Last updated: October 13, 2026
If you already had a Pipeline account before that date, this version applies to you from October 27, 2026, and the previous version applies until then. Write to cameron@getpipeline.app if you would like a copy of the previous version.
Pipeline is a networking platform for students, the organizations they belong to, and the alumni, parents, and others who offer to help them. This policy explains what we collect, why, and what control you have over it.
Pipeline is operated by Pipeline Network LLC, a Virginia limited liability company ("Pipeline," "we," "us"). You can reach us any time at cameron@getpipeline.app.
This policy covers the Pipeline app, our website and the forms on it, and the alumni card pages. It applies whether or not you have an account.
Account information. Your name, email address, and password (stored hashed - we never see it). If you sign in with Google, we receive your name, email, and profile image from Google.
Profile and preferences. Career targets, networking goals, your school and program, notification preferences, email signature, and - if you use it - a writing-style profile so drafts sound like you.
Contacts you add. Names, companies, roles, email addresses, phone numbers, LinkedIn URLs, locations, schools, birthdays, interests, tags, and any notes you write.
Your activity. Conversations you log (type, date, notes, outcomes), follow-up dates, tasks, job applications you track, and messages you draft or schedule through Pipeline.
Payment information. If you purchase a paid product, payment is handled entirely by Stripe. We receive only a confirmation that payment succeeded. Your card details are never sent to Pipeline and we do not store them.
Like any contact manager, Pipeline stores the professional contact details you choose to save. This is typically business contact information such as name, employer, job title, work email address, phone number, LinkedIn URL, graduation year, and your own notes about the relationship.
You are the source of this information, and you control it. Contacts you add privately are visible only to you. Contacts you choose to submit to a shared organization pool are visible to approved members of that organization, and an officer reviews them before they are added.
We act as a processor for this information on your behalf. We do not sell it, use it for advertising, or use it to train AI models. Pipeline does not contact the people in your private contact list. Messages you write to them are sent by you, from your own email account.
To request removal of contact information relating to you, write to cameron@getpipeline.app. A Pipeline account is not required to make this request.
An organization on Pipeline can keep a list of its alumni and other people willing to help its members. Each person on that list has a card. You may have a card without having a Pipeline account.
Where a card comes from. An organization's officers may add the organization's own records about its alumni: name, employer, title, email address, LinkedIn URL, location, major, and class year. A card can also be created by you, when you ask for one on an organization's card page.
Who can see it. Only approved members of that organization. Cards are not public and are not listed on the open web.
Your card is yours to control. On an organization's card page you can enter your name and email address, and we email you a private link. With that link you can correct your details, choose what you are open to (coffee chats, mentoring, referrals, or speaking), and add a note. No account is needed. The link works for seven days.
Being on a list never means you agreed to help. The "open to" choices on a card are only ever set by you.
When we need to confirm it is you. If the email you use does not match the one the organization has on file, or you are not yet on its list, an officer confirms your changes before members see them.
Stopping emails and leaving a list. Your card page has a "Remove me" link, which takes you off that organization's list. Any invitation sent on an organization's behalf carries a one-click link that stops those invitations from every organization on Pipeline. A card link is still sent if your email address is entered on a card page, which is how you can come back if you change your mind. You can also write to cameron@getpipeline.app. None of these need an account.
How members reach you. Members who contact you do so themselves, from their own email account. Pipeline does not send messages to you on a student's behalf.
Our website has sign-up forms that do not need an account. We use what you enter only to follow up about the thing you signed up for.
Program and event interest (for example, the Career Success Bootcamp): your name, email address, whether you are a parent, student, or alum, and, if you choose to give them, a student's name and class year, your affiliation, a note, and whether you would like to help.
Dukes Helping Dukes and similar alumni sign-ups: your name, email address, class year, phone number, location, current role, LinkedIn URL, what you are open to, and who referred you.
Organization applications: the organization's name and campus, your name, role, and email address, the organization's size, and any notes.
If you give us information about someone else, such as your student's name, please make sure they are comfortable with that.
To prevent abuse of these forms we process the IP address of each request. For some forms we store a one-way scrambled version of it, which we delete within two days.
If you connect Gmail, Pipeline requests these permissions:
| Permission | What it allows | Why |
|---|---|---|
gmail.send | Send email as you | So outreach you write in Pipeline sends from your own address |
userinfo.email / openid | See your email address | To identify which account is connected |
We request send-only access. Pipeline cannot read your inbox, your drafts, or any message you did not compose in Pipeline. That capability is not requested and not technically available to us.
We store the OAuth tokens Google issues so scheduled messages can send at the time you chose. You can disconnect Gmail at any time in Settings, which deletes those tokens from our systems and stops Pipeline from sending on your behalf. You can also remove Pipeline's access directly from your Google Account security settings.
Pipeline's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Google user data is used only to provide and improve the user-facing features described above. We do not transfer it to third parties except as necessary to provide those features, comply with law, or in connection with a merger or acquisition. We do not use it for advertising. We do not use it to develop, improve, or train generalized AI or machine learning models. No human reads your Google user data except with your explicit permission or where required by law.
Pipeline's Coach helps you prepare for conversations and draft messages. To do that, we send relevant context - the contact's profile, your notes and logged conversations with them, your goals, and your writing style - to an AI provider.
Coach asks before it first uses your contacts, and one switch in Settings turns AI sharing off.
The provider is one of Anthropic (Claude), Google (Gemini), OpenAI, or Perplexity, depending on the option selected in Settings. Anthropic is the default. You may also supply your own API key, in which case requests go to that provider under your own account.
What this means in practice: your notes and contact details are transmitted to the AI provider to generate a response. We use these providers under API terms that say they do not train their models on data submitted that way. We store token counts to monitor cost - never the content of your prompts or responses.
If you would rather no contact data reach an AI provider, leave Coach disabled. Every other part of Pipeline works without it.
To operate the product - store your network, generate prep sheets and drafts, send and schedule your messages, remind you who to follow up with, and show your progress.
To operate organization features - shared contact pools, alumni and helper cards, membership and roles, and aggregate activity counts for your organization.
To follow up on a form you submitted on our website.
To keep the service working and secure - authentication, abuse prevention, rate limiting, and debugging.
To communicate with you, as described in the next section.
We do not sell your personal information. We do not serve ads. We do not share your private contacts with other members of your organization unless you explicitly submit a contact to a shared pool.
Pipeline itself sends only these kinds of email:
Pipeline does not send marketing email to the people in a user's private contact list.
If you join an organization on Pipeline:
Approved members and officers of that organization can see your name, email address, role, graduation year, and the profile answers you give that organization (for example your major or hometown). They can also see the number of contacts you have submitted to the shared pool. They cannot see your private contacts, your notes, your logged conversations, or your messages.
Contacts you submit to the shared pool become visible to approved members of that organization. Notes you attach to a pooled contact are visible to those members as well - please write them accordingly.
Organization-level activity totals are aggregate. Pipeline does not rank members against one another.
If you leave an organization, you lose access to its pool and its cards. Contacts you already added to your own list remain yours.
If you invite someone to be your mentor, they can see your networking activity: your contacts and the stage of each relationship, the conversations you log, your tasks and the job applications you track, and your progress. Your free-text notes stay hidden unless you choose to share them. You can stop sharing or remove a mentor at any time in Settings.
We use a small number of service providers, each handling only what their function requires:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication |
| Vercel | Website and application hosting, traffic and performance measurement |
| Anthropic, Google, OpenAI, Perplexity | AI Coach - only the provider selected, and only if you use Coach |
| Sign-in, and sending email you compose if you connect Gmail | |
| Resend | The emails Pipeline sends, listed in section 8 |
| Stripe | Payment processing |
| Sentry | Error monitoring so we can find and fix crashes |
| PostHog | Product analytics: page views and feature use, with no session recording |
Our error monitoring is configured not to collect personal information. It records the type and location of a failure, never request contents, and email addresses are stripped from error text before it leaves your browser.
Card information is shown to approved members of the organization the card belongs to, as described in section 3.
We may also disclose information if required by law, to protect someone's safety, or in connection with a merger or acquisition - in which case this policy continues to apply until replaced with notice to you.
Our service providers process and store information primarily in the United States.
We keep your information while your account is active. When you delete your account, we delete your profile, contacts, logged conversations, tasks, drafts, and organization memberships.
Three things persist by design: contacts you submitted to a shared organization pool remain with that organization, since they belong to the group rather than to you; we keep a minimal record that an account was deleted, with no profile content, so we can confirm it happened; and we retain limited records where law requires, such as payment records.
Alumni and helper cards are kept while the organization uses Pipeline, or until you remove yours. When you remove a card or stop invitations, we keep your email address on a do-not-contact list so that we can honor your choice.
Website form sign-ups are kept until the program they relate to has ended and follow-up is complete, or until you ask us to delete them.
Our database is backed up automatically each day. Backups are kept on a rolling basis for up to seven days and are then deleted, so information you remove may persist in a backup for a short period before it ages out.
You can access everything Pipeline holds about you from within the app; correct anything by editing it; delete your account in Settings; and disconnect Gmail at any time. If you would like a copy of your data in a portable format, email us and we will provide one.
If you do not have an account, you can see and correct your card through the link we email you, stop invitations, and remove your card, as described in section 3. For anything else, including a form you submitted, write to cameron@getpipeline.app.
Depending on where you live - including under GDPR or CCPA - you may have additional rights such as data portability, restriction of processing, or objection. Email cameron@getpipeline.app and we will honor them. We do not charge for these requests and will respond within 30 days.
We do not sell personal information, so there is nothing to opt out of in that respect.
Data is encrypted in transit and at rest. Every database table enforces row-level security so users can only reach their own data. API keys you supply are encrypted before storage. Passwords are hashed and checked against known-breached password lists.
No system is perfectly secure. If we discover a breach affecting your personal information, we will notify you promptly and as the law requires.
Pipeline is intended for college students, alumni, parents, and professionals. You must be at least 16 to have an account. Pipeline is not directed at anyone under 13, and we do not knowingly collect information from children under 13. If we learn we have, we will delete it.
Pipeline is not a school's system of record. We do not receive student education records from any university. The information we hold comes from you or from your organization.
If we change this policy materially, we will update the date above and notify you in the app or by email before the change takes effect.
cameron@getpipeline.app
For requests to remove information about a person who is not a Pipeline user, use the same address - no account required.
See also: Terms of Service