thePIPGENIUSPrivate Beta

Legal

Privacy Policy

We take your privacy seriously. Here's exactly what we collect and why.

Effective: March 1, 2025

1. Overview

PIPGENIUS LLC(“we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at thepipgenius.com (the “Service”).

By using the Service, you agree to the collection and use of information as described in this Policy. We will not use or share your information except as described here.

2. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed password. We do not store plain-text passwords.

Estimate Data

When you create estimates, we store the estimate parameters you provide:

Data TypeExamplesPurpose
Property informationHotel name, brand, locationPopulate estimates, historical lookup
Estimate parametersRoom count, renovation tier, section scopesCalculate cost ranges
Estimate resultsLine-item costs, totals, allowancesDashboard display, export
Custom adjustmentsUser-modified unit costs, quantitiesPersonalized estimates

Usage Data

We automatically collect certain information when you use the Service, including:

  • Pages visited and time spent
  • Features used and buttons clicked
  • Browser type, operating system, and device type
  • IP address and approximate geographic location (country/state)
  • Referring URLs

Communications

If you contact us via email or our contact form, we retain those communications to respond to you and improve our support.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process and store your estimates
  • Send transactional emails (account verification, password reset, estimate exports)
  • Respond to your support requests and inquiries
  • Analyze usage patterns to improve the Service
  • Calibrate and improve our cost estimation models using aggregated, anonymized data
  • Detect and prevent fraudulent or unauthorized use
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your personal information to serve third-party advertising.

4. Information Sharing

We share your information only in the following circumstances:

RecipientReasonData Shared
Supabase (database/auth)Infrastructure providerAccount credentials, estimate data
Vercel (hosting)Application hostingRequest logs, IP addresses
Google (Places API)Hotel address lookupSearch query text only
Legal authoritiesValid legal processAs required by law

If we are acquired or merge with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Cookies & Tracking

We use the following types of cookies and tracking technologies:

  • Essential cookies: Required for authentication and session management (Supabase auth tokens). These cannot be disabled.
  • Analytics: We may use lightweight, privacy-respecting analytics to understand aggregate usage patterns. We do not use Google Analytics.

You can control cookie settings through your browser. Note that disabling essential cookies will prevent you from logging into the Service.

6. Data Retention

We retain your account information and estimates for as long as your account is active. If you delete your account, we will delete your data within 90 days, except where we are required by law to retain it.

Aggregated, anonymized data derived from your usage (with no connection to your identity) may be retained indefinitely for model calibration and industry benchmarking purposes.

7. Security

We implement industry-standard security measures to protect your data:

  • All data transmitted between your browser and our servers is encrypted via TLS
  • Passwords are hashed using bcrypt and never stored in plain text
  • Database access is restricted by role-based access controls
  • API keys and secrets are stored as environment variables, never in source code
  • We regularly review and update our security practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal obligations)
  • Portability: Request your estimate data in a machine-readable format
  • Objection: Object to certain processing of your data

To exercise any of these rights, contact us at info@thepipgenius.com. We will respond within 30 days.

9. International Transfers

PIPGENIUS is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete it promptly.

11. Third-Party Services

The Service integrates with third-party services to provide certain features. These services have their own privacy policies:

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days.