Legal
Privacy Policy
Last updated: 26 October 2026
Pipeline SLA is made by Argutix, a trading name of Norvane Software Ltd. "We" in this policy means Norvane Software Ltd, which is the controller of the personal data described here. Norvane Software Ltd is registered in England and Wales, company number 17525503, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. It is registered with the Information Commissioner's Office as a data controller, registration number ZC277712. Contact: founder@argutix.com.
One exception: the deal data we read from your HubSpot account, including deal owners' names and email addresses, belongs to your business. For that data your business is the controller and we process it on its behalf, as set out in our Terms of Service.
What we collect
Account and team: your organization name, the names, email addresses and roles of people on your team, team invitations, and your settings such as timezone and weekly digest recipient. Passwords are handled by our authentication provider and stored only in hashed form, so we never see them.
HubSpot connection: your HubSpot portal ID and the access keys that let us read your pipeline, which are encrypted before storage. From your connected pipelines we read deal names, amounts and currency, stages, time in stage, and deal owners' HubSpot IDs and email addresses. Access is read-only.
Rules and alerts: the rules you set up, the email addresses of the reps, managers and directors you choose to alert or escalate to.
Activity: records of rule breaches, alerts and escalations sent, acknowledgements, snooze dates and any snooze reasons you enter, compliance statistics, and logs of each monitoring scan.
Billing: your plan, subscription status, trial dates and Stripe customer and subscription references. Card details are handled entirely by Stripe, and we never see or store your card number.
Pipeline Health Check
You can take the Pipeline Health Check without giving us anything. If you choose to have the report emailed to you, we save your name, email address, answers and score. We use them to send you the report. We only email you about Pipeline SLA if you tick the box asking for updates, and you can opt out at any time by replying to any of our emails or by emailing founder@argutix.com. The health check does not connect to HubSpot. We keep health check details for 12 months and then delete them, or earlier if you ask us to delete them.
If we contacted you by email
We sometimes email people whose work involves HubSpot sales pipelines, such as revenue operations, sales operations or sales leadership roles, to tell them about Pipeline SLA. If you received an email from Sher at Argutix and never signed up, this section explains where your details came from and what we do with them.
What we hold: your name, work email address, job title and company, and where relevant the public information that led us to contact you, such as a job advert your company posted. We also keep the emails we sent you and any reply.
Where it came from: public sources, such as HubSpot Community posts, job adverts, LinkedIn profiles and company websites, and Apollo.io, a business contact data provider.
Why, and our legal basis: legitimate interests. We contact people in a relevant professional role about a product that may be useful in that role. We only use work email addresses and keep follow-ups to a small number.
Who processes it: Microsoft, which provides the Microsoft 365 mailboxes we send from; Instantly (instantly.ai), which sends our outreach emails through those mailboxes; and Apollo.io, which supplies business contact data.
How long we keep it: if you don't reply, we delete your details within 6 months of our last email. If you ask us not to contact you again, we delete everything except your email address, which we keep on a do-not-contact list only so that we never email you again.
Your rights: you can object at any time and we will stop straight away. Reply to any of our emails or write to the address below. You can also ask for a copy of what we hold or ask us to delete it. If you're unhappy with how we have handled your details, you can complain to the Information Commissioner's Office at ico.org.uk.
Why we use it
To run the service you signed up for: monitoring your HubSpot pipeline against your rules, sending the alerts, escalations and summaries you configure, managing your account and billing, and emailing you about your account (such as confirmation, password reset and trial reminders). Health check details are used only as described above.
Our legal bases: running your account, alerts and billing is necessary to perform our contract with your business. Keeping the service secure, logging scans and preventing abuse are in our legitimate interests. We keep billing records because the law requires it. Health check updates are sent only with your consent, which you can withdraw at any time. Contacting people about Pipeline SLA by email is covered in the section above.
How it's protected
HubSpot access keys are encrypted before being stored (AES-256). Each customer's data is separated from every other customer's in the database, and access through your login is limited to your own organization's data.
Who else processes your data
- Microsoft: our email accounts (Microsoft 365 mailboxes)
- Instantly (instantly.ai): sending our outreach emails
- Apollo.io: business contact data used for outreach
- Supabase: database and authentication
- Vercel: hosting
- HubSpot: the source of your deal data, through your own connection
- Stripe: payments and billing
- Resend: sending emails, including alerts, digests, account confirmation, password reset and health check reports
- Anthropic (Claude): generates suggested re-engagement messages for stale deals when you ask for one. The deal name, stage and time in stage are sent to create each suggestion.
Cookies
We only use cookies that are essential to keep you signed in and to keep your account secure. We don't use analytics or advertising cookies. When you pay, Stripe's checkout page may set its own cookies, covered by Stripe's privacy policy. Our homepage shows two badge images loaded from SaaSHub and BetaList, the directories where Pipeline SLA is listed, so those sites receive your IP address and browser details when the homepage loads.
Where your data goes
Our database and authentication (Supabase) run in the European Union (Ireland). Our other providers are US companies, so some data leaves the UK. Where a provider is certified under the UK Extension to the EU-US Data Privacy Framework, that certification is the safeguard. Where it isn't, we rely on the UK International Data Transfer Addendum built into that provider's data processing agreement. You can ask us for details of the safeguard that applies to a particular provider using the contact address below.
Complaints
If you have a complaint about how we have handled your personal data, email founder@argutix.com with "Data complaint" in the subject line. We will acknowledge it within 30 days, look into it, and tell you the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk.
How long we keep it
We keep your data for as long as your account is active, and delete it when your account is deleted, apart from the copies described below. If your free trial ends without a paid plan, we keep your account data for 90 days so you can come back, and after that we may permanently delete it.
You can delete your account at any time from the Account page. If you're the owner, this permanently deletes your whole organization's data and every team member's login from our database straight away. If you're a team member, it deletes your own login and removes you from the team. Disconnecting HubSpot stops all scanning and deletes the stored refresh key immediately, so access can never be renewed; the short-lived access key left behind is encrypted and expires within the hour.
Some copies are held outside our database and aren't removed instantly: Stripe keeps payment and billing records it is required to retain, our email provider keeps delivery logs for a limited period, and routine database backups may contain deleted data for a short time until they are replaced.
Your rights
You can ask us for a copy of your personal data, ask us to correct it or delete it, ask us to restrict or stop using it, object to how we use it, and ask for a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. We reply within one month. These rights have some legal limits; if one applies, we'll explain it. For deal data from your HubSpot account, we'll pass your request to the business that controls it and help it respond.
Contact
Questions, or a request about your data: founder@argutix.com