Privacy Policy

This Privacy Policy explains how Pipeboard ("we", "our", or "the App") collects, uses, stores, and protects your data when you use Pipeboard's secure Model Context Protocol (MCP) servers to connect your own AI assistant or LLM client (such as Claude or ChatGPT) to your advertising, analytics, and commerce platform accounts (including Meta Ads, Google Ads, Google Analytics, Google Merchant Center, Pinterest Ads, TikTok Ads, Snap Ads, LinkedIn Ads, Reddit Ads, Microsoft Advertising, and Shopify), and when you use related features such as Scheduled Reports.

Pipeboard is an independent application and is not endorsed by, affiliated with, or sponsored by Pinterest, Meta, Google, TikTok, Snap, LinkedIn, Reddit, Microsoft, or Shopify. All product names, logos, and trademarks are the property of their respective owners and are used here for identification purposes only.

This Privacy Policy is designed to comply with the data protection laws that apply to Pipeboard, including Brazil's Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018), enforced by the Autoridade Nacional de Proteção de Dados (ANPD), and other applicable data protection regulations. Section 2 explains the legal basis (LGPD art. 7º) we rely on for each purpose of processing; Section 6 explains how long we keep your data; and Section 7 explains your rights as a data subject (titular) under LGPD arts. 18 and 20, including how to exercise them and how to file a complaint with the ANPD.

1. Data We Collect

The data Pipeboard handles falls into four groups: (1.1) your Pipeboard account and authentication data; (1.2) the advertising, analytics, and commerce data we access on each connected platform on your instruction; (1.3) personal data about your own customers and leads, which a small number of optional features handle; and (1.4) usage and operational metadata. We only request the minimum permissions each platform needs for the features you use, read by default, and write or modify only where you instruct us to.

1.1 Your account & authentication data

• Pipeboard account: your name and email address, and (where you sign in with email and password) a securely hashed password.
• Connection identity: when you connect a platform, we store the identifiers that platform returns so we can label the connection and route requests — for example your Facebook account name and user ID, your Google Account email, your TikTok advertiser and Business Center IDs, your Snap organization IDs, your Pinterest username, your LinkedIn member identifier (name, email, and profile picture from sign-in), your Reddit account name, your Microsoft account email, or your Shopify store domain — along with the ad accounts, business accounts, and pages you have access to.
• Authentication tokens: OAuth access and refresh tokens (and, for Meta, Facebook Page access tokens) and any Pipeboard API tokens, stored encrypted and used only to maintain your connection.

We do not collect or store:

• Your Facebook, Meta, Google, Pinterest, TikTok, Snap, LinkedIn, Reddit, Microsoft, or Shopify password.
• Any private messages or unrelated personal content.

1.2 Data we access on your connected platforms

For each platform you connect, we access the advertising, analytics, or commerce data described below so the AI assistant you connect can analyze and (only where you instruct it) manage your accounts. Some platforms also let optional features handle personal data about your customers or leads; those are described in Section 1.3.

• Meta / Facebook Ads: the Facebook Pages, ad accounts, and Business Manager assets you manage; campaigns, ad sets, ads, creatives, audiences, pixels, product catalogs, and Instagram business-account insights; and performance metrics (impressions, clicks, conversions, spend, reach, video views). Where you instruct us, we create or modify campaigns, ad sets, ads, creatives, audiences, and catalogs. We read lead form configuration (form names and questions), but not the responses people submit (see Section 1.3).
• Google Ads: campaigns, ad groups, ads, keywords, audiences, asset extensions, account structure and settings, and performance metrics (impressions, clicks, conversions, costs). Where you instruct us, we create or modify these entities.
• Google Analytics (GA4): report results (such as sessions, users, traffic sources, conversions, revenue, engagement, and realtime activity) and property metadata and configuration (properties, data streams, dimensions, metrics, conversion events, custom dimensions and metrics, and linked Google Ads accounts). Where you instruct us, we edit property configuration such as custom dimensions, custom metrics, and conversion events. Here, “conversion events” are event definitions and aggregate counts, not records about individual people.
• Google Merchant Center: account information, product listings and attributes, product and item issues and diagnostics, price competitiveness, best sellers, and Shopping performance data. Where you instruct us, we update product attributes (such as destinations and custom labels) and create data sources.
• Pinterest Ads: campaigns, ad groups, ads, Pins, boards, product catalogs, audiences, conversion tags, and analytics. Where you instruct us, we create or modify campaigns, ads, audiences, Pins, catalogs, customer lists, and conversion tags, and can send conversion events (see Section 1.3).
• TikTok Ads: campaigns, ad groups, ads, creatives, audiences, pixels and pixel event statistics, identities, and product catalogs, plus performance metrics. Where you instruct us, we create or modify these and can build customer-list audiences (see Section 1.3).
• Snap Ads: campaigns, ad squads, ads, creatives, pixels, audience segments, custom conversions, and performance statistics. Where you instruct us, we create or modify these, manage custom conversions, and can build customer-list segments (see Section 1.3).
• LinkedIn Ads: the sponsored ad accounts you have access to; campaigns, campaign groups, creatives, audiences, conversion rules, and reporting and analytics. Where you instruct us, we create or modify campaigns, creatives, audiences, and conversion rules. If you grant the lead-generation permission, we can also retrieve lead form responses, which contain personal information about your leads (see Section 1.3).
• Reddit Ads: campaigns, ad groups, ads, audiences, lead generation forms (listing and creation only), targeting entities, and reporting. Where you instruct us, we create or modify these and can send server-side conversion events (see Section 1.3).
• Microsoft Advertising: the advertising accounts and customers you manage; campaigns, ad groups, ads, and keywords with their settings and performance metrics. Where you instruct us, we create or modify these entities. This integration does not access lead form or conversion-event data.
• Shopify: your store profile (domain, shop ID, name, contact email, currency, and timezone), products and variants, orders (including line items and, where the feature requires it, the customer's name, email, and shipping/billing address), and shop analytics. Where you have granted Shopify Protected Customer Data Access, orders may also include attribution/journey details. We access Shopify customer personal data only to the extent required for the features you enable (see Section 1.3).

1.3 Personal data about your customers and leads

Most of the data above is about your own accounts and campaigns. A small number of optional features cause Pipeboard to handle personal data about your customers and leads. We access this data only when you enable the relevant feature, only on your instruction, and only to deliver that feature:

• Lead form data:
  • LinkedIn Ads — if you grant the LinkedIn lead-generation permission and ask us to, we retrieve the responses submitted through your lead gen forms. These contain the personal information your leads provided, which may include their name, email address, phone number, job title, company, and the answers to your form questions, so we can return those leads to you.
  • Meta / Facebook Ads — we read lead form configuration (form names and question types) to help you build and manage forms. We do not read the responses people submit through Meta lead forms.
  • Reddit Ads and Pinterest Ads — we can list and create lead generation forms (form configuration). We do not read the responses people submit.
• Conversion events (Conversions APIs): where you instruct us, Pipeboard sends server-side conversion events to Meta, Pinterest, Reddit, and LinkedIn for measurement and optimization. Any customer identifiers in those events (such as email addresses and phone numbers) are normalized and SHA-256 hashed by Pipeboard before transmission — the platform receives only hashes, never raw identifiers. We send these events; we do not read back individual conversion records.
• Customer-list / custom audiences: where you instruct us, you can upload your own customer lists to build custom or lookalike audiences on Meta, TikTok, Snap, and Pinterest. Identifiers (such as email addresses, phone numbers, and mobile advertising IDs) are SHA-256 hashed before they are sent to the platform.
• Shopify customer data: where you enable Shopify features that require it, we access Shopify customer personal data such as names, email addresses, shipping/billing addresses, and order line items, and — only if you have Shopify Protected Customer Data Access — order attribution and journey details (landing page, referrer, UTM parameters, and source). We access this only to the extent needed to provide the feature, in accordance with Shopify's Protected Customer Data requirements.

We do not sell this data or use it for our own marketing. We process it solely to provide the feature you enabled, on your instruction, and retain it only as long as needed for that purpose (see Sections 6 and 7).

1.4 Usage & operational metadata

• Usage Metadata: We collect data such as timestamps, API calls made, account identifiers, or error logs for operational and debugging purposes. Access to these logs is restricted to authorized personnel.

2. How We Use Your Data

Your data is used only for the following purposes:

• To authenticate you via Facebook Login, Google OAuth, Pinterest OAuth, TikTok OAuth, Snap OAuth, or Shopify OAuth.
• To access your Meta Ads, Google Ads, Google Analytics, Google Merchant Center, Pinterest Ads, TikTok Ads, Snap Ads, LinkedIn Ads, Reddit Ads, Microsoft Advertising, and/or Shopify account securely and make your advertising, analytics, and commerce data available to your chosen AI assistant.
• To connect your chosen AI assistant to your ad platforms so it can analyze, suggest, or — where you instruct — carry out ad operations on your data, and to generate reports through features such as Scheduled Reports.
• To improve our system performance and reliability.

Your data is never sold, shared with third parties for marketing purposes, or used beyond the described scope.

Legal bases for processing (LGPD, art. 7º)

Where Pipeboard is the controller (controladora) of your data — as our own customer, rather than as the operator of data you bring us about your customers or leads — each purpose of processing rests on one of the following legal bases under art. 7º of the LGPD:

For the full list of cookies in each category, their duration, and provider, see our Cookie Policy.

3. Data Sharing

We only share your advertising, analytics, and commerce data (Meta Ads, Google Ads, Google Analytics, Google Merchant Center, Pinterest Ads, TikTok Ads, Snap Ads, LinkedIn Ads, Reddit Ads, Microsoft Advertising, and Shopify) with:

• The AI/LLM system you explicitly connect to, for the purpose of providing insights, reports, or automated workflows.
• Internal services necessary to perform the requested operations.

All data sharing is done securely using encrypted connections.

International data transfers (LGPD art. 33)

Pipeboard is operated by a Brazilian company (see Section 13), but several of the infrastructure and service providers we rely on operate outside Brazil. Account, usage, and — where applicable — customer/lead data described in this policy may be transferred to and processed in the United States and other countries where our sub-processors operate:

These transfers rely on a basis recognized by LGPD art. 33 — including standard contractual clauses approved by the ANPD (Resolução CD/ANPD nº 19/2024), other contractual safeguards, or your consent where applicable — and are subject to the technical and organizational measures described in our Data Processing Agreement (Annex III — sub-processors; Annex IV — Brazil/LGPD Addendum).

4. Google API Services User Data Policy

Pipeboard's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we commit to the following:

• Limited Use: We only use Google user data to provide and improve the user-facing features that are prominent in our application's user interface. We do not use Google user data for serving advertisements, including retargeting, personalized or interest-based advertising.
• No Sale of Data: We do not sell Google user data to third parties.
• No Use for Credit Assessment: We do not use Google user data for determining creditworthiness or for lending purposes.
• Restricted Transfer: We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, to comply with applicable laws, or as part of a merger, acquisition, or sale of assets with user notice.
• No Human Reading Without Consent: We do not allow humans to read Google user data unless we have the user's affirmative agreement, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.

This section applies to all Google services you connect to Pipeboard — Google Ads, Google Analytics, and Google Merchant Center — and to the Google Account identity used to authenticate them. “Google user data” means the data Pipeboard accesses through Google APIs using the permissions you grant.

What Google User Data We Collect:

• Google Account identity — your Google Account email address and basic profile information (such as your name and profile picture), collected when you connect any Google service, used to authenticate and label the connection.
• Google Ads data — campaign information (names, status, budgets, bidding strategies), ad group and ad creative data, keyword and targeting information, performance metrics (impressions, clicks, conversions, costs), and account structure and settings.
• Google Analytics data — Google Analytics 4 report results (such as sessions, users, traffic sources, conversions, revenue, engagement, and realtime activity) and property metadata and configuration (properties, data streams, dimensions, metrics, conversion events, custom dimensions and metrics, and linked Google Ads accounts).
• Google Merchant Center data — Merchant Center account information, product listings and attributes, product and item issues and diagnostics, price competitiveness, best sellers, and Google Shopping performance data.

How We Use Google User Data:

• To provide the user-facing features you request — making your Google Ads, Analytics, and Merchant Center data available to the AI assistant you connect, so it can answer questions, generate reports and insights, and (only where you explicitly instruct it) carry out changes such as creating or updating campaigns, editing Analytics property configuration, or updating product attributes.
• To display your connected data within the Pipeboard interface.
• To generate reports and insights, including through features such as Scheduled Reports.
• To operate, secure, debug, and improve the reliability of these features.

We do not use Google user data for serving advertisements (including targeted, personalized, interest-based, or retargeted advertising), for determining creditworthiness or lending, for selling to data brokers or information resellers, or for training generalized AI or machine-learning models. Our use is limited to providing and improving these user-facing features.

With Whom We Share, Transfer, or Disclose Google User Data:

• The AI/LLM assistant you explicitly connect (such as Claude or ChatGPT), for the sole purpose of providing the insights, reports, or operations you request.
• Service providers and internal systems strictly necessary to perform the operations you request (for example, secure hosting and our LLM provider), configured with privacy-preserving / no-training settings where available.

We do not sell Google user data, and we do not transfer or disclose it to third parties for purposes other than providing or improving these user-facing features, except to comply with applicable law or as part of a merger, acquisition, or asset sale with prior user notice.

How We Store, Retain, and Delete Google User Data:

• OAuth access and refresh tokens are stored securely with industry-standard encryption, used only to maintain your connection.
• We generally call the Google APIs live each time we need your data. Report, campaign, and listing data may be cached temporarily to improve performance but is not retained long-term.
• We retain Google user data only for as long as needed to provide the features described in this policy, or as required by law. When the retention period expires or you delete your account, we delete or destroy the associated data.
• You can revoke Pipeboard's access at any time by disconnecting the service in Pipeboard, through your Google Account permissions, or by requesting deletion at privacy@pipeboard.co. See our User Data Protection page for details.

How We Protect Google User Data:

• We use encryption in transit and at rest, along with access controls, to protect the confidentiality of your data.
• Access to tokens, logs, and connected data is restricted to authorized personnel for operational, security, and support purposes only.

5. Pinterest Developer & API Terms Compliance

Pipeboard's use of information received from the Pinterest API adheres to the Pinterest Developer and API Terms of Service and the Pinterest Developer Guidelines.

Specifically, we commit to the following:

• Purpose Limitation: We only use Pinterest data to provide and improve the user-facing advertising-management features you access in Pipeboard (reporting, insights, optimization suggestions, and campaign management you initiate). We do not use Pinterest data for any other purpose.
• No Long-Term Storage of Pinterest Data: Other than your own campaign analytics information, we do not store information accessed through the Pinterest API. We call the Pinterest API each time we need to access information. OAuth tokens are stored securely for the sole purpose of maintaining your connection.
• No Data Joining: We do not join Pinterest data with personal information about Pinterest end users, and we do not combine your Pinterest account information with information from other people's accounts or from other services.
• No Sale of Pinterest Data: We do not sell Pinterest data to third parties, and we do not share Pinterest data with third parties (including other advertising services) except with the person whose account the information came from.
• No Off-Platform Ad Targeting: We do not use information from Pinterest to target people with advertising outside of Pinterest.
• No AI Model Training on Pinterest Data: We do not use Pinterest data to train machine-learning or AI models, except for models personalized to you that do not transfer your data to third parties.
• No Scraping or Unauthorized Extraction: We only access Pinterest information via the official Pinterest API and only with your authorization.
• Data Breach Notification: If we become aware of any breach or compromise implicating Pinterest data, we will promptly notify Pinterest and affected users as required by the Pinterest Developer and API Terms of Service.

6. Data Storage and Security

• We store access tokens and minimal user metadata securely using industry-standard encryption and access controls.
• Your advertising data may be cached temporarily for performance but is not stored long-term without your explicit consent.
• Logs and analytical data may contain account identifiers for debugging and support purposes. Access is restricted to authorized personnel.

Data retention

We keep personal data only for as long as needed for the purpose it was collected:

This table mirrors Annex I.H (Retention) of our Data Processing Agreement (DPA), available at pipeboard.co/dpa.

7. Your Rights and Data Deletion

As a data subject (titular), the LGPD gives you a set of rights over your personal data (art. 18), plus a specific right to review automated decisions (art. 20). This section explains those rights, how to revoke consent, how to file a complaint with the ANPD, and how to disconnect a specific platform.

Your rights as a data subject (LGPD, art. 18)

At any time, free of charge, you can request:

• Confirmation of whether we process your personal data.
• Access to your data — in a simplified format immediately, or a complete report within 15 days.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed in violation of the LGPD.
• Portability of your data to another provider, subject to our trade secrets.
• Deletion of data we process on the basis of your consent.
• Information about which public and private entities we have shared your data with.
• Information about the consequences of not providing consent, where consent is the basis for a given processing activity.
• Revocation of your consent at any time (see below).
• Review of automated decisions that affect your interests, including the criteria and procedures used (see below) — art. 20.

Automated decisions (LGPD, art. 20)

Pipeboard's AI assistant can analyze your advertising accounts and — only where you explicitly instruct it — create, modify, or pause campaigns, ad sets, ads, budgets, and related entities. We do not use your data to make fully automated decisions about you (for example, scoring, profiling, or restricting your account) without the possibility of human review. Any action the AI assistant takes on your ad accounts is either taken on your specific instruction in that session, or, for larger or higher-impact bulk changes, subject to an explicit confirmation step before it is applied. You can request a review of any AI-assisted action recorded in your account, ask a human at Pipeboard to explain the criteria behind it, and contest it, by writing to privacy@pipeboard.co.

Revoking your consent

Where we rely on your consent — for example, analytics and marketing cookies — you can revoke it at any time, as easily as you gave it, using Cookie Preferences (also available in the footer of every page), or by writing to privacy@pipeboard.co. Revoking consent does not affect the lawfulness of processing carried out before the revocation, and does not affect processing we carry out on other legal bases (such as the execution of your Pipeboard subscription contract).

Filing a complaint with the ANPD

If you believe we have not adequately addressed your request, or that our processing of your personal data violates the LGPD, you can file a complaint with Brazil's Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd, in addition to — not instead of — contacting us directly at privacy@pipeboard.co.

Revoking access to a connected platform

You can revoke Pipeboard's access to a specific connected platform at any time:

• Revoke Facebook App permissions at any time via your Facebook settings.
• Revoke Google permissions (Google Ads, Google Analytics, and Google Merchant Center) at any time via your Google Account permissions.
• Revoke Pinterest permissions at any time via your Pinterest apps & integrations settings.
• Revoke TikTok permissions at any time via your TikTok Ads Manager authorized apps settings, or by contacting us at privacy@pipeboard.co.
• Revoke Snap permissions at any time via your Snap Ads Manager connected applications settings, or by contacting us at privacy@pipeboard.co.
• Revoke LinkedIn permissions at any time via your LinkedIn permitted-services settings, or by contacting us at privacy@pipeboard.co.
• Revoke Reddit permissions at any time via your Reddit authorized applications settings, or by contacting us at privacy@pipeboard.co.
• Revoke Microsoft Advertising permissions at any time via your Microsoft account app access settings, or by contacting us at privacy@pipeboard.co.
• Revoke Shopify permissions at any time by uninstalling the Pipeboard app from your Shopify admin (Settings → Apps and sales channels), which triggers Shopify's standard app-uninstall data-removal flow.

For comprehensive information on how to delete your account and data, please visit our User Data Protection page. This page provides detailed instructions on:

• Deleting your account through our dashboard
• Requesting data deletion via email
• How we handle Meta Ads, Google Ads, Google Analytics, Google Merchant Center, Pinterest Ads, TikTok Ads, Snap Ads, LinkedIn Ads, Reddit Ads, Microsoft Advertising, and Shopify data when you delete your account

To exercise your rights, contact us at privacy@pipeboard.co.

8. Third-Party Services

This App may connect to third-party services like Meta, Google, Pinterest, TikTok, Snap, LinkedIn, Reddit, Microsoft, Shopify, and AI tools. We do not control these services and are not responsible for their privacy practices. Please refer to their respective privacy policies:

• Meta Privacy Policy
• Google Privacy Policy
• Pinterest Privacy Policy
• TikTok Privacy Policy
• Snap Privacy Policy
• LinkedIn Privacy Policy
• Reddit Privacy Policy
• Microsoft Privacy Statement
• Shopify Privacy Policy

9. Advertising and Analytics

We use third-party advertising and analytics services to measure and improve our marketing effectiveness:

• Google Ads: We use Google Ads conversion tracking to measure signups and purchases. This may include sharing hashed email addresses and transaction data with Google for attribution purposes. You can opt out of personalized advertising at https://www.google.com/settings/ads.
• Meta Pixel: We use Meta Pixel to track website visits and conversions for advertising purposes.

These services may use cookies and similar tracking technologies. For more information, see their respective privacy policies:

• Google Privacy Policy
• Meta Privacy Policy

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here, and we encourage you to review it regularly. If significant changes are made, we will notify users via in-app messaging or email.

11. AI and Model Training

As of today, we do not use customer content or connected advertising and commerce data (including Meta Ads, Google Ads, Pinterest Ads, TikTok Ads, Snap Ads, LinkedIn Ads, Reddit Ads, Microsoft Advertising, and Shopify data) to train AI models for product improvement. If we introduce “smart” features that benefit from learning across accounts, we will provide advance notice and an account‑level opt‑out before using customer content for that purpose. Unless you opt out, your content may be used to improve those features. You can opt out at any time via settings or by contacting us at privacy@pipeboard.co. We honor deletion requests, including removal of derived training artifacts where feasible. For hosted LLM providers, we send only what’s necessary and configure privacy‑preserving/no‑training settings where available.

Note regarding Google user data: Consistent with Google's Limited Use requirements, we do not use Google user data for training machine learning or AI models, except for models personalized to you that do not transfer data to third parties.

Note regarding Pinterest data: Consistent with the Pinterest Developer and API Terms of Service, we do not use Pinterest data to train machine-learning or AI models, except for models personalized to you that do not transfer your data to third parties.

12. Aggregated Insights & Benchmarks

We may use data from connected advertising accounts to produce anonymized, aggregated statistical summaries — for example, median click-through rates by vertical, or return on ad spend distributions by spend tier. These summaries are derived from data across multiple accounts with two safeguards: a minimum cohort size of 20 accounts, and no single account may represent more than 20% of an aggregated cohort's total spend. These thresholds ensure no individual advertiser's performance can be inferred from published aggregates.

Aggregated insights may be used for benchmarking features within Pipeboard (such as comparing your performance to industry averages) and, potentially, anonymized benchmark reports available to subscribers. Individual account metrics, creative assets, audience targeting configurations, and any data that could identify a specific advertiser are never shared.

Note regarding Google user data: Consistent with Google's Limited Use requirements, any Google user data (including Google Ads, Google Analytics, and Google Merchant Center data) included in aggregated insights is used only to provide and improve user-facing features of Pipeboard, and is never transferred to third parties in identifiable form.

Note regarding Pinterest data: The Pinterest Developer Guidelines restrict combining account information across people and services. Unless we have Pinterest's express written authorization, Pinterest data is excluded from cross-account aggregated benchmarks. Where permitted, any Pinterest data used in aggregated insights is applied only to provide and improve user-facing features of Pipeboard and is never transferred to third parties in identifiable form, sold, or used to derive non-public information about individual Pinterest end users.

13. Contact Us

For any questions or concerns regarding this Privacy Policy, please contact:

ARTELL SOLUÇÕES TECNOLÓGICAS LTDA
CNPJ: 53.540.982/0001-70
R 72, 223 Quadra C16 Lote 12/15 Sala 1507, Cond QS 01, Jd Goias, Goiânia, GO, Brazil, CEP 74805-480
📧 privacy@pipeboard.co
🌐 https://pipeboard.co

No formal Data Protection Officer (Encarregado) is currently appointed. Consistent with ANPD Resolução CD/ANPD nº 2/2022, which exempts small-sized processing agents from this requirement provided an effective communication channel is made available to data subjects, privacy@pipeboard.co is our designated channel for all data protection inquiries, including requests from data subjects and communications with the ANPD.