Privacy Policy
Last updated: July 30, 2026
What we collect, why we collect it, and who it goes to. Pipeworks is a business tool: most of the personal information in it is about homeowners, entered by the contractor who serves them.
Introduction
Pipeworks Group LLC ("Pipeworks," "we," "our," or "us") is committed to protecting your privacy and the information you entrust to us.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to you when using the Pipeworks mobile application, web application, website, and related services (collectively, the "Service").
By using Pipeworks, you agree to the practices described in this Privacy Policy.
Who this policy covers
Pipeworks is sold to contractors and used by their employees. That means three different groups of people appear in this policy, and their relationship to us is not the same:
- Visitors to pipeworks.io. People who browse our website or request a demo.
- Users of the Service. Administrators, dispatchers, and sales representatives at a contracting company that subscribes to Pipeworks. Accounts are created by that company's administrator or by us at their request — there is no public sign-up.
- Homeowners and other end customers. People whose information a contractor enters into Pipeworks in the course of quoting and selling work.
If you are a homeowner, the contractor holds your information — we only store it for them. When a contractor uses Pipeworks to prepare your estimate, they decide what to collect about you and why. We process that information on their behalf and under their instructions, as a service provider.
To see, correct, or delete information a contractor holds about you, contact that contractor directly. If you contact us instead, we will pass your request to them and assist them in responding.
Information We Collect
To provide the Pipeworks Service, we may collect information including:
When you visit pipeworks.io
- Your email address, if you submit it through the demo request form. That is the only field on the form, and it is sent to our form provider so we can contact you about a demo.
- Basic page analytics — the page viewed, the referring site, and the time of the visit, plus the IP address and browser user agent your browser sends with every web request, from which general location, device type, and browser are derived. Our website analytics do not use cookies, and we do not set any cookies on pipeworks.io. Our typefaces are served from our own site, so opening a page on pipeworks.io does not disclose your visit to a font provider.
When you use the Service
- Account information such as your name, email address, company, and user role.
- Your organization's company profile — company name and tagline, contact email and phone, mailing address, contractor license number, logo, and the terms and conditions PDF you attach to proposals. These are entered by your administrator, and most of them are printed on the estimates and contracts you present to your customers.
- Work activity. The Service records which representative each appointment, proposal, site survey, and uploaded document belongs to, along with when it was created and last updated, so that work can be attributed and reviewed. We also record when an account last signed in and when a proposal was emailed. Where your organization sets a commission rate, the Service stores the commission calculated on a sale, which administrators in your organization can see.
- Customer information entered into the Service, including names, service and billing addresses, phone numbers, email addresses, appointment notes, and proposal details.
- Property and equipment information recorded during a site survey, including details about the home and the make, model, and serial numbers of existing equipment.
- Equipment catalogs, pricing information, documents, spreadsheets, and other files uploaded by your organization.
- Photos captured with your device or selected from your photo library. Photos are re-encoded before upload, which removes embedded metadata — including any location coordinates recorded by the camera.
- Signatures. When a proposal is signed on the iPad, the signature is saved as an image and placed into the signed contract, along with the signer's typed name and the time of signing.
- Transaction details such as the quoted price, selected options, rebates, and the financing plan and monthly payment shown to the customer.
- Server logs. Our hosting and infrastructure providers record standard request information — the page or endpoint requested, the time, and the IP address and browser user agent sent by the browser or device — and our own code records a diagnostic message when an operation fails. We use these to keep the Service running, to investigate errors, and to detect abuse.
- Device, diagnostic, and usage information, including crash reports and technical logs that help us maintain and improve the Service. As of the date above, the Pipeworks iPad app contains no crash-reporting or analytics software and sends us no usage or device telemetry; we list this category because we may enable such diagnostics in a future release.
Connected email accounts
A sales representative can connect their own Google or Microsoft work account so that proposals are emailed to the customer from their own address. If they do, we store an encrypted authorization token for that account, along with the email address it sends from.
This connection is send-only. We request only the permission needed to send a message on the representative's behalf, plus their basic profile. We cannot read, search, download, or modify anything in their mailbox, and we do not do so. Pipeworks' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
A representative can disconnect the account at any time from the mailbox settings in the iPad app. For Microsoft accounts, disconnecting deletes our stored authorization, but you should also remove Pipeworks from your account at myapps.microsoft.com to fully withdraw the permission.
Proposal links
When a proposal is emailed, it includes a private link to a web page where the customer can view it. We record whether and how many times that link has been opened, and when it was last opened, so the representative knows the proposal was received. We do not store the viewer's IP address with the proposal or use it to identify them; as with any web page, our hosting provider processes it in order to serve and secure the request. The page is not indexed by search engines. The link stops working one year after it is sent, and sooner if the representative sends the proposal again — a new link supersedes the earlier one.
What we do not collect
We think it is as useful to say what Pipeworks does not touch. Pipeworks has no field anywhere for any of the following, never asks for it, and does not collect it:
- Social Security numbers, dates of birth, government identification, or driver's license numbers.
- Credit applications, credit reports or scores, income information, or bank account and routing numbers. Pipeworks displays financing plans and calculates a monthly payment; any actual credit application happens outside of Pipeworks, with a lender.
- Payment card numbers. We do not process payments through the Service.
- Precise device location. The Pipeworks iPad app does not use location services, and the only device permission it requests is access to the camera.
- Advertising identifiers or cross-app tracking data. We do not serve ads, we do not use advertising or attribution networks, and we do not track you across other companies' apps or websites.
One caveat about notes. Pipeworks includes free-text fields — appointment notes, site survey notes, and photo captions — where a contractor's staff can type anything. We do not restrict or inspect what goes into them. If someone types information of a kind listed above into a note, Pipeworks will store it. Contractors are responsible for what their staff record about a customer.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
How We Use Information
We use information to:
- Provide and maintain Pipeworks.
- Create, store, and manage proposals and customer records.
- Synchronize data across authorized devices.
- Send proposals to the customers a representative chooses, from that representative's connected email account.
- Provide customer support.
- Improve product performance, reliability, and security.
- Detect and prevent fraud, abuse, and unauthorized access.
- Comply with legal obligations.
We may also use anonymous or aggregated usage information to improve our products and services.
We do not use customer data for purposes outside providing and improving the Service without your permission.
Sharing Information
We do not sell your personal information.
We share information only when necessary to operate the Service. The providers we rely on are:
- Supabase — our database, file storage, and sign-in provider. Information stored in Pipeworks is held here.
- Vercel — hosting for pipeworks.io and for the web application, including website analytics and server logs.
- Formspark — the form service that receives demo requests submitted on pipeworks.io.
- Google and Microsoft (email delivery) — where a representative has connected their own work email account. In that case the message and its attached proposal are delivered through that provider, and a copy is saved in the representative's own sent mail. Once a message is handed to their email provider, it is governed by that provider's terms and their employer's account settings.
We may also share information with professional service providers acting on our behalf, and with government authorities where required by law. If Pipeworks is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
We require every third party with whom we share information in order to operate the Service to provide the same or equal protection of that information as is described in this Privacy Policy, to process it only as necessary to perform services for Pipeworks and on our instructions, and not to use it for their own purposes.
Where your information is stored. The information you put into Pipeworks — your records, your files, and your account — is stored in the United States. Two things travel more widely, in the ordinary way the internet works: our hosting provider serves and caches our web pages from data centers around the world, and a proposal emailed through a representative's own Google or Microsoft account is delivered and stored by that provider under their employer's account settings, not ours.
Data Security
We use commercially reasonable administrative, technical, and physical safeguards to protect your information.
- All connections to Pipeworks are encrypted in transit using TLS.
- Information stored in our database and file storage is encrypted at rest by our infrastructure provider.
- Authorization tokens for connected email accounts are additionally encrypted by Pipeworks, using a key held outside the database.
- Access is controlled by role. Each organization's data is separated from every other organization's, and within an organization, permissions differ by role — for example, dispatchers can see appointments and site surveys but not proposal pricing or representative commissions.
- Signed contracts, proposal PDFs, and site survey photos are kept in private storage and are reachable only through short-lived, expiring links.
A small number of Pipeworks personnel can access customer accounts where necessary to operate the Service, provide support, and set up new organizations.
While we work to protect your information, no method of transmission or storage over the Internet is completely secure.
If we become aware of a security incident affecting information a contractor has stored in Pipeworks, we will notify that contractor without undue delay, and give them the information they reasonably need to assess it and to meet their own notification obligations to their customers.
Data Retention
We retain information only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, enforce our agreements, and protect the integrity of Pipeworks.
In practice, information a contractor enters into Pipeworks — proposals, appointments, site surveys, and signed contracts — is retained for as long as that organization's account is active, because it is the contractor's business record. We do not automatically delete it on a schedule.
Accounts are managed by your organization's administrator, who can deactivate or delete a user at any time. Deleting a user removes their database records — their profile, appointments, proposals, site surveys, and job documents. Files those records referred to are not deleted automatically: signed contracts, signature images, emailed proposal PDFs, and site survey photos remain in our private storage until we remove them manually on request.
If you wish to request deletion of your personal information, your account, or your organization's data, please contact us using the information below and we will action it.
Your Rights
Depending on your location, you may have the right to:
- Access your personal information.
- Correct inaccurate information.
- Request deletion of personal information.
- Request a copy of your personal information.
- Object to certain processing activities where permitted by law.
We will respond to applicable requests within a reasonable timeframe, and we will not discriminate against you for making one.
If you are a homeowner or other end customer, please direct your request to the contractor who served you, since the information is theirs and they decide how it is used. If you are not sure who to contact, write to us and we will help you reach them.
Children's Privacy
Pipeworks is intended for business use and is not directed toward children under the age of 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time.
When material changes are made, we will update the "Last updated" date and publish the revised Privacy Policy on our website.
Contact Us
If you have questions about this Privacy Policy or wish to submit a privacy-related request, please contact us.
Pipeworks Group LLC
Virginia, United States
Email: support@pipeworks.io
Website: pipeworks.io