Privacy Policy

1. Introduction

Pipeworks ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services ("Service").

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, and password when you create an account
• Integration Credentials: API keys, OAuth tokens, and other credentials required to connect third-party services
• Contact Information: Information you provide when contacting us for support or inquiries
• Payment Information: Billing details processed through our payment processor (we do not store full payment card numbers)

2.2 Information Collected Automatically

• Usage Data: Tool calls, API requests, timestamps, and performance metrics
• Log Data: IP address, browser type, operating system, referring URLs, and access times
• Device Information: Device type, unique identifiers, and browser settings

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your account
• Connect your AI agents to third-party services as you direct
• Monitor usage patterns and optimize performance
• Detect, prevent, and address security issues and abuse
• Communicate with you about updates, support, and promotions
• Comply with legal obligations

4. How We Protect Your Information

We implement industry-standard security measures to protect your data:

• Encryption at Rest: All credentials and sensitive data are encrypted using AES-256-GCM before storage
• Encryption in Transit: All data transmission uses TLS 1.2 or higher
• Isolation: Each integration runs in an isolated environment with no shared state between tenants
• Access Controls: Role-based permissions and per-user tokens limit access to authorized personnel only
• Audit Logging: All access to credentials and tool calls are logged for security monitoring
• Regular Security Reviews: We conduct ongoing security assessments of our systems

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Credential Handling

We take special care with the credentials you provide to connect third-party services:

• Credentials are encrypted immediately upon receipt
• Credentials are decrypted only when needed to make authorized API calls
• Credentials are never logged in plaintext
• Credentials are never exposed through our APIs
• You can revoke or delete credentials at any time
• Upon account deletion, all credentials are permanently and irreversibly deleted

6. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

• Third-Party Services: When you connect an integration, we transmit your credentials to that service to make API calls on your behalf
• Service Providers: With vendors who assist in operating the Service (e.g., hosting, analytics), bound by confidentiality agreements
• Legal Requirements: When required by law, court order, or governmental regulation
• Safety and Rights: To protect the rights, property, or safety of Pipeworks, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Activity logs are retained for 90 days by default. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at contact us

9. Cookies and Tracking

We use cookies and similar technologies to:

• Authenticate users and maintain sessions
• Remember preferences and settings
• Analyze usage patterns and improve the Service
• Protect against security threats

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses or other approved mechanisms.

13. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at contact us

14. European Privacy Rights

If you are in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including access, rectification, erasure, restriction, data portability, and objection. Our legal bases for processing include contract performance, legitimate interests, and consent where applicable. You may also lodge a complaint with your local supervisory authority.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last updated" date and, where appropriate, by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

16. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact us at: