Snapshot 40426
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy
Effective Date: 17/09/2025
This Privacy Policy describes how Gondor Labs, a commercial name for the entrepreneur officially registered as an Entrepreneur Account (Ettevõtluskonto) under the name Johan Rafaël NAVARRO, Personal Identification Code ( Isikukood) 3951002014, with the address Kiive tn 10-5b, 11414, Tallinn, Estonia (referred to as "we," "us," or "our"), collects, uses, and shares information about you in connection with your use of our app, Pipedrive for GoogleChat™, that integrates with Google Chat and Pipedrive. Our company is registered under the SIRET number 82078308200010, with the address 40 Boulevard Dubreuil, 91440, Bures-sur-Yvette, France.
1. Information We Collect
We collect information to provide and improve our service. The types of data we collect include:
Personal Information: This may include, but is not limited to:
Name
Email address
Transaction data (e.g., purchase history)
Device information (e.g., IP address)
Interaction data (e.g., how you use our service)
Information You Provide to Us:
When you install our app, we collect your name, email address, Pipedrive user ID, Pipedrive company ID, Pipedrive company domain, and Google user ID. We also collect and store a Pipedrive API refresh token to access your account data. If you choose to provide feedback through a Google Form, we will collect the information you submit.
Information Collected from Third-Party Services:
From Pipedrive: We access specific deal information required for the app's functionality, including the deal name, value, owner's name, current stage, associated person, organization, and notes. In the future, we may also access data from the Pipedrive Activities API endpoint to send alerts about tasks and other activities.
From Google Chat: We collect Google Chat space IDs and names to send notifications to the correct locations.
From Stripe: During the registration and billing process, Stripe collects your billing information, email, company size, and industry.
Information Collected Automatically:
We collect anonymous or aggregated usage data to understand how our app is used.
Error and Performance Monitoring Data: We use Sentry.io to help us identify, diagnose, and resolve errors and performance issues within our application. When an error occurs, Sentry may automatically collect contextual data, which can include your device information (e.g., OS, browser version), IP address, and a unique identifier. This data helps us understand the circumstances of the error. We endeavor to configure our error reporting to avoid capturing sensitive personal information, but it is possible that some personal data may be inadvertently included in the error logs.
2. How We Use the Information
We use the collected information for the following purposes:
To Provide Our Service: To deliver the core functionality of our app, which is sending real-time Pipedrive deal updates to your designated Google Chat spaces.
To Improve Our Service: We analyze anonymized usage data from Google Analytics and Mixpanel to understand user behavior and enhance our app's features. Additionally, we use error and performance data from Sentry.io to diagnose and fix technical issues, ensuring the stability and reliability of our service. The feedback you provide via Google Forms may also be used for this purpose.
For Billing and Subscription Management: We use your company and subscription details to manage your subscription with Stripe.
For Communication: We use your name and email address to send you transactional emails via Amazon SES or Stripe, such as billing receipts or important service notifications. If you have opted in to receive marketing communications, we will also send you promotional emails via Mailchimp.
3. Data Sharing and Disclosure
We do not sell your personal data. However, we may share it in the following circumstances:
Service Providers: We may share personal data with third-party vendors who provide services on our behalf (e.g., hosting, analytics, email delivery, error monitoring). We share your information with these service providers to the extent necessary to perform their services for us. Our error monitoring is handled by Sentry (Functional Software, Inc.).
Business Transfers: If our company is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership.
Legal Requirements: We may disclose data in response to legal obligations, such as subpoenas, court orders, or other legal processes. We may also share data with law enforcement, regulatory authorities, and courts when legally required or to protect our rights, property, or safety, or that of our users or others.
Parent, Subsidiary, and Affiliate Companies: We may share data with our parent, subsidiary, or affiliate companies, all of which are subject to this Privacy Policy.
Employees and Contractors: Your data may be accessed by our employees, contractors, and/or related entities who have a legitimate business need to access it.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our service and for authentication purposes. Cookies are files with a small amount of data that may include an anonymous unique identifier. Our cookies store your Pipedrive user and company ID in an encrypted format. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. We also use cookies to gather site usage statistics and understand user engagement.
5. Cross-Border Data Transfers
As we operate globally, our use of third-party services may result in the transfer of your personal information from one country to another. For example, your data may be transferred from the European Union to the United States. Whenever personal information is transferred outside of the country where it was originally collected, it will be processed in accordance with the principles of this policy and applicable privacy legislation. We utilize legally-approved mechanisms, such as Standard Contractual Clauses (SCCs), to ensure that personal data remains protected during these transfers.
6. Data Security
We take the security of your data seriously. We use a combination of technical, administrative, and physical measures to protect your personal information.
Infrastructure: Our application is hosted on Railway, which provides a secure infrastructure. Our database is hosted on MongoDB Atlas, which offers built-in security features, including TLS encryption for data in transit.
Access Control: Access to your data is strictly limited to the company's founders and authorized consultants with a need to know. We use authentication and internal policies to control access and manage credentials.
Backups: We perform weekly backups of our database to prevent data loss.
Third-Party Services: We rely on the robust security measures of our trusted third-party service providers (Stripe, Railway, MongoDB Atlas, Amazon SES, Mailchimp, and Sentry) to protect the data they process on our behalf.
Disclaimer: Even with our precautions, no method of transmission over the Internet or method of electronic storage is 100% secure. We do everything we can to protect your personal information and will contact you if there is ever an issue with your information security.
7. Data Retention
When you uninstall our app, we will immediately delete your Pipedrive API refresh token. We will then retain your account information, such as your email and subscription details, for a limited grace period of 90 days to facilitate account reactivation and for billing purposes. After this period, all of your personal data will be permanently deleted from our systems. We may retain anonymized or aggregated usage data for a longer period to improve our services.
8. Children’s Privacy
Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under this age. Users from the United States must be at least 13 years old to use our service.
9. Your Rights
Under GDPR, you have the right to:
Access your personal data.
Correct inaccurate or incomplete data.
Request the deletion of your personal data ("the right to be forgotten").
Object to or restrict the processing of your data.
Data Portability of your data.
To exercise these rights, please contact us at the email address provided below.
10. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted at this same link, and significant changes will be communicated to you via email or GoogleChat™ notifications.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at: [email protected].