AGI Pipeline privacy policy

What AGI Pipeline is

AGI Pipeline is a private sales pipeline and client records tool for the Anchored Grace Innovations team. It is not a public service: there is nothing to sign up for, and nobody can create their own account.

Who can sign in

Only team members the agency's owner has added can sign in, with "Continue with Google" or, once they have set a password, with their email and password. Each person sees only what their role allows. For example, an agent sees their own deals and never another agent's, and only the owner sees the agency's totals.

What it keeps

• About team members: name, email address, phone number if given, role, and the referral commission arranged on deals they refer.
• About clients: the business contact details the team enters (company name, contact person, email, phone, location and address), their deals and notes, the Payment Requests sent to them, and the payments recorded against those (date, amount, method, reference number and who paid).
• Proof photos of payments (a screenshot or a deposit slip), which only the agency's owner can see. Each photo is made smaller on the device it is taken on before it is sent, which also removes the location details phones add to photos.
• Sign-in records: each sign-in keeps the internet address and browser name of the device that signed in, so a sign-in that is not yours can be spotted. The app also counts recent sign-in attempts per internet address, to slow down password guessing. Passwords are kept only in a scrambled form that cannot be turned back into the password.

Signing in with Google

When a team member chooses "Continue with Google", the app asks Google only for the basic sign-in details: your name, email address and profile picture (Google's own screen lists them). The app uses them for one thing only: to recognise a team member who is already on the team, by matching the email address Google confirms with the one the team has for you.

It keeps only that match and Google's account number for you (with the list of basic permissions Google gave). It does not save your Google name or picture, and it keeps no Google access token, so it cannot read your email, files or calendar or do anything in your Google account. Information from Google is never used for anything else, never shared and never used for advertising. The app's use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

You can remove the app's access at any time in your Google Account, under security and third-party connections. Once you have set a password for AGI Pipeline, you can sign in with your email and password instead.

Where it is stored

Everything is stored with Cloudflare, the company that runs the app for us: the records in a Cloudflare database and the proof photos in private Cloudflare storage, both set up in Cloudflare's Asia Pacific region. The app's address uses an encrypted connection (https).

One exception, for now: the app's earlier version kept its records with Supabase, a database company. When the records moved here, that copy was paused, not deleted. Nobody uses it or adds to it, and it stays paused until the agency's owner deletes it. This page will say when that has happened.

No selling, no sharing

We never sell, rent or share anyone's information. Nobody outside the team sees it, apart from the companies that run parts of the app for us: Cloudflare, which hosts and stores it; Google, only while a team member signs in with Google; and Supabase, which keeps the paused copy of the earlier version until it is deleted. If the law requires us to hand over information, we do only what it requires.

No ads, no tracking

There are no ads, no analytics and no tracking cookies. The app sets only the cookie that keeps you signed in (for up to 7 days) and, during a Google sign-in, a short-lived cookie (5 minutes) that ties Google's answer to your browser. Both work only on this web address, and scripts on the page cannot read them.

To help fix problems, Cloudflare keeps short technical logs for a small sample of visits (about 1 in 20). The app's settings switch off the part of those logs that records visitors' internet addresses.

How long it is kept

• Client, deal and team records stay while the agency works with that client or team member and needs them for its accounts.
• Recorded payments are never erased by the app, only marked void with a reason, because they are accounting records.
• A sign-in lasts at most 7 days. Signing out ends it at once and deletes its record.
• When something is deleted, the database's restore history at Cloudflare can still hold it for up to 30 days. After that it is gone from Cloudflare.
• The paused copy of the earlier version at Supabase still holds the records as they were on the day they moved here, including anything deleted since, until that copy is deleted.

Seeing, correcting or deleting your information

Anyone whose information is in AGI Pipeline, team member or client, can ask us for a copy of it, ask us to correct it, or ask us to delete it. Write to anchoredgraceinnovations@gmail.com. We answer within 30 days. If we must keep some of it (for example payment records needed for taxes), we tell you what and why, and delete the rest.

Changes and contact

If this policy changes, the new version appears on this page with a new date. Questions go to Anchored Grace Innovations at anchoredgraceinnovations@gmail.com.