GDPR Policy
Effective Date: [08/01/2021]
Last Updated: [05/24/2025]
At CREPipeline, we take your privacy seriously. This notice explains how we collect, use, and protect your personal data when you use our platform and services.
1. Who We Are
CREPipeline is a SaaS platform for the commercial real estate industry, otherwise known as a CRM and transaction management ecosystem. We are responsible for the personal data we collect and process. If you have questions, you can contact us at privacy@crepipeline.com.
2. Information We Collect
When you use our services, we may collect:
-
Your name, company, and contact details.
-
Login information (securely stored & encrypted).
-
Payment and billing details.
-
Technical data like IP address, browser type, and usage logs.
-
Any information you choose to share with us.
3. How We Use Your Data
We use your data to:
-
Provide and manage your account and services.
-
Process payments.
-
Improve our platform and user experience.
-
Communicate with you about updates, support, and security.
-
Meet legal and regulatory obligations.
We NEVER sell your personal data to third parties or ANY data you interact with inside CREPipeline’s various tools.
4. Legal Basis for Processing
We process your data because:
-
It’s necessary to deliver our services.
-
You’ve given consent (e.g., for marketing).
-
We have a legitimate interest in improving and securing our platform.
-
We are required to by law.
5. Sharing Your Data
We only share personal data with trusted partners who help us deliver our services (e.g., cloud hosting, payment providers). These partners must follow strict data protection rules. If we transfer data outside the EEA, we use approved safeguards like Standard Contractual Clauses.
6. How Long We Keep Your Data
We only keep your personal data as long as necessary:
-
Account information: while your account is active and for a limited period afterward (defined in our Terms of Conditions and/or License Agreement).
-
Payment records: as required by law (usually up to 7 years).
-
Marketing data: until you opt out or after 24 months of inactivity.
7. Your Rights
Under GDPR, you have the right to:
-
Access the personal data we hold about you.
-
Correct inaccurate or incomplete data.
-
Request deletion of your data.
-
Restrict or object to processing.
-
Request data portability.
-
Withdraw consent at any time.
To exercise your rights, email us at privacy@crepipeline.com.
8. Data Security
We protect your personal data using encryption, secure servers, 2-factor authentication, 3-factor authentication, global IP networks to monitor for known fraud, access controls, regular security testing, penetration testing and a number of other specific protocols to protect your data and information.
9. Data Breaches
If a data breach occurs that affects your rights and freedoms, we will inform you and the relevant authorities without undue delay via the communication
10. Contact & Complaints
If you have questions or concerns about this Privacy Notice, contact us at:
Email: privacy@crepipeline.com
Address: CREPipeline, 11990 Coit Rd. Suite 100 Frisco, TX 75035
