Privacy policy — Pipefy

Cited by

Facts read from this source

• Entity Report an error

  “Pipefy Inc., a Delaware corporation with an address at 1209 Orange Street, Wilmington, Delaware, USA, acts as a Controller or Processor of Personal Data according to the purpose of the processing described in Section 2 of this Notice.”

• EU representative Report an error

  “in accordance with Article 27 of the GDPR, Pipefy has appointed the European Data Protection Office (“EDPO”) as its Representative in the European Union.”

• UK representative Report an error

  “Pipefy has appointed EDPO UK Ltd as its representative in the UK.”

• Dpf certified Report an error

  “Pipefy Inc complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.”

• Encryption Report an error

  “The data is processed in real time and protected by encryption in transit (TLS) and at rest (AES-256 or equivalent).”

• International transfers Report an error

  “International transfers of Personal Data are made to countries recognized by the European Commission (GDPR) or the United Kingdom Secretary of State (UK Data Protection Act 2018), since they provide an adequate level of protection; or to a country that does not provide adequate protection, but whose transfer is supported by Standard Contractual Clauses (SCCs) as issued by the data protection authorities in UK’s GDPR and EU’s GDPR jurisdictions.”

• Retention platform Report an error

  “Platform Data (Customers): Retained for up to 180 days after contract termination for security and operational integrity purposes.”

• Retention tax Report an error

  “Tax and Accounting Obligations: Retention of books and invoices for up to 6 years to validate compliance with Tax Authority regulations.”

• Retention logs Report an error

  “Log Data (Access): Conservation for 6 months in compliance with the Brazilian Civil Rights Framework for the Internet.”

• Retention labor Report an error

  “Labor and Social Security Obligations: Maintenance of records for periods ranging from 5 to 20 years, depending on the nature of the document, for protection in legal or tax demands.”

• Response times Report an error

  “Immediately: For simplified answers regarding the existence of data processing or access. Up to 15 (fifteen) consecutive days: For the provision of a clear and complete statement regarding the origin of the data and the criteria for processing, in addition to the other rights listed above.”

• AI no training Report an error

  “Pipefy, in its commitment to privacy and data protection, clarifies that it does not use personal data to train artificial intelligence models and, according to the official documentation (Pipefy AI Terms of Use), we adopt a policy of zero data retention for this purpose, ensuring that your data will never be used to train models.”

• CCPA no sale Report an error

  “We do not sell Personal Information, as defined under California law.”

• Controller processor roles Report an error

  “Pipefy declares itself as data controller only of the personal data used to create the platform users, for example: the customer’s name and email”

• Analytics tools Report an error

  “Pipefy uses third party analytics tools, such as Google Analytics, to help understand use of the Service.”

• Request channel Report an error

  “This channel centralizes Pipefy’s Privacy and Data Protection management through the Be Compliance platform, ensuring that your request is answered within the legal timeframe.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Governance, credentials & audit trail
• The Data Protection Officer European sovereignty
• The Data Protection Officer Execution, error handling & monitoring
• The Data Protection Officer Governance, credentials & audit trail
• The Data Protection Officer Hosting options & portability
• The Data Protection Officer European sovereignty
• The Head of IT Governance, credentials & audit trail
• The Head of IT Hosting options & portability
• The Head of IT European sovereignty
• The Head of IT European sovereignty
• The Integration Engineer Governance, credentials & audit trail
• The Integration Engineer European sovereignty
• The Integration Engineer Governance, credentials & audit trail
• The Integration Engineer European sovereignty
• The Operations Analyst Governance, credentials & audit trail
• The Operations Analyst European sovereignty
• The Operations Analyst Execution, error handling & monitoring
• The Operations Analyst Governance, credentials & audit trail
• The Operations Analyst Hosting options & portability
• The Operations Analyst European sovereignty
• The Process Owner Governance, credentials & audit trail
• The Process Owner European sovereignty
• The Process Owner Governance, credentials & audit trail
• The Process Owner Hosting options & portability
• The Process Owner European sovereignty
• The Skeptic Execution, error handling & monitoring
• The Skeptic Governance, credentials & audit trail
• The Skeptic European sovereignty
• The Skeptic European sovereignty