Privacy policy

1. Controller

[Legal entity name], [Registered address] (“PipelinePilot”). Privacy questions: privacy@pipelinepilot.example.

2. Website visitors

• Forms (contact, Enterprise, email-marketing enquiries): name, business email, company and the information you write. Used to answer you. Lawful basis: steps at your request before a contract / legitimate interest. Kept for up to 24 months after our last contact.
• Analytics: only if you accept them, we record anonymous funnel events (event name, page path, package). No cookies, no IP addresses, no profiles. See our cookie policy.
• Security: to prevent abuse, form submissions are rate limited using a one-way hash of the network address, kept for no longer than one hour of activity.

3. Customers

When you buy, our payment provider Whop processes your payment details and shares with us the payment confirmation, your name and email address. We never receive card numbers. Your onboarding answers (company details, target audience, offer, booking link and notification email) are used to deliver your campaign. Lawful basis: performance of a contract; accounting records are kept as required by law.

4. Business prospects contacted in our campaigns

If you received an outreach email from us on behalf of one of our customers, this section is for you.

• Data: your name, business email address, job title, employer and business-related public information such as company size, sector and location, plus any replies you send.
• Sources: publicly available business sources (such as company websites and professional profiles) and commercial B2B data providers who supply business contact information. On request we will tell you the specific source of your data.
• Purpose and lawful basis: relevant B2B communication about our customer's products or services, based on legitimate interest, and in accordance with the electronic marketing rules of your country.
• Your choice: every email contains an opt-out. If you object or unsubscribe, we stop contacting you and keep only what is needed to respect that choice (suppression list).
• Sharing: if you reply with interest, your reply is forwarded to the customer whose services were offered.
• Retention: prospect data is kept for the duration of the campaign plus up to 12 months, unless you object earlier.

5. Recipients and processors

We use service providers for hosting and databases, email delivery, payment processing (Whop), and campaign infrastructure, bound by data processing agreements. A list of sub-processors is available on request from privacy@pipelinepilot.example. Where data is transferred outside the EEA/UK, we rely on adequacy decisions or standard contractual clauses.

6. Your rights

You can ask for access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest — including direct marketing, which we will always respect. Contact privacy@pipelinepilot.example. You can also complain to your data protection authority (for example the ICO in the UK, the Autoriteit Persoonsgegevens in the Netherlands, or the Gegevensbeschermingsautoriteit in Belgium).

7. Security

Data is stored with access controls and encrypted connections. Onboarding links use private, single-purpose tokens; internal notifications contain an order reference and a link to a protected admin area rather than your details.