Privacy Policy
What data we receive when you use PipePort, why we need it and what you can do about it.
The Ukrainian version is the primary version of this document.
1. General provisions
This Privacy Policy (the “Policy”) explains how sole proprietor Maksym Mykolaiovych Fastov (Ukrainian taxpayer registration number 3093405776, Ukraine) (“PipePort”, “we”, “us”) processes personal data in connection with visits to https://pipeport.pro/ and the use of software products, services, integrations and other digital services offered under the PipePort brand, including PipePort Chat (collectively, the “Service”). If an additional privacy notice is published for an individual PipePort product, it supplements this Policy for that product.
The term “User” in this Policy has the meaning given to it in the PipePort Terms of Use. The User’s customers and other persons whose data is processed through the Service do not become Users merely because of that processing.
We process personal data in accordance with laws applicable to the relevant processing, including Ukrainian law.
2. Our role in processing data
When PipePort processes contact, customer, correspondence or other data to operate features selected by a User, the User determines the purposes and lawful grounds for processing its customers’ data. Each party’s legal role is determined by the actual circumstances and applicable law.
For contact, contractual and payment data needed for its own relationship with the User, provision of paid access, compliance with legal obligations and protection of its rights, PipePort determines the purposes and grounds for processing independently. This also applies to visitor data needed to operate and protect the website. Access to customer communications for integration support does not, by itself, change the purposes for processing those data.
Use of the Service is governed by the PipePort Terms of Use. This Policy explains the processing of personal data and does not replace separate consent where the law requires it.
3. Categories of data we may process
Depending on how a person interacts with the PipePort website and which Service products or features a User uses, we may process the following categories of data:
- account and access data — information about the organization and users needed to install, authorize and operate the integration;
- CRM and other connected-system data — information needed to display, search, link or update data in accordance with the functionality of the particular PipePort product, including Pipedrive data if the product integrates with it;
- communications data — messages, chat identifiers, name/username, attachments and other data that users or their customers transmit through communications channels or other systems connected to the relevant PipePort product;
- contact data — including a telephone number if provided by the individual or lawfully available to the User and used by Service features;
- technical and operational data — information needed for security, diagnostics, prevention of abuse and Service support;
- website and inquiry data — information that a visitor or User voluntarily provides through forms, email or other website contact channels, as well as technical data processed to the extent necessary to operate, secure and protect the website;
- contractual and payment data — the name and contact details of the customer or its representative, information about the selected product, price and paid period, payment and provision of access to the extent necessary for those operations.
Data comes from individuals themselves, the User and its authorized staff, the CRM and communications channels connected by the User, and, for operational records, Service events. A technical permission does not mean that we receive all data from the relevant system: the scope is determined by the selected product, its features and settings.
The Service is not intended for deliberate processing of special categories of personal data, criminal conviction data or data subject to a special legal regime. Such data may incidentally be contained in the User’s messages or attachments.
4. Purposes and lawful grounds for processing
For data whose processing purposes PipePort determines independently, the purposes and lawful grounds depend on the particular operation:
Entering into and performing an agreement, processing online payment and providing access for the paid period — performance of a contract or steps taken at the individual’s request before entering into a contract, if that individual is a party to it. For business contact details of an organization’s employees and representatives — a legitimate interest in maintaining the relevant business relationship, where applicable law permits this ground.
Responding to inquiries — steps taken at an individual’s request before entering into a contract or a legitimate interest in responding and providing support, depending on the inquiry. Data concerning a User’s customers received to resolve an integration issue is processed on the User’s behalf.
Securing the Service, diagnosing technical issues and preventing abuse — a legitimate interest in protecting the Service, limited by data necessity and individuals’ rights, or compliance with a specific legal obligation where applicable.
Tax and accounting records and compliance with lawful requests from authorities — compliance with the relevant legal obligation. Establishing, exercising or defending legal claims — a legitimate interest or another ground provided by law, depending on the particular data and circumstances.
If we actually use optional analytics or marketing technologies for which applicable law requires consent, we obtain it before the relevant processing begins. Consent can be withdrawn; withdrawal does not affect the lawfulness of processing before withdrawal. Acceptance of the Terms of Use does not replace such consent.
When we process data on the User’s behalf, the User determines the purposes and lawful grounds for processing its customers’ data. An agreement between PipePort and the User does not automatically entitle the User to transmit any personal data to us.
The amount of data needed to install and operate an integration depends on the features and settings of the relevant product. A selected feature may not work without the data needed for it. Data for optional purposes is not a condition for using the core Service unless the nature of the selected feature lawfully requires otherwise.
5. Recipients of data
We do not sell personal data.
In operating the Service, data may be transferred to:
- platforms that the User connects to the relevant PipePort product, including Pipedrive, Telegram or other third-party systems needed for the selected integration;
- providers of hosting, infrastructure, data storage, security and other technical services needed to operate the Service;
- public authorities or other persons where disclosure is expressly required by law or necessary to protect our lawful rights;
- payment intermediaries, banks, accountants and professional advisers — only to the extent necessary for payment, accounting or lawful administration of our relationship with the User, if they are actually engaged.
Each recipient’s role depends on the particular processing. A platform independently connected by the User does not become our contractor merely because of the integration. We may engage service providers needed to operate the Service on terms appropriate to the nature of that engagement and the requirements of applicable law.
6. International data transfers
Data may be processed in countries other than the country where the User or data subject is located. Both the location of servers and backups and access to data by staff or contractors in other countries are relevant.
Processing countries and data recipients depend on the selected product, the platforms connected by the User and the service providers we engage to operate the Service. If the law imposes mandatory conditions on a particular transfer, those conditions apply to it.
7. Retention and deletion
We retain personal data no longer than necessary for the purposes for which it is processed, performance of the agreement, compliance with legal requirements, resolution of disputes and security.
The retention period for data processed to operate the Service depends on the features, settings and actual technical capabilities of the relevant product and on applicable legal requirements.
Retention periods for our own contractual, payment and accounting data are determined by the relevant legal obligations and the need to protect rights within applicable time limits. Technical logs are retained for as long as needed for diagnostics and security.
The end of a paid period means the end of paid access under the Terms of Use, but is not, by itself, a request to delete data and does not mean immediate deletion. Disconnecting an integration and requesting deletion of data have separate consequences. Further retention and deletion of data in PipePort are governed by the product’s actual capabilities and applicable legal requirements. Deleting data in PipePort does not automatically delete data already transmitted to a CRM, Telegram or another independent platform.
8. Security
We apply reasonable organizational and technical measures designed to protect personal data from unauthorized access, loss, alteration, disclosure or destruction.
No method of transmitting or storing information guarantees absolute security. The User is also responsible for properly protecting its accounts, access keys, tokens and user permissions in connected systems.
If a data security breach occurs, we respond and notify the relevant persons or authorities in the circumstances and within the time limits required by applicable law.
9. Rights of data subjects
The rights of a data subject are determined by the law applicable to the particular processing.
If a request concerns data that the User processes using the Service, the individual should contact the relevant User, who determines the purposes of that processing.
Inquiries addressed directly to PipePort may be sent to support@pipeport.pro.
To handle an inquiry, we may ask for information needed to verify identity and locate the data. We handle requests concerning data that a User processes using the Service within the scope of our own obligations under applicable law.
We respond to requests concerning data for whose processing PipePort is responsible in the manner and within the time limits prescribed by applicable law. Withdrawing consent does not affect earlier lawful processing or processing that lawfully continues on another ground.
10. Children’s data
The PipePort website and products are aimed primarily at business users and are not intended for independent use by children. We do not knowingly collect children’s personal data for our own purposes.
This does not exclude incidental receipt of data concerning minors through communications with the User’s customers. The lawfulness of such processing depends on its purpose and applicable law.
11. Third-party platforms and links
Individual PipePort products may interact with third-party platforms, including Pipedrive, Telegram and other services connected by the User. Those platforms’ processing of personal data is governed by their own policies and terms. We do not determine or control third-party platforms’ data processing rules.
This qualification concerns third-party platforms’ independent processing. PipePort is responsible for its own processing of data in accordance with applicable law.
12. Changes to this Policy
We may update this Policy to reflect changes in law, the Service or actual processing. The current version states its effective date. If the Policy applies to an application published in Pipedrive Marketplace, we give Pipedrive and Users of that application written notice of changes at least 30 calendar days before they take effect, in accordance with the platform’s current requirements. In other cases, we give notice when required by applicable law.
We notify other persons in the manner and within the time limits required by law. If the law requires separate notice, consent or another lawful ground for a new processing purpose, we provide for it before that processing begins. Continued use of the website or Service does not, by itself, replace such consent.
13. Language
The Ukrainian version of this Policy is the primary version. If a translation into another language is published, the Ukrainian version prevails in the event of a discrepancy to the extent permitted by applicable law.
14. Contact information
- Sole proprietor Maksym Mykolaiovych Fastov
- Ukrainian taxpayer registration number (RNOKPP): 3093405776; country of registration: Ukraine
- Registered address: 60 Yu. Kostiuchenka St., Snovsk, Snovsk Raion, Chernihiv Oblast, 15200, Ukraine
- Mailing address: P.O. Box 1860, 28 Myru Avenue, Chernihiv, 14000, Ukraine
- Personal data inquiries: support@pipeport.pro
- Support: support@pipeport.pro
- Website: https://pipeport.pro/