Privacy Policy

Last updated: July 2026

1. What We Collect

We collect the following categories of information:

  • Account data — name, email, and company name you provide at signup
  • Form responses — the answers your respondents submit through forms you build, encrypted at rest (AES-256-GCM)
  • Usage data — basic technical logs (IP address, browser, timestamps) needed to operate and secure the Service
  • WhatsApp data — message content and metadata, only if you connect the WhatsApp integration

2. How We Use It

We use your information to:

  • Operate, maintain, and improve the Service
  • Authenticate your account and enforce access permissions
  • Send transactional emails (e.g. password resets) — never marketing email without your consent
  • Detect and prevent abuse, fraud, or security incidents

We do not sell your data, or the data your respondents submit through your forms, to third parties.

3. AI Assistant

If you use the Form Builder's AI Assistant, the text of your prompts (and, for context, your form's current field list) is sent to our third-party AI provider (Anthropic) to generate a response. Respondent data submitted through your published forms is never sent to the AI provider.

4. Data Storage & Security

Data is stored on MongoDB Atlas with encryption in transit (TLS) and, for form response answers specifically, encryption at rest. Access to your account's data is scoped per-tenant — no other customer's account can read or write your data.

5. Third-Party Services

We rely on the following third parties to operate the Service:

  • MongoDB Atlas — database hosting
  • Vercel — application hosting
  • Anthropic — AI Assistant, only when you use that feature
  • Meta (WhatsApp Business API) — only if you connect the WhatsApp integration

6. Data Retention

We retain your account data and form responses for as long as your account is active. You can delete individual forms and responses at any time from within the product. If you close your account, we delete your data within a reasonable period, except where we're required to retain it by law.

7. Your Rights

Depending on where you're located, you may have the right to access, correct, export, or delete your personal data. Contact us at the email below to exercise these rights.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you before they take effect.

9. Contact

Questions about this policy or your data? Reach us at hello@pipeline.app.