Effective date: 1 August 2026 · Last updated: 1 August 2026
PipelineHQ is a cloud-based sales pipeline and CRM tool developed and operated by Multitech Solutions, located in Kolkata, India. We provide this service to businesses ("Organisations") and their authorised team members ("Users").
For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), Multitech Solutions acts as the Data Fiduciary for data collected directly from Users of PipelineHQ. Each Organisation using PipelineHQ acts as a Data Fiduciary for the personal data of their own business contacts stored within the platform.
From Users (your team members who log into PipelineHQ):
From Contacts (business contacts stored by your Organisation):
Automatically collected:
| Data | Purpose | Lawful basis |
|---|---|---|
| User name and email | Account creation and identification | Legitimate purpose (contract) |
| Login and session data | Security and authentication | Legitimate purpose |
| Audit logs | Accountability and data integrity | Legitimate purpose |
| Contact details | Core CRM functionality | Legitimate purpose of the Organisation |
| Calendar tokens | Optional calendar sync feature | Consent (user connects voluntarily) |
We do not sell your personal data to any third party.
We share data only with the following service providers who process it on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database hosting | Japan (AWS ap-northeast-1) |
| Vercel | Application hosting and delivery | Global CDN |
| Resend | Transactional email delivery | USA |
| Anthropic | AI-generated pipeline insights (anonymised aggregate data only) | USA |
| Microsoft / Google | OAuth authentication and calendar sync | Global |
Note on cross-border transfers: Some of our service providers are located outside India. We take reasonable contractual measures to ensure adequate protection of your data. As India's approved country list under DPDP is pending publication, we will review and update our data transfer practices accordingly.
Under India's DPDP Act 2023, you have the following rights:
Right to access: You may request a summary of personal data we hold about you.
Right to correction: You may update your own profile information directly in the app at any time (Settings → Profile). For corrections to other data, contact us.
Right to erasure: You may request deletion of your personal data. We will process erasure requests within 30 days, subject to legal retention requirements (e.g. audit logs).
Right to grievance redressal: You may raise a complaint with our Data Protection Officer (details below).
Right to nominate: You may nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
To exercise any of these rights, contact us at: info@multitechsolutions.co.in
We implement the following security measures:
Despite these measures, no system is completely secure. In the event of a personal data breach, we will notify affected parties and the Data Protection Board of India as required by law.
PipelineHQ uses session cookies for authentication only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
PipelineHQ is a business tool intended for use by adults (18+) in a professional capacity. We do not knowingly collect data from individuals under 18 years of age.
Data Protection Officer / Grievance Officer:
Multitech Solutions, Kolkata, India
Email: info@multitechsolutions.co.in
Response time: Within 48 hours for acknowledgment, 30 days for resolution.
You also have the right to lodge a complaint with India's Data Protection Board once it is constituted.
We will notify all Organisation administrators by email when this policy is updated in a material way. Continued use of PipelineHQ after notification constitutes acceptance of the updated policy.