Privacy Policy
1. Who We Are
PipeIQ is a trading name of TradeBoost AI Ltd, a company registered in England and Wales (Company No. 17227850). We are registered with the Information Commissioner's Office (ICO) under registration number ZC164080.
Data controller: TradeBoost AI Ltd (Company No. 17227850). Registered office details are publicly available at Companies House. Contact: hello@pipeiq.co.uk
2. What Data We Collect
We collect and process the following categories of personal data:
- Account data: name, email address, and business name provided during signup.
- Contact lists: phone numbers and names uploaded by agencies for SMS campaigns.
- Usage data: campaign activity, message logs, reply records, and login timestamps.
- Billing data: payment information processed via our payment provider (we do not store card details).
3. Legal Basis for Processing
We process personal data on the following legal bases under UK GDPR:
- Contract performance — to provide the PipeIQ service to you.
- Legitimate interests — to operate, improve, and secure our platform.
- Legal obligation — to comply with applicable UK law and ICO requirements.
For SMS campaigns sent to end consumers, agencies are responsible for ensuring they hold valid PECR consent from their own contacts.
4. How We Use Your Data
- To provide and maintain the PipeIQ platform.
- To send transactional emails (account notices, receipts).
- To detect and prevent fraud or misuse.
- To comply with legal obligations.
We do not sell personal data to third parties. We do not use your data for advertising.
5. Data Retention
Contact data uploaded by agencies is retained for 12 months from the date of upload, then automatically purged. Agency account data is retained for the duration of the contract plus 12 months. Opt-out (STOP) records are retained indefinitely to honour opt-out requests. Audit logs are retained for 24 months.
6. Data Sharing
We share data only with:
- Twilio Inc. — SMS delivery infrastructure (US, SCCs in place).
- Supabase Inc. — database hosting (EU region, contractually locked).
- Vercel Inc. — web hosting (US, SCCs in place).
- Google Cloud (GCP) — compute hosting for campaign dispatch, opt-out enforcement and voice AI (US, SCCs in place).
- GitHub, Inc. (Microsoft) — off-site disaster-recovery backup. A nightly copy of the database is held in a private repository for restore purposes only; it is not processed or disclosed onward (US, SCCs in place).
- Anthropic Inc. — AI language model (Claude) used for SMS message variant generation. Data processed: campaign name, client type, message tone parameters. No personal data of contacts is sent to Anthropic (US, SCCs in place).
All processors are bound by appropriate data processing agreements.
7. Your Rights
Under UK GDPR you have the right to: access, rectify, erase, restrict, or port your personal data; object to processing; and lodge a complaint with the ICO at ico.org.uk.
To exercise any right, email kamran@tradeboostuk.co.uk. We will respond within 30 days.
8. Cookies
Our marketing site (pipeiq.co.uk) uses no third-party tracking cookies. The platform (app.pipeiq.co.uk) uses strictly necessary session cookies only.
9. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top will reflect any changes. We will notify you of material changes by email. The updated policy will apply to data processed after the effective date. If you do not accept the changes, you may close your account.
10. Contact
For any privacy-related queries: kamran@tradeboostuk.co.uk