Privacy Policy
Last updated: 3 September 2026.
What we collect
- Account information — name, email address, and authentication details from your sign-in provider.
- Job-search data — roles, contacts, companies, actions, notes, emails, documents, and CVs you add to the app.
- Emails you forward — sender, recipient, subject, body text, and attachments, so they can be matched to your records.
- Assistant conversations — messages exchanged with the AI assistant to maintain context across threads.
- Browser extension activity — the Pipeline extension reads page content only when you explicitly trigger a capture action, and stores a session token locally in your browser so you stay signed in.
- Connected account metadata — when you connect Google Drive, OneDrive, Gmail, or Outlook, we store an encrypted access token and your connected account identifier. We do not read your files or mail unless you explicitly choose to import them.
How we use it
- To provide the Pipeline service and keep your data organised.
- To generate AI-powered suggestions, summaries, and briefings.
- To send you notifications or emails you have explicitly requested.
- To improve reliability and fix errors. We do not sell your data.
Data storage and security
Your data is stored in a private PostgreSQL database with Row Level Security enabled, so each user can only access their own records. Third-party access tokens are encrypted at rest. All traffic is served over HTTPS/TLS.
Third-party services
Pipeline uses Lovable Cloud, Supabase, DeepSeek/OpenAI/Google AI providers, Mailgun, and Firecrawl. Each processor only receives the data needed for its function.
Your rights
You can delete individual records, threads, and emails at any time. To request deletion of your entire account and all associated data, contact andy@additive.digital.