delivery attempts, inbound communication context, suppression records, and subscription state needed to provide the service. Non-empty source columns that are not mapped to a standard lead field may be retained as imported source context on the new lead.

Session and basic technical data are processed to authenticate users, verify email ownership, protect project access, diagnose failures, and operate the application. Authentication throttling stores HMAC-pseudonymized request keys rather than raw email and IP combinations. Public signup verification stores a single-use token hash for up to 24 hours, and password recovery stores a single-use token hash for up to 30 minutes; raw tokens are sent by email and are not stored.

Project data is used to build the daily action queue, render outreach drafts, track follow-ups and outcomes, and calculate project analytics. Sending is manual by default. A project owner may explicitly enable paced email automation for eligible leads; Pipeline Habit retains delivery and suppression records, stops future automated contact after an opt-out, and does not automatically send Instagram or LinkedIn direct messages, posts, submissions, or replies.

Google Sheets, Google Docs, CSV, and Excel sources are used for one-way import. PostgreSQL becomes the source of truth after import unless you run another import or status sync.

Pipeline Habit relies on infrastructure and service providers including Vercel for application hosting, Neon for PostgreSQL hosting, Stripe for billing and tax calculation, Resend for account verification, project invitations, and password recovery email, Hostinger for business and owner-enabled outreach email, Meta for read-only Instagram conversation synchronization when connected, and Google services when a project owner connects or imports a Google source. These providers process only the data needed for their role.

Pipeline Habit does not sell project or lead data and does not use it for third-party advertising.

Project access is limited by workspace membership. Owners can export project data as JSON, permanently delete a project, and delete their personal account from Account. Account deletion removes solely owned projects and revokes access to projects that remain with another owner.

Data is retained while the account or project is active and as reasonably needed for security, billing, tax, legal obligations, and provider backup cycles. An abandoned unverified public signup and its empty personal project may be removed after the verification link has been expired for 30 days; an existing invitation to another project is preserved. Contact the address below for corrections or requests that are not available in the product.