1. WHO WE ARE
- Legal Entity: Piperocket Digital Private Limited
- Brand Name: PipeRocket
- Registered Address: No 52, Nalaji Nagar, Padi, Chennai - 600050.
- Email: legal@piperocket.digital
For purposes of the DPDP Act, PipeRocket acts as a Data Fiduciary with respect to personal data processed through the Service.
If you are located outside India, we may act as a Controller or Processor, depending on the nature of processing.
2. SCOPE OF THIS POLICY
This Privacy Policy applies to:
- Website visitors
- Account holders
- Authorized Users
- Business customers
- Individuals whose personal data may be included in Customer Data
It does not apply to third-party websites or services linked through our platform.
3. PERSONAL DATA WE COLLECT
We collect personal data in the following categories:
Account & Identity Data - Full name, Work email address, Phone number (if provided), Company name, Job title/role, Account ID and Encrypted password hash.
- Usage & Device Information - IP address, browser/device identifiers, pages/events, timestamps, crash logs, approximate location (from IP), cookies/SDK data.
- Billing & Transaction Data - Subscription plan details, Billing address, Invoice records, Payment transaction metadata.
Note: Payment details are processed by third-party payment processors. PipeRocket does not store full card numbers. - Customer Data (Uploaded by You) - Data you submit into the Service (e.g., CRM fields, ad account metrics, campaign info, contact lists) — you control what you upload.
- Support & Communications - Tickets, Email Communication, call recordings (if enabled), chat logs, and feedback.
4. SENSITIVE PERSONAL DATA
We do not intentionally request or require sensitive personal data (health, biometrics, precise location, government IDs) unless explicitly needed for a feature and clearly disclosed. Please avoid uploading sensitive data unless your plan/feature explicitly supports it.
5. PURPOSES OF PROCESSING
We use personal data to:
- Provide the Service (login, access, core features, integrations).
- Maintain security, prevent fraud/abuse, and debug issues.
- Process payments, billing, taxes, and account administration.
- Communicate service updates, support replies, and important notices.
- Improve and develop features (analytics, performance monitoring).
- Comply with legal obligations and enforce our Terms.
(Under DPDP, the notice should clearly state purposes and how users can exercise rights and grievances.)
6. LEGAL BASIS FOR PROCESSING
India (DPDP Act): We process personal data based on:
- Consent (e.g., marketing, optional analytics, certain integrations), and/or
- Legitimate uses / permitted purposes as applicable, and/or
- Contractual necessity to provide the Service.
EU/UK (GDPR/UK GDPR) – if applicable: We process based on:
- Contract necessity (to deliver the Service),
- Legitimate interests (security, product improvement),
- Consent (marketing/cookies where required),
- Legal obligation (tax/accounting).
7. COOKIES & TRACKING TECHNOLOGIES
We use cookies/local storage and similar technologies for:
- Essential Cookies - Authentication, session management, security.
- Performance & Analytics - To understand usage patterns and improve features.
- Functional Cookies - Preferences and configuration settings.
You may manage cookie preferences via browser settings or cookie banners (where implemented).
8. HOW WE SHARE PERSONAL DATA
We may share personal data with:
A) Service providers (processors)
Cloud hosting, analytics, customer support tools, email delivery, payment processors, and error monitoring. These providers process data under contracts for our instructions.
B) Integrations you enable
If you connect third-party accounts, we share data as needed to provide that integration.
C) Legal and safety
When required to comply with the law, protect rights, investigate abuse, or respond to lawful requests.
D) Business transfers
If we undergo a merger/acquisition/asset sale, data may be transferred subject to confidentiality and applicable law.
9. INTERNATIONAL DATA TRANSFERS
We may process data in India and other countries where our providers operate. We use contractual and security safeguards appropriate to the transfer (e.g., SCCs for EU transfers, where applicable).
10. DATA RETENTION
We keep personal data only as long as necessary for the purposes described, including:
- Account data: For the duration of the account + up to 12 months after closure
- Logs/security: Typically 6–12 months
- Billing/tax records: As required under applicable law
- Backup System: Retained for limited recovery periods
DPDP also supports erasure on request unless retention is required by law/purpose.
11. YOUR RIGHTS (UNDER DPDP ACT)
India (DPDP Act): You may have rights to:
- Access information about processing,
- Correction/updates,
- Erasure (subject to lawful retention),
- Withdraw consent (where processing is based on consent),
- Grievance redressal.
EU/UK (GDPR/UK GDPR) – if applicable:
Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.
California (CCPA/CPRA) – if applicable:
Categories collected + purposes at collection; rights to know/access/delete/correct; opt-out of “sale/share” (if applicable).
How to exercise rights: Email legal@piperocket.digital with subject “Privacy Request”. We may verify identity before processing.
12. GRIEVANCE REDRESSAL
Grievance Officer / Privacy contact:
Name/Role: Praveen / Co-founder
Email: praveen@piperocket.digital
Legal Entity: Piperocket Digital Private Limited
Registered Address: No 52, Nalaji Nagar, Padi, Chennai - 600050.
Response Time: Within 15 business days
If unresolved, you may escalate under applicable law.
13. SECURITY MEASURES
We implement reasonable security measures (access controls, encryption in transit, least privilege, monitoring). No system is 100% secure; you are responsible for securing your credentials and endpoints.
14. CHILDREN’S PRIVACY
The Service is not intended for individuals under 18. We do not knowingly collect children’s data. If you believe a child has provided data, contact us to delete it.
15. MARKETING COMMUNICATIONS
You can opt out of marketing emails via the unsubscribe link or by contacting us. We may still send non-marketing transactional emails (e.g., invoices, security alerts).
16. AI & DATA USAGE DISCLOSURE
Where the Service includes AI features:
- Customer Data is processed to generate Outputs.
- AI outputs may involve automated processing.
- We may use anonymized, aggregated data for improving system performance.
- We do not sell Customer Data for AI training purposes.
17. DATA BREACH RESPONSE
In the event of a confirmed data breach affecting personal data:
- We will investigate promptly.
- Take reasonable remediation measures.
- Notify affected users and authorities where legally required.
18. CHANGES TO THIS PRIVACY POLICY
We may update this policy. If changes are material, we’ll notify you via email and update the “Last updated” date. Continued use of the Service constitutes acceptance of updates.
19. CONTACT US
Legal Entity: Piperocket Digital Private Limited
Contact: legal@piperocket.digital
Registered Address: No 52, Nalaji Nagar, Padi, Chennai - 600050.