Privacy Policy

Last Updated: November 13, 2026

1. Introduction

This Privacy Policy explains how PWLL UG (haftungsbeschränkt) ("Company," "we," "us," or "our") processes personal data when you use the pipe0 platform, API, and related services. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR).

Where we process personal data on behalf of a business customer — the records they submit to the Service and the results their pipes and searches retrieve — we act as their processor rather than as controller. That processing is governed by our Data Processing Agreement, not by this policy. This policy covers the data for which we are the controller. If you are an individual whose details were retrieved through pipe0 by one of our customers, section 6A explains where they come from, who is responsible for them, and how to object or opt out.

2. Data Controller

The data controller responsible for your personal data under this Privacy Policy is:

PWLL UG (haftungsbeschränkt)
Quitzowstrasse 118 10559 Berlin, Germany

3. Data We Collect

We collect the following categories of personal data:

• Account Information: When you sign up, we collect your name, email address, and payment details.
• API Usage Data: We collect metadata about your API requests, including timestamps and IP addresses.
• Communication Data: When you contact us, we collect messages, inquiries, and support requests.
• Integration Data: When you connect a third-party service (such as Slack, Google, HubSpot, Salesforce, or Attio), we collect and store the data described in section 8.

4. Legal Basis for Processing

We process your personal data based on:

• Contractual necessity (Article 6(1)(b) GDPR) for providing the services.
• Legitimate interests (Article 6(1)(f) GDPR) in ensuring service security and improving our services.
• Compliance with legal obligations (Article 6(1)(c) GDPR).

5. How We Use Your Data

We use your personal data for:

• Providing and maintaining the platform and API service.
• Monitoring and preventing fraudulent or abusive use.
• Improving and optimizing the service.
• Communicating with you about service updates and support.

6. Data Sharing and Processors

We do not sell your data. We share data with the following processors, who act under our instructions and implement appropriate security measures:

Enrichment providers

Pipes and searches route your inputs to third-party providers. Each provider is named in the pipe catalog entry for the pipe or search that calls it, together with the fields that pipe transmits. How a provider is engaged depends on what it does and on the connection you use:

• Data sources. Providers that return data from a database they compile themselves, such as contact or company data providers, act as independent controllers of that data. They are not our processors.
• Processing services. Providers that only process your inputs to return a result, such as email validation, web search and AI inference, act as our sub-processors when you use our managed connection.
• Custom connections. If you supply your own API key or OAuth grant, you contract with that provider directly, and it processes your data under your agreement with it rather than ours.

Annex IV of our Data Processing Agreement lists the providers, their roles, and where they are established.

6A. Individuals Whose Data Is Retrieved Through pipe0

pipe0 does not operate a contact database and does not sell personal data. When one of our customers runs a search or enrichment, pipe0 retrieves the result from a third-party source on that customer's instruction and delivers it to the customer. We do not add it to a database of our own or reuse it for other customers.

Where the data comes from

The details a customer receives through pipe0, such as your name, job title, employer, work email address, phone number and professional profile, come from one of three kinds of source:

• Data sources. Companies that compile and maintain their own databases of business contacts and companies. Each one decides for itself how it collects its data, and says so in its own privacy notice. Annex IV of our Data Processing Agreement names every data source pipe0 can reach, the company behind it, and the country it is established in.
• Public web pages. Websites and web search results that pipe0 reads on a customer's instruction.
• The customer's own systems. Records the customer already holds in a CRM or another tool it has connected.

The pipe catalog shows which source each pipe and search calls.

Our role and the legal basis

pipe0 handles these details as the customer's processor (Article 28 GDPR). We retrieve and deliver them on the customer's instructions and do not use them for purposes of our own.

• The customer who retrieved your details is their controller. It decides why it uses them and on which legal basis. For business-to-business outreach that basis is typically the customer's legitimate interests (Article 6(1)(f) GDPR), and you can object to it at any time (Article 21 GDPR). The customer is also responsible for telling you where it got your details.
• The data source is an independent controller of its own database. It is responsible for how it collected your details and for the legal basis it relies on, which its privacy notice sets out.
• pipe0 is a controller only of what you send us when you contact us about your details. We use it to handle your request, on the basis of our legal obligations (Article 6(1)(c) GDPR) and our legitimate interest in answering you (Article 6(1)(f) GDPR).

How to object or opt out

Use the privacy request form or email privacy@pipe0.com. You do not need a pipe0 account. Give us your name and the email address or profile URL your details may be filed under. We will then:

• tell you, where we can identify them, which customers retrieved your details and which data sources they came from;
• pass your objection or deletion request on to those customers, who must act on it as controllers; and
• point you to the opt-out process of each data source involved. Only the data source can remove you from its own database.

We respond without undue delay, and at the latest within one month of receiving your request. Section 11 describes when that period can be extended.

7. International Data Transfers

We are established in Germany. Several of the processors listed in section 6, and many of the enrichment providers reachable through the pipe catalog, are established in the United States or process data there.

Where we transfer personal data outside the European Economic Area, we do so on the basis of:

• the recipient's certification under the EU–US Data Privacy Framework, where that certification covers the transfer; or
• the Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914, together with any supplementary measures the transfer requires under Chapter V GDPR.

We do not currently guarantee that data is stored exclusively within the European Economic Area. If your use case requires EU-only processing, contact us at privacy@pipe0.com before you send us data.

8. Third-Party Integrations

When you connect an external service to pipe0 (for example Slack, Gmail, Google Calendar, HubSpot, Salesforce, or Attio), we store per connection:

• The access credentials the service issues (OAuth tokens), encrypted at rest with AES-256-GCM.
• Connection metadata: the identity of the connected workspace or account (for Slack: the workspace name and ID, the app's bot user ID, and the installer's Slack user ID), and the permissions (scopes) granted.

Content from connected services (for example a Slack message you configure a workflow to send, channel member lists you query, or a message you send to the pipe0 agent) is processed transiently to execute the operation you requested and appears in your workspace results where you store it. pipe0 does not read Slack channel history or direct messages between people.

Connection credentials and metadata are deleted when you delete the connection or your account, or when the connected service revokes the app's access.

Google API Services — Limited Use

pipe0's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is only used to provide the features you invoke, is never used for advertising, is never transferred except as necessary to provide those features or comply with law, and is never used to train generalized AI or machine-learning models.

The use of raw or derived user data received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. Where an AI feature you invoke processes such data, it is processed transiently by the AI processors listed in section 6, under agreements that prohibit them from training models on it (see section 9).

9. AI Processing

Parts of pipe0 — AI pipes, message drafting, and the pipe0 agent — are powered by large language models operated by the AI processors listed in section 6. The inputs you configure or send are transmitted to these providers to generate the requested output, under agreements that prohibit the providers from training their models on this data. pipe0 does not use your data, or data received from connected services, to train AI models. AI-generated output can be inaccurate; review it before relying on it.

10. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or comply with legal obligations. In particular:

• Account information: for the lifetime of your account, deleted within 30 days of account deletion (except where billing records must be retained under statutory retention duties).
• Integration credentials and metadata: until you delete the connection or your account, or the connected service revokes access.
• API usage metadata and logs: up to 12 months.
• API run records: the inputs and results of pipe and search runs, synchronous and asynchronous alike, are retained for 21 days from creation and are then deleted automatically, at the latest within 24 hours after that.
• AI processing inputs/outputs: processed transiently; retained only as part of the results stored in your workspace.
• Workspace data: for the lifetime of the sheet. Note that deleting a row removes it from the current version of a sheet but does not by itself erase it from the sealed earlier versions that make undo and point-in-time recovery possible. To have a record erased across sheet versions and backups, contact privacy@pipe0.com.

11. Your Rights

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data.
• Restriction: Limit how we process your data.
• Objection: Object to data processing based on legitimate interests.
• Data Portability: Receive your data in a structured format.

To exercise these rights, contact us at privacy@pipe0.com. We respond without undue delay, and at the latest within one month of receiving your request. Where a request is complex or we receive a large number of requests, the GDPR allows that period to be extended by up to two further months. If we need the extension, we tell you within the first month and explain why.

If your request concerns data that one of our business customers submitted to the Service, that customer is the controller of it. We will refer you to them and inform them of your request.

If you are an individual whose details were retrieved through pipe0, section 6A describes how to object or opt out, including through the privacy request form.

12. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including encryption of credentials at rest (AES-256-GCM), TLS for data in transit, and least-privilege access to production systems. Annex II of our Data Processing Agreement describes these measures in full. Our security overview summarises them.

13. Changes to This Policy

We may update this Privacy Policy periodically. Each version stays available at its own dated URL. Continued use of our services after updates constitutes acceptance of the changes.

14. Contact Us

For questions regarding this Privacy Policy, contact us at:

PWLL UG (haftungsbeschränkt)
Quitzowstrasse 118 10559 Berlin, Germany privacy@pipe0.com