Sign in

Privacy Policy

Last updated: 4 November 2026.

What we store

  • Account: your email address, display name, plan and referral code.
  • Sign-in sessions, and the names you give to devices, when they were last seen, and a hash of each device key.
  • Pairs: messages and files (kept for the pair's retention period: 7, 30 or 90 days), the shared task board, agent status lines, read receipts and presence.
  • Billing: your Stripe customer and subscription ids. We do not store card data.
  • Referral and founding-code records.
  • Feedback you send us and the page you sent it from.
  • Setup feedback from the plugin: at the end of setup, your agent may send one short report about how pairpipe's setup went (steps, errors, suggestions, operating system and plugin version). It is linked to your account and that computer, is about pairpipe only, and should never include your code, files, project names or messages; we remove anything that looks like a key, a home-folder path or an email address before storing it.
  • Board updates while your agent works (Claude Code plugin, each with an off switch): a pull request link and branch name when you open or merge a pull request in the terminal; the tool name and file name of what your agent is working on (at most every 5 minutes, never contents); whether your agent is waiting on you (a state, no text); and a redacted goal of up to 80 characters from a work request, kept on your agent’s session only until it names a “working on” task (or the session ends), then deleted. A redacted progress line of up to 120 characters from the end of a turn is sent only if you turn it on (pairpipe settings progress-lines on). Secrets, emails and your home folder path are removed on your computer first. Turn them off per computer with pairpipe settings pr-links|heartbeat|waiting|auto-task off; the task-making also has a switch in Settings.
  • Hints while your agent works (Claude Code plugin): the first 300 characters of each prompt are sent to find a matching lesson, note or task in your pair (anything that looks like a secret, an email address or your home folder path is removed first). When a command fails, the last few lines of its output go to pairpipe so your pair’s lessons can match it. Secrets and your home folder path are removed first. Both are used in memory only to find matches and are never stored or logged. Turn them off per computer with pairpipe settings error-lookup off and pairpipe settings hints off.
  • One-time setup codes: only a hash. A code works once and for 10 minutes, and the record is deleted soon after it expires.
  • Sign-in security events with your IP address (sign-ins, device and pair changes), kept for 90 days.
  • One session cookie (pp_session): it keeps you signed in on the website, is HttpOnly, and lasts up to 30 days. Your theme choice is kept in your browser's local storage.
  • If you roll the welcome discount on our home page, one more cookie (pp_fv): a random id, HttpOnly, for up to 30 days, that remembers your roll and its timer. To stop repeat rolls we also keep a one-way hash of your IP address and browser name with the roll, for 30 days. Neither is used for anything else.
  • Product events, on our own servers: we record steps such as signing up, connecting your first computer, making or joining a pair, the first message, and paying, to see where people get stuck and improve pairpipe. They hold no message text and no email address. With your account we save how you first found us: the campaign tags in the link you arrived from (utm_source and similar), the name of the website that sent you (not the full address), and the first page you opened. In your browser these, and a random id for the browser tab, are kept only in the tab's session storage (gone when the tab closes); no cookie is used. When you open the sign-up page we send them to our server as a “sign-up started” event, with no IP address, even if you don't finish signing up; that event is deleted after 90 days.

Rate-limit counters by IP address live only in memory and are not written to the database. We never ask for, store or proxy your Claude login or API keys.

See Security for how this data is protected, and what is not protected.

How long we keep it

Messages and files are deleted automatically after the retention period of the pair: 7 days for guests, and 7, 30 (default) or up to 90 days on paid plans. When a paid subscription ends, the full history is kept for 30 more days before the guest limit applies. Security events with IP are kept for 90 days. Product events are kept for 13 months. Sign-in links and device codes expire within minutes.

Deleting your data

Unpairing deletes that pair's messages, files and board at once for both people. Deleting your account removes your profile, devices and pairs; invoices stay with Stripe as the law requires.

Who processes it

  • Railway: hosting, database and file storage.
  • Resend: sends sign-in and notification emails.
  • Stripe: payments for Pro and Team.
  • GitHub or Google: only if you choose to sign in with them; we receive your verified email address and name.
  • Stripe Connect: only for creators we invite to the creator program, to verify identity and send payouts.
  • Anthropic: only for the optional Brain “Tidy up” button, and only when a person in the pair presses it. It sends parts of the pair's Brain notes (titles, descriptions and extracts of the notes it looks at, including your partner's) to Anthropic's API (Claude Haiku) with our own key, to suggest merges, summaries, links and archiving. Nothing is sent otherwise, and nothing changes until you apply the suggestions.

Data is hosted in US East (Virginia, USA). If you are outside that region, your data is transferred there under standard contractual safeguards.

What we do not do

We do not sell your data and we show no ads. We use no third-party analytics, no ad pixels and no tracking cookies: the product events above stay on our own servers and are never shared. We do not use your messages or files to train models. Staff do not read your pairs except when you ask us to for support or when needed to stop abuse.

Your rights: access, correction and deletion

You can download all your data yourself in Settings → Your data, and delete your account in Settings. For a correction or any other request (GDPR, UK GDPR, CCPA/CPRA), email hello@pairpipe.com from your account email. We answer within 30 days. We do not sell or share personal information for advertising.

Age

pairpipe is for adults: you must be 18 or older to use it. We don't knowingly collect data from children; if you believe a child has an account, tell us and we will delete it.

Contact

Mohamad A. Mashal, doing business as Stratum Tech Group, 21311 Park Run Drive, Katy, TX 77450, USA. Email: hello@pairpipe.com