DRAFT — attorney review required

Privacy Policy

Effective date: [EFFECTIVE DATE]. This is a draft template and is not yet in effect.

1. Scope

This policy explains how [COMPANY LEGAL NAME] ([ADDRESS]) handles information in connection with StoragePipeline. It covers our customers' account users and visitors to this site.

2. What we collect

  • Account info: name, email, organization, role and billing contact.
  • Sign-in history: time, IP address and browser for each sign-in, used for security and to spot suspicious access.
  • Usage: which features are used and error logs, used to run and improve the Service.
  • Customer content: contacts, lists, messages, recordings and documents you add or create. We process this on your behalf.

3. Data sources

Property and owner information in the Service comes from public records (such as county parcel and assessor data and court and recorder filings), data customers upload, and customers' own connected provider accounts. It may be incomplete or out of date and is labeled on record, estimate or missing. Some states limit use of owner data; for example Idaho Code §74-120 bars using certain owner information for mailing lists. The Service warns before showing data it knows is restricted.

4. Outreach responsibility

Customers send calls, texts, mail and email through their own provider accounts and are the sender of record. Customers are responsible for consent and opt-outs under the TCPA, CAN-SPAM and state telemarketing laws. If you received a message from a StoragePipeline customer and want it to stop, reply STOP to a text, use the unsubscribe link in an email, or contact [email protected] and we will pass your request along.

5. Cookies and local storage

We use your browser's local storage to keep you signed in and remember preferences. We do not use third-party advertising cookies. [CONFIRM ANALYTICS, IF ANY]

6. Subprocessors

We share data only with service providers that help us run the Service, in these categories: hosting and infrastructure; Stripe for payments (we never store full card numbers); and email delivery for account messages. A current list is available on request. Providers you connect yourself (telephony, mail, email, AI) are governed by your agreements with them.

7. Retention

We keep account and customer content while your account is active and for [NUMBER] days after it ends so you can export it, then delete it, except where the law requires us to keep it longer. Sign-in history is kept for [NUMBER] days.

8. Security

We use encryption in transit, hashed passwords, encrypted storage of connected provider credentials, role-based access and sign-in history. No system is perfectly secure; tell us right away if you suspect unauthorized access. [CONFIRM SECURITY LIST WITH ENGINEERING]

9. Your choices and rights

You can view, correct, export and delete your account data in the app or by contacting us. Depending on where you live you may have additional rights, such as access and deletion; we will honor them as the law requires. [STATE PRIVACY LAW REVIEW]

10. Changes and contact

We will post changes here and notify customers of material changes. Contact: [email protected], [COMPANY LEGAL NAME], [ADDRESS].