California and U.S. State Privacy Notice
Last Updated: June 29, 2026
1. Scope
This notice supplements our Privacy Policy and applies to residents of California and other U.S. states that provide consumer privacy rights. It uses terms such as "personal information," "sale," "share," "targeted advertising," "service provider," and "contractor" as defined by applicable law.
California's CCPA/CPRA obligations are broader than a cookie banner. Depending on whether a business is covered and how it uses data, obligations can include a notice at collection, privacy-policy disclosures, a "Do Not Sell or Share" opt-out, treatment of cross-context behavioral advertising as "sharing," and honoring Global Privacy Control or similar opt-out preference signals.
2. Categories Collected
In the last 12 months, we may have collected the following categories of personal information:
| Category | Examples | Collected | Sold or Shared |
|---|---|---|---|
| Identifiers | Name, email, phone, business address, IP address, cookie/device identifiers | Yes | May be shared for advertising, measurement, attribution, or customer-directed workflows |
| Personal information under Cal. Civ. Code 1798.80(e) | Contact and billing information | Yes | No monetary sale; may be disclosed to service providers or customer-directed integrations |
| Commercial information | Products, services, billing status, plan, purchase or account history | Yes | No monetary sale; may be disclosed to service providers |
| Internet or electronic network activity | Browsing activity, referring source, campaign parameters, website interactions | Yes | May be shared for advertising, measurement, attribution, or customer-directed workflows |
| Approximate geolocation | City, region, ZIP, or service area derived from IP address or submitted data | Yes | No monetary sale; may be used for service-area and attribution workflows |
| Professional or employment-related information | Company, role, trade, business website | Yes | No monetary sale; may be disclosed to service providers |
| Inferences | Likely service interest, lead intent, marketing-source classification | Yes | May be shared for advertising, measurement, attribution, or customer-directed workflows |
| Sensitive personal information | PipelineOn account credentials | Yes | No |
We do not knowingly sell or share personal information of consumers under 16.
3. Sources
We collect personal information from:
- You, when you submit forms, communicate with us, create an account, or use the Services
- Customers that configure the Services or connect customer-directed integrations
- Our website and customer sites using cookies, pixels, scripts, logs, and similar technologies
- Advertising, analytics, hosting, security, enrichment, identity-resolution, payment, communications, and integration providers
- Publicly available sources and business records where relevant to the Services
4. Business and Commercial Purposes
We collect, use, disclose, and retain personal information to:
- Provide, maintain, secure, and improve the Services
- Configure customer websites, tracking, attribution, alerts, follow-up, and integrations
- Identify and resolve website visitors where permitted and where opt-outs do not apply
- Measure and improve advertising and marketing
- Communicate with customers, prospects, and website visitors
- Process transactions and administer accounts
- Detect, prevent, and investigate fraud, abuse, or security incidents
- Comply with law, enforce agreements, and maintain opt-out or suppression records
5. Disclosure, Sale, Sharing, and Targeted Advertising
We disclose personal information to service providers, contractors, customer-directed integrations, advertising and measurement partners, professional advisors, authorities, and transaction parties as described in our Privacy Policy.
We do not sell personal information for money. Some disclosures involving identifiers, internet activity, and inferences may be considered a "sale," "share," or "targeted advertising" disclosure under California or other U.S. state privacy laws, including when information is used for cross-context behavioral advertising, audience creation, advertising measurement, visitor identification, or customer-directed marketing workflows.
We describe external parties by functional category rather than naming every provider in this public notice. Provider lists may change, and customers may configure different integrations.
6. Your Rights
Depending on your state, you may have the right to:
- Know or confirm whether we process your personal information
- Access the personal information we maintain about you
- Request deletion of personal information
- Correct inaccurate personal information
- Obtain a portable copy of personal information where required
- Opt out of sale, sharing, targeted advertising, or certain profiling
- Limit the use or disclosure of sensitive personal information where applicable
- Appeal a denied request where applicable
- Use an authorized agent where permitted by law
We will not discriminate against you for exercising your privacy rights.
7. Your Privacy Choices
Do Not Sell or Share My Personal Information
You may opt out of sale, sharing, targeted advertising, and cross-context behavioral advertising by emailing [email protected] with the subject "Do Not Sell or Share My Personal Information."
We also honor Global Privacy Control signals as an opt-out preference signal where required. If your browser sends GPC, our website disables optional marketing and advertising scripts where technically feasible.
This browser-level opt-out disables optional PipelineOn marketing and advertising scripts on pipelineon.com. It does not replace an email request for records that are not tied to this browser.
Limit Use of Sensitive Personal Information
We use account credentials for authentication and security. We do not use sensitive personal information to infer characteristics about you.
Access, Delete, Correct, or Appeal
To submit another privacy request or appeal a decision, email [email protected]. We may ask for information to verify your request before responding.
8. Verification and Authorized Agents
We verify privacy requests by matching the information you provide with records we maintain. If you use an authorized agent, we may require proof of authorization and may ask you to verify your identity directly.
9. Retention
We retain personal information for as long as reasonably necessary to provide the Services, operate our business, maintain records, comply with law, resolve disputes, enforce agreements, preserve security, and maintain suppression or opt-out records.
10. Financial Incentives
We do not offer financial incentives or price or service differences in exchange for the retention, sale, or sharing of personal information.
11. Do Not Track
Some browsers offer "Do Not Track" signals. There is no common industry standard for responding to those signals. We do honor Global Privacy Control signals where required.
12. Contact
PipelineOn
Email: [email protected]
Website: pipelineon.com