Last updated: October 2026
Pipelic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application across iOS, Android, and web platforms. Please read this policy carefully.
We collect information you provide directly and information collected automatically when you use our services.
To provide our communication and productivity features, our app may request access to:
We only access these features when you grant permission and when the feature is in use. You can revoke permissions at any time through your device settings.
Each Google feature is optional. You turn it on yourself in Settings → Integration, and Pipelic asks Google only for the permission that feature needs.
Google Calendar. Pipelic requests read-only access to your calendar events (Google OAuth scope calendar.events.readonly) so we can import those events into your Pipelic Tasks for a date range you choose. We do not create, edit, or delete events in your Google Calendar, and we do not write Pipelic tasks back to Google Calendar.
Gmail (sending). If you turn on email, Pipelic requests permission to send email for you (scope gmail.send). When you ask your agent to write an email, it shows you a draft in your chat with the recipients, subject, and full text. You can edit it, and it is sent from your Gmail account only when you tap Send. This permission does not let Pipelic read your mailbox.
Gmail (reading, beta testers only). If you are in our beta and choose to turn on email reading, Pipelic also requests read-only access to your mailbox (scope gmail.readonly). Your agent then searches or reads your email only when you ask it to in your chat, for example to summarize today’s messages or to draft a reply. Pipelic does not scan, index, or keep a copy of your mailbox.
Google Drive. If you turn on Drive, Pipelic requests access only to files you pick for Pipelic and files Pipelic creates for you (scope drive.file). Pipelic cannot see your other Drive files. Your agent can save new files to your Drive, and read the files it has access to, when you ask. Replacing the content of an existing file needs your confirmation in the chat. You can also add Drive files you pick to a dataset; Pipelic reads them to build the dataset and, if you turn on updates, reads them again when they change. Before you publish an agent whose datasets use Drive files, Pipelic asks you to replace them with a copy stored by Pipelic, because people who hire the agent would get answers based on that content.
How Google data is handled. Google features work only in your private chat with an agent you created. Your Google access tokens are encrypted and kept on Pipelic’s servers, and are never sent to an AI model. The one exception is the Google Drive file picker: while you choose files, your device receives a short-lived (about one hour), Drive-only access token, which Pipelic does not store. To carry out your request, the email or file content involved is sent to the AI model provider that powers your agent (see Section 5), only to generate the reply you asked for. Anything your agent writes in reply, such as a summary or a draft, is saved in your chat history like other messages. A record of each email you were asked to confirm (recipients and subject; the email text is removed once you decide) is kept for up to 30 days for security and support, then deleted.
Limited Use Compliance Statement: Pipelic’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you turn on. We do not sell it, we do not use it for advertising, and we do not use Google Workspace user data (including Calendar, Gmail, and Drive data) to create, train, or improve foundational or generalized AI/ML models. People at Pipelic do not read your Google data unless you ask us to (for example, in a support request), it is needed for security or to investigate abuse, or the law requires it.
You may disconnect Google Calendar, or Gmail and Drive, at any time in Settings → Integration. Pipelic then revokes its access at Google and deletes the stored tokens for that connection. You can also revoke access in your Google Account permissions.
Pipelic lets you optionally connect social media accounts in "Settings" → "Integration" → "Social Publishing" so that content you compose or approve in Pipelic — including scheduled workflows you configure — can be published to your own account or Pages. Supported networks currently include X, YouTube, LinkedIn, Reddit, TikTok, and Facebook Pages / Instagram professional accounts.
What we store: the OAuth access and refresh tokens issued when you connect, plus the minimal identifiers needed to publish (for example a LinkedIn member URN, a Facebook Page ID and name, or an Instagram professional account ID). These are kept in a private, owner-only record, protected with encryption in transit and at rest, and used solely to authenticate the publishing actions you configure. Access tokens are refreshed automatically so that scheduled publishing you set up keeps working without re-authentication.
What we do not do: we do not read your feeds, timelines, private messages, follower lists, or other people’s data; we do not scrape, collect, analyze, or resell content from these platforms; and we do not use any data obtained from these platforms to create, train, or improve AI/ML models. Data received from each platform is handled in accordance with that platform’s developer terms, including the X Developer Agreement and Policy and the Meta Platform Terms. YouTube connections use YouTube API Services and are additionally governed by the YouTube Terms of Service and the Google Privacy Policy.
Your controls: you can disconnect any network at any time in "Settings" → "Integration", which deletes the stored tokens for that connection. You can also revoke Pipelic’s access from your account settings on the platform itself. Disconnecting stops all future publishing; content already published remains on the platform under its own terms.
We do not sell your personal information. We may share data with:
We use industry-standard measures to protect your data, including encryption in transit and at rest, secure authentication, and access controls.
We retain your data for as long as your account is active or as needed to provide services. You may delete your account at any time using the steps in Section 9. After you confirm deletion, the account is deactivated immediately. If you do not sign in again within 90 days, we permanently delete or de-identify associated personal data as described below.
Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately, and we will take steps to delete such information and terminate any associated account.
If our services are used in an educational or family context where users under 13 may have access, we rely on parental or guardian consent before any such use. Parents or guardians may contact us to review, correct, or delete information related to their child.
Depending on your location, you may have rights to:
To exercise these rights or manage your account, use in-app settings or contact us at support@pipelic.com.
You can delete your Pipelic account yourself. Deletion is completed in the web app after you confirm it.
On the web: Sign in at https://www.pipelic.com/app, open Settings → Account, then tap Delete account. Enter your password and type DELETE to confirm.
On iOS or Android: Open Pipelic, go to your profile, and tap Delete account. That opens the web app so you can finish the same Settings → Account → Delete account steps. You can also sign in on the web app directly.
If you cannot complete those steps (for example you no longer have your password), email support@pipelic.com from the address on your account and ask us to delete it. We may need to verify that you own the account.
What happens next: your account is deactivated immediately and you are signed out. If you sign in again within 90 days, the account is reactivated. If you do not, we permanently delete your Firebase login, your user profile, and files stored under your account. A published AI Resource may remain on the service as Pipelic’s hosted work, with your personal identifiers removed or replaced where feasible. Content you already published to a connected social network stays on that platform under its own terms. We may retain limited records where required by law (for example billing, fraud prevention, or legal claims).
This policy applies to Pipelic across all platforms:
Your data may be synchronized across devices when you use the same account.
This Privacy Policy covers personal data. Copyright in AI Resources (agents, teams, and pipelines as configured on Pipelic) is described in the User Agreement: those hosted resources are owned by Pipelic / HuiXiang Technology, while you remain the credited creator. That copyright statement is not a claim over your personal chat history or over dataset files you uploaded.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or our practices, please contact us at:
Pipelic / HuiXiang Technology
Email: support@pipelic.com
This privacy policy is provided to meet requirements of Google Play, Apple App Store, and general web application compliance.