Privacy Policy

1. Information We Collect

When you create an account, we collect your name, email address, and a hashed version of your password. We also store the application tracking data you enter, including firm names, role titles, deadlines, notes, and contact information you choose to save. If you choose to connect Google, we also access the Gmail and Google Calendar data needed to power connected features, including message metadata, message snippets, and recruiting-related email content used to detect application updates.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Pipeline service
• Authenticate your account and protect your data
• Read connected Gmail and Calendar events to identify recruiting signals
• Suggest or automate pipeline updates based on clear recruiting outcomes in connected emails
• Improve the service based on usage patterns
• Send important service-related communications

3. Data Storage & Security

Your data is stored in a secure PostgreSQL database. Passwords are hashed using bcrypt with a cost factor of 12. We use HTTPS for all data transmission. Resume files are stored privately and served through authenticated routes. Signal payloads used to process inbox automation are pruned after 90 days, while derived activity history may remain so your pipeline timeline stays intact. We do not store payment information as the service is free.

4. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. The only exception is anonymized, aggregated data in the community discussion feature ("Hive"), where your chosen anonymous username is visible to other users. We also rely on service providers such as Google (for connected Gmail and Calendar features), Vercel, and Neon to operate the product. Those providers process data on our behalf only to deliver the service.

5. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your data in a machine-readable format
• Disconnect Gmail or Google Calendar access from your account

6. Cookies

We use essential cookies only for authentication (session tokens). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting a notice on the service.

8. Contact

If you have questions about this privacy policy or your data, please contact us at privacy@pipeline.dev.