This Privacy Notice explains what personal information The Collective Software Group LLC ("Company") collects through PipelineGenie, how we use it, and the choices available to you.
1. Information We Collect
- Account data: name, email, company, role, login credentials.
- Customer content: listings, buyer/seller contacts, notes, tasks, messages, files, showing feedback, price history you enter.
- Payment data: processed by Stripe. We receive limited metadata (last four digits, brand, billing zip). We do not store full card numbers.
- Usage data: log data, IP address, browser, device, pages viewed, and diagnostic telemetry.
- Communications: emails you send us and support tickets.
2. How We Use Information
- To operate, secure, and improve the Service.
- To process payments and manage subscriptions.
- To send transactional email (receipts, security alerts, listing status).
- To respond to support requests.
- To comply with law and enforce our Terms.
We do not sell personal information. We do not use your customer data to train third-party AI models.
3. Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | USA |
| Supabase, Inc. | Database, auth, storage, edge functions | USA |
| Cloudflare, Inc. | CDN, DNS, edge runtime | Global |
| Resend / SendGrid | Transactional email delivery | USA |
| Lovable AI Gateway (Google, OpenAI, Anthropic) | AI model inference for price strategy and coaching | USA / EU |
4. AI Processing
Certain features send inputs (e.g., listing address, list price, days on market, agent notes) to AI model providers via our AI gateway. Providers process the request to generate output and do not use it for model training under the gateway's terms. See our AI Disclosure.
5. Data Retention
We retain account and customer data for the life of your account and for up to 90 days after cancellation, after which it is deleted or anonymized, except where longer retention is required by law (e.g., financial records).
6. Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and logged. See our Security Overview.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict processing; and to withdraw consent. California residents have rights under the CCPA/CPRA; EEA/UK residents have rights under the GDPR/UK GDPR. Submit requests to legal@getpipelinegenie.com.
8. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them.
9. International Transfers
Data is processed in the United States. Where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.
10. Changes
We will post changes to this Notice and, for material changes, notify you in-app or by email.
11. Contact
Privacy inquiries: legal@getpipelinegenie.com