Privacy policy

Who we are

PushPiper is run by Bitgate, Inc., registered with the Dutch Chamber of Commerce (KvK) under number 66079586, Mastbos 15, 5531 MX Bladel, the Netherlands. We are the controller of the personal data described here. Questions or requests go to support@pushpiper.com.

What we collect

• Account details: your name, email address and profile picture from the sign-in provider you choose.
• Devices: the names you give them, browser and operating system, and the Web Push subscription each browser hands us.
• Messages: what you and your apps send, including titles, links and attachments. With end-to-end encryption we only ever hold ciphertext and never see your key.
• Apps, groups, subscriptions and teams: names, icons, members, memos and settings you create.
• Email gateway: the subject, text and first image of mail sent to your PushPiper address.
• Usage and logs: message counts per app and day, and IP addresses and request details in short-lived logs that we use for rate limiting, security and debugging.
• Billing: your plan and payment status. Stripe collects card and address details, and we never see full card numbers.
• Site analytics: page views and button clicks on pushpiper.com, counted without cookies and without building profiles of you.

Why we use it

• To run the service you signed up for: delivering messages, syncing your inbox, billing your plan and answering support (performance of a contract).
• To keep PushPiper secure and working: rate limits, abuse prevention, debugging and aggregate statistics (legitimate interest).
• To keep the financial records the law requires (legal obligation).

We don't sell your data, and we don't use your messages for advertising or to train AI models.

How long we keep it

• Messages and attachments: 30 days, or sooner when a message sets a shorter time to live.
• Emergency receipts: 7 days.
• Logs: a few weeks at most.
• Account data: until you delete your account.
• Invoices and payment records: 7 years, as Dutch tax law requires.

Who helps us

These companies process data on our behalf, under data processing agreements:

• Cloudflare: hosting, storage for attachments, email routing and network security.
• OVHcloud: our database, hosted in the EU.
• Google (Firebase Authentication): sign-in.
• Stripe: payments, as merchant of record.
• Postmark: transactional email such as team invitations.
• Clicktag: cookieless site analytics, operated by Bitgate.

Notifications travel through the push service of your browser vendor, such as Apple, Google, Microsoft or Mozilla. Web Push payloads are encrypted for your browser, so those services can't read them. Where data leaves the EU, we rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Cookies

The public site sets no cookies. The web app at pushpiper.com/app uses one strictly necessary cookie to keep you signed in.

Your rights

You can ask to see, correct, export or delete your data, and object to or restrict how we use it. You can delete your account in the app at any time, which removes your messages, devices and keys. Email support@pushpiper.com for anything else and we'll answer within 30 days. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

When this policy changes, we update the date on this page. For changes that matter, we email you before they take effect.