Privacy Policy

We collect personal information only when you voluntarily provide it through the following channels:

• Form submissions — Contact forms, evaluation inquiry forms, and enterprise request forms may collect your name, email address, company name, role, and message content.
• Newsletter signups — Subscribing to The Pipkin Brief requires an email address. No other personal information is collected for newsletter delivery.
• Evaluation data — When you submit an AI agent for evaluation, we collect technical details about the agent, your name, company information, and contact details as provided in the submission form.
• Payment information — Payment details are collected and processed exclusively by Stripe. Pipkin does not store credit card numbers, bank account details, or other payment credentials on our systems.

Personal information submitted to Pipkin is used exclusively for the following purposes:

• Responding to inquiries submitted through contact, evaluation, and enterprise forms.
• Delivering The Pipkin Brief newsletter to subscribers who have opted in.
• Processing and communicating evaluation status updates to clients who have submitted agents for review.
• Sending service-related notices, including rating publication notifications, re-test results, and certification expiration warnings.
• Processing payments for evaluation services through our payment processor.

We do not use personal information for marketing beyond the specific service you signed up for. Newsletter subscribers receive only the newsletter. Evaluation clients receive only evaluation-related communications.

Data is retained only as long as necessary to fulfill the purpose for which it was collected:

• Newsletter emails — Retained until the subscriber unsubscribes. Unsubscribe requests are processed within 10 business days.
• Contact form data — Retained for up to 24 months after the inquiry is resolved.
• Evaluation client data — Retained for seven (7) years in accordance with our record retention policy.
• Payment records — Retained as required by applicable tax and financial regulations.

Pipkin uses the following third-party service providers who may process data on our behalf:

• Vercel — Website hosting and deployment. Vercel may process standard server logs including IP addresses and request metadata. See Vercel’s Privacy Policy.
• Stripe — Payment processing for evaluation services. Stripe collects and processes payment information directly. Pipkin does not have access to full payment credentials. See Stripe’s Privacy Policy.
• Resend — Transactional and newsletter email delivery. Resend processes email addresses and message content necessary for delivery. See Resend’s Privacy Policy.
• Supabase — Database hosting and authentication. Data is stored using industry-standard encryption. See Supabase’s Privacy Policy.

We do not sell, rent, trade, or share personal data with third parties for marketing or advertising purposes. We may disclose data when required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Pipkin, our users, or the public.

PipkinRated.com does not use advertising, tracking, or behavioral profiling cookies. We do not use Google Analytics, social media tracking pixels, browser fingerprinting, or any form of behavioral tracking technology.

We may use strictly necessary cookies for essential site functionality, such as authentication state for the Client Portal. These cookies do not track browsing behavior and are not shared with third parties.

Personal data is protected using industry-standard security measures, including encryption at rest and in transit (TLS 1.2+). Data is hosted on infrastructure located in the United States.

Access to personal data is restricted to authorized personnel on a need-to-know basis. We conduct regular reviews of our data handling practices and security measures to ensure ongoing compliance with this policy.

While we implement reasonable safeguards, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

Regardless of your location, you have the following rights regarding your personal data:

• Right to access — Request a copy of the personal data we hold about you.
• Right to rectification — Request correction of inaccurate or incomplete personal data.
• Right to erasure — Request deletion of your personal data, subject to legal retention requirements.
• Right to data portability — Request your data in a structured, machine-readable format.
• Right to object — Object to processing of your personal data for specific purposes.
• Right to withdraw consent — Withdraw consent at any time by unsubscribing from communications or contacting us directly.

For European Economic Area, United Kingdom, and Swiss residents: we process personal data based on consent and legitimate interest, and rely on Standard Contractual Clauses for international data transfers. You have the right to lodge a complaint with your local data protection authority.

For California residents: we do not sell or share personal information as defined under the CCPA/CPRA. We will not discriminate against you for exercising your privacy rights.

For questions about this privacy policy or to exercise any of your data rights, contact:

privacy@pipkinrated.com

We will acknowledge your request within 10 business days and respond substantively within 30 days.

Pipkin Ratings LLC. Arizona, United States.