What is the scope of this Privacy Policy?
This Privacy Policy applies to the processing of personal data by Pipecorn across all services offered, including access to the website and other online services (collectively, the “Services”), as well as through integrations such as browser extensions, or use of the Services through our API or other integrations.
Our commitment to privacy. Pipecorn is dedicated to respecting and protecting your privacy, ensuring the confidentiality and security of your personal data when you use the Services or when your information is included within the business profiles made available to users.
Scope of policy. This policy extends to all users of the Services whether accessing our website, using the Services as a registered user, appearing in the database as a Business Profile, or visiting as an unregistered Visitor. It also explains our practices when providing Services to clients and when processing personal data obtained from public sources or third parties.
Data processing and your rights. This policy explains the basis on which Pipecorn collects, uses and discloses personal data, ensuring compliance with applicable data protection laws. Acting as a data controller, we outline why processing is lawful, who may receive information, and how that information is used.
What personal information does Pipecorn process?
Under the General Data Protection Regulation (GDPR), there is a distinction between “Controllers” and “Processors” of personal data. A Controller is responsible for determining the purposes and means of processing, whereas a Processor processes data on behalf of the Controller.
Pipecorn as a “Controller”
- Website visitation (Visitor Data). When you visit our website, we track usage pages visited and session duration using information such as IP addresses, geolocation, browser types and website usage history. Cookies may be used for tracking across sessions. Processing is based on our legitimate business interests, with data retained no longer than 14 months after collection.
- Account creation (Account Data). When you create an account we collect email addresses, full names, phone numbers and payment/billing addresses where applicable. This data enables access to the Services, account authentication and communication about services and updates. The legal basis is contractual necessity, with data retained until you delete your account, subject to specific exceptions.
- Webinars and newsletters. When you register for a webinar or subscribe to a newsletter, we collect your name and email address on the basis of your consent, retained as necessary for the intended purpose.
- Service usage (Usage Data). We monitor usage through our sites, API and add-ons, logging requests and collecting data on feature usage, feedback, geolocation, payment information and browser details. This supports user-experience enhancement and fraud prevention, with a retention period of 3 months.
- User support (Support Data). When you contact support, we process usage data, names, contact information, subscription details and account data as necessary to provide support. Data is retained for up to 6 months after account deletion, or 9 months for non-logged-in user interactions.
- Public web data collection (Profile Data). We crawl public web pages to gather professional profile data, operating under legitimate business interests and storing this data for as long as it remains publicly available or until removal is requested.
Pipecorn as a “Processor”
- Account management and data enrichment. We process account settings, profile information and enrichment tasks on behalf of users, retaining this data for as long as the user account remains active.
- Contact management. Users can manage contact lists; we process the related personal information for as long as the user’s account is active.
Where Pipecorn acts as a Processor, we process personal data as instructed by our clients, who are the Controllers responsible for ensuring lawful processing and for handling data-subject rights requests under applicable laws.
Your rights and choices
You have the following rights in relation to the personal data we hold about you:
- Right to access to access your personal data and related information, including confirmation of whether your data is being processed, what is held, the purposes, retention period and legal bases.
- Right to rectification to have inaccurate personal data corrected or completed. Pipecorn users can log in and update their information at any time.
- Right to erasure to require deletion of personal data in certain circumstances provided by law.
- Right to restrict processing to require restriction or blocking of processing in certain circumstances. Restricted data may still be stored but not used further.
- Right to data portability to obtain your personal data in a structured, commonly used and machine-readable format, and potentially to have it transmitted directly to another party where technically feasible.
- Right to object to object to direct-marketing processing at any time, and to processing in some other circumstances.
- Right to withdraw consent where processing is based on consent, to withdraw that consent at any time.
Service providers helping us manage your data
When Pipecorn engages third-party service providers in its capacity as a data processor for users’ personal data, the GDPR refers to these providers as sub-processors. We maintain agreements with these providers to ensure your data is handled lawfully and securely.
Use of cookies
We use cookies to make sure the Sites work properly, analyze the use of the Services, save your preferences and serve relevant advertising. You can manage your cookie preferences through your browser settings.
How do you contact us?
If you have questions about this policy or wish to exercise your rights, write to us at contact@prontohq.com. If you have concerns about the use of your personal information, you can also make a complaint to the same address.