Privacy policy
Last updated: 28 October 2026. This policy covers Stripe Payments for Pipedrive (“the app”), a Pipedrive Marketplace app made by Senyi Labs.
Who we are
Senyi Labs, Norway. Contact: the contact form (topic Privacy). For the data the app processes on behalf of your company, your company is the controller and Senyi Labs is the processor.
The short version
- The app only reads from your Stripe account, with a restricted key you create. It can’t create charges, refunds or change anything in Stripe.
- Payment data (customers, invoices, subscriptions, charges) is fetched when someone opens a record in Pipedrive and shown there. It is not stored by us.
- When something happens in Stripe, the app writes a note or a task in your Pipedrive account. That copy lives in Pipedrive, not with us.
- No advertising, no tracking, no selling of data.
What the app stores, and where
Everything is stored on Cloudflare, in Senyi Labs’ account (Cloudflare Workers and Durable Objects).
| Data | Why | How long |
|---|---|---|
| For each user who installs the app: Pipedrive company and user ID, email address, timezone, the Pipedrive API address, and the access and refresh tokens (encrypted with AES-256) | To read contacts and write notes and tasks in Pipedrive, and to match a subscription | Deleted as soon as the user uninstalls the app |
| Your company’s Stripe restricted key (encrypted with AES-256), whether it is live or test, who connected it and when | To read from your Stripe account | Until you disconnect Stripe; if nobody in your company has the app installed any more, deleted 30 days later |
| Automation settings, the time of the last check, the number of notes and tasks added, and the newest Stripe event time handled | To run the automations | Same as the key |
| IDs of Stripe events already handled and the result (for example “note” or “no matching person”) | So no event is handled twice | 40 days |
| Company plan: Pipedrive company ID, number of active Pipedrive users, trial start date, and the result of the last subscription check | Trial and subscription | Kept, so a reinstall doesn’t restart the trial; it contains no personal data |
What the app reads but doesn’t store
- From Pipedrive: the name and email addresses of the person (or the deal’s person, or an organization’s people) being viewed, and the active users count.
- From your Stripe account: customers matching those emails, their invoices, subscriptions, charges and product names; and payment events (paid, failed, subscription started or cancelled). For events, the customer’s email is used to find the person in Pipedrive.
Who receives data
- Pipedrive: the app reads contacts and writes notes and tasks in your Pipedrive account, under your company’s agreement with Pipedrive.
- Your Stripe account: the app reads from it with your key, under your agreement with Stripe.
- Cloudflare (hosting): runs the app and stores the data above. Cloudflare may process it in the regions where its network runs.
- Stripe, for our own billing (merchant of record through Stripe Managed Payments and Link): to check whether your company has a subscription to the app, the app sends the email addresses of the users who installed it to Senyi Labs’ Stripe account, about once a day and when someone clicks “I’ve subscribed”. Purchases, payment details and invoices are handled by Stripe under its privacy policy; we never see card details.
Logs
Cloudflare keeps short-lived request logs for the app (for example which API address was called and when, and error messages), which Senyi Labs can read to fix problems. They don’t contain tokens or keys. They are kept for a few days.
Security
Tokens and the Stripe key are encrypted at rest. Full-access Stripe keys are refused. Every request from the app’s panel or settings page inside Pipedrive is checked with a token signed by Pipedrive, one company can never see another company’s data, and only Pipedrive admins can connect Stripe or change settings.
Your choices and rights
Disconnect Stripe in the app’s settings to delete the key immediately. Uninstall the app in Pipedrive (Tools and apps → Installed apps) to stop it and delete your sign-in immediately. Notes and tasks the app added stay in Pipedrive until you delete them there. For any privacy question or request, including under the GDPR, use the contact form and choose the topic Privacy.
Changes
We’ll update this page when the app’s data handling changes, and note the date at the top.