Privacy

The Pipe Review is operated by Paolo Bruschi, trading as The Pipe Review, Offenbachsvej 23, 2450 Copenhagen, Denmark, who is the data controller for the personal data described here.

For anything in this notice, write to hello@thepipereview.com. A person reads it.

The deals you type, your settings and your closed months are stored in your own browser, using local storage. The ten-thousand-trial simulation runs on your machine. None of it is sent to us, and we could not produce it if asked.

Clearing your browser data deletes it permanently, and we hold no copy to restore from.

We store, against your account:

• Your email address — to identify you and send you a sign-in link. There is no password.
• Your pipeline — the deal names, owner names, values, close months and win percentages you enter, plus your settings.
• Your forecast history — a dated record of each forecast, which deals it contained, and what you later marked won, lost or moved. This is what the track record is read from; without it that feature cannot exist.
• Subscription state — your plan, whether a subscription is active, when the period ends, and an identifier from Stripe.

The legal basis is performance of our contract with you: each item above is needed to provide the thing you asked for. We do not sell it, use it to train anything, or share it for advertising.

Note that deal and owner names may be personal data about other people — your colleagues and your customers' staff. You decide what to type; if you would rather not, initials work as well as names for everything the tool does.

Payments are handled by Stripe. Card details are entered on Stripe's own checkout page and never reach our servers — we could not see your card number if we wanted to. We keep the customer and subscription identifiers Stripe gives us, so we know what you are entitled to.

We send transactional email only: your sign-in link, and account messages such as a reminder before a trial ends. There is no newsletter and no marketing list.

We use Umami, which is cookieless and does not fingerprint or follow anyone across sites. It records that a page was viewed and that an action happened — a month was closed, a pipeline was pasted — never what was in it. Deal counts are rounded into ranges before being recorded, and no deal name, value or total is ever sent.

Blocking it changes nothing about how the app works.

We use no advertising or tracking cookies, which is why you have not been asked to consent to any. Signed in, your browser holds a session token so you stay signed in. Either way, your working pipeline may be kept in local storage on your device — that is storage, not a cookie, and it is never transmitted.

Supabase (database and authentication), Stripe (payments), Lovable (hosting and transactional email) and Umami (analytics). Each acts on our instructions under a processing agreement.

Some of these providers process data outside the European Economic Area — Stripe in particular is a United States company — under the safeguards set out in their own data processing agreements, such as the European Commission's standard contractual clauses. If you want to know exactly where a particular piece of your data sits, ask us and we will tell you.

Your pipeline and forecast history are kept for as long as your account exists — the point of a track record is that it accumulates, and pruning it would quietly damage the numbers it produces. Change snapshots are capped at the most recent hundred.

Ask us to delete your account and we remove your pipeline, your history and your profile. Records Stripe must keep for accounting and tax reasons stay with Stripe.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to what we do with it. Write to hello@thepipereview.com and we will respond within a month.

You can export your pipeline from the app at any time without asking. If you think we have handled your data badly, you can complain to your national data protection authority.

If this notice changes in a way that matters, we will say so on this page and, for anything significant, by email. The date at the top is the version you are reading.

Most visitors give us nothing at all. Those who sign in give us a pipeline and an email address, and can have both back or deleted by asking. See also our terms.