Privacy Policy

Last updated: July 20, 2026

TopPipe ("we", "our", or "us") operates the TopPipe CRM application available at toppipecrm.com. This policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

We collect only the data necessary to provide the service:

• Account data: Your email address, used to identify your account and sync your pipeline across devices.
• Pipeline data: Prospect names, companies, contact details, follow-up notes, and activity logs that you enter into the app. This data is stored in our Supabase database, associated with your account.
• Usage data: The number of AI-assisted actions you perform per day, used solely to enforce fair-use limits.

2. Google API Integrations

Google Calendar

If you choose to connect your Google Calendar, TopPipe requests access to your Google Calendar data (auth/calendar scope). Here is exactly what we do with that access:

• What we read: Upcoming calendar events for the next 30 days — specifically event titles, start date and time, and the email addresses of attendees.
• Why we read it: To automatically match calendar events with prospects in your pipeline by comparing attendee email addresses. When a match is found, TopPipe updates that prospect's meeting date, meeting time, and assigned AE in your pipeline — without you having to enter it manually.
• What we write: When a prospect books a meeting through TopPipe's native booking feature, TopPipe creates a Google Calendar event on your behalf. If the meeting is rescheduled or cancelled via TopPipe, the event is updated or removed accordingly.
• How it is stored: Your Google Calendar access token is stored exclusively in your own browser's sessionStorage and is automatically cleared when you close the browser tab. It is never transmitted to or stored on our servers. The matched meeting data (date, time, AE name) is stored as part of your pipeline data in our Supabase database.
• What we do not do: We do not read, store, or transmit calendar event descriptions, locations, video call links, or any attendee data beyond what is needed to perform the match and booking described above. We do not sell, share, transfer, or use your Google Calendar data for advertising, user profiling, or any purpose other than the in-app sync described above. We do not allow humans to read your Google Calendar data. We do not use your Google Calendar data to train AI or machine learning models.
• How to revoke access: You can disconnect Google Calendar at any time from within the app: go to Settings → Calendars → Disconnect. You can also revoke access directly from your Google Account permissions page.

Gmail

If you choose to connect your Gmail account, TopPipe requests access to your Gmail message metadata only (gmail.metadata scope). Here is exactly what we do with that access:

• What we read: The headers of incoming emails — specifically the sender address (From) and the date — for emails where the sender matches a prospect in your pipeline. We never read the email body, subject line, or attachments.
• Why we read it: To automatically detect when a prospect replies to one of your outreach emails and flag them in your pipeline so you can follow up promptly. Knowing the sender address and date is sufficient to identify a reply. Without this access, you would have to manually mark each prospect as "replied" every time they respond.
• What we do not do: We do not read, store, or transmit email bodies, attachments, subject lines, email content of any kind, or emails from contacts who are not in your pipeline. We do not send emails on your behalf. We do not sell, share, transfer, or use your Gmail data for advertising, user profiling, or any purpose other than prospect reply detection described above. We do not allow humans to read your Gmail data. We do not use your Gmail data to train AI or machine learning models.
• How to revoke access: You can disconnect Gmail at any time from within the app under Settings → Integrations. You can also revoke access directly from your Google Account permissions page.

3. How We Use Your Data

We use the data we collect exclusively to:

• Provide and improve the TopPipe application
• Sync your pipeline across your devices
• Power AI-assisted features (follow-up drafts, pipeline analysis)
• Enforce plan limits and manage your subscription

We do not use your data for advertising, and we do not sell or share it with third parties, except as described in Section 5.

4. Data Retention

Your pipeline data is retained as long as your account is active. If you delete your account via Settings → Delete my account, all associated data — prospects, lead library, meeting history, and auth credentials — is permanently and irreversibly erased from our systems within seconds. You can also export your data at any time from within the app.

5. Third-Party Services

TopPipe uses the following third-party services to operate:

• Supabase — database and authentication. Data is stored in the US. Supabase Privacy Policy
• Anthropic (Claude) — powers AI follow-up drafts and the pipeline assistant. Only the text you explicitly send to AI features is processed by Anthropic. Anthropic does not use API data to train its models. Anthropic Privacy Policy
• LemonSqueezy — payment processing and subscription management. LemonSqueezy Privacy Policy
• Netlify — hosting and serverless functions. Netlify Privacy Policy
• Google Calendar API and Gmail API — only used if you explicitly connect your calendar or Gmail account, as described in Section 2.

6. AI and Machine Learning

TopPipe uses Anthropic's Claude API to power AI features such as follow-up draft generation and pipeline analysis. The only data sent to Anthropic is the text you explicitly submit through those features (e.g., a prospect note or a prompt you type). Raw Google user data — including Gmail messages and Google Calendar events — is never sent to AI services and is never used to train or improve any AI or machine learning model, including TopPipe's own internal systems.

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

7. Security

We implement industry-standard security measures including HTTPS encryption, Supabase row-level security (each user can only access their own data), and short-lived authentication tokens. Your Google Calendar and Gmail access tokens are never stored on our servers.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. To request deletion of your account and all associated data, contact us at the email below or use the in-app deletion option under Settings.

9. Children's Privacy

TopPipe is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or want to request deletion of your data, contact us at:
support@toppipecrm.com