Privacy policy

Last updated 2026-10-28 (what the add-on can change in Pipedrive; the time zone and language as Gmail reports them; lead labels, organization labels and industries in the lists kept for one day; error records; team members' email addresses; Pipedrive company and user ids, and uninstalling in Pipedrive).

PipePanda is made by Blue Dot Apps ("we"). Questions about this policy: support@bluedotapps.com.

What the add-on does

When you open an email in Gmail, the add-on looks up the sender (or, for an email you sent, the first recipient) in your Pipedrive company and shows the person, their labels, their organization, open deals, leads, activities and newest notes in the sidebar. You can also add or change people, organizations, deals, leads, activities and notes, and mark deals won or lost, in Pipedrive from the sidebar. It changes Pipedrive only when you click a button in the add-on that saves a change. It never sends or deletes email. The only change it makes in Gmail is to insert the template or Scheduler link you click into the email you are writing.

Google permissions

• gmail.addons.execute: lets the add-on run in Gmail.
• gmail.addons.current.message.metadata: the From and To addresses, the names next to them and the subject of the email you have open, only while it is open. The add-on reads the addresses and names to find the contact, and the subject and date only for "Log this email".
• userinfo.email: your Google email address, to know which Pipedrive connection is yours.
• gmail.addons.current.message.action: the text of the email you have open, only after you click a button in the add-on. We use it only for "Log this email" with "Include the email text" ticked.
• script.locale: your time zone and language, as Gmail reports them, so dates and times on the card show in your time zone.
• gmail.addons.current.action.compose: while you write an email, the add-on inserts the template or Scheduler link you click into the email you are writing. It cannot read your drafts.

Log this email

"Log this email" saves the subject, date, From and To of the open email as a note in your Pipedrive. The email text is read only when you click Log with "Include the email text" ticked. It is sent only to your own Pipedrive company, as a note, and we never store it. We never read your attachments or any email other than the one you have open. The add-on cannot send or delete email.

Gmail data saved to your Pipedrive

When you click Save on "Add to Pipedrive", the name and email address from the open email are saved as a person in your Pipedrive company. When you click Log, the subject, date, From and To of the open email (and its text, if you ticked the box) are saved as a note in your Pipedrive company. Nothing from Gmail is saved to Pipedrive unless you click one of these buttons.

What we store

• Your Google email address.
• Your Pipedrive connection: access and refresh tokens (encrypted), your Pipedrive company's web address and name, your Pipedrive company id and user id, and the custom fields you chose to show.
• Pipedrive details shown on the card (name, emails, phones, labels, organization, open deals, leads, open activities, the 3 newest notes and the custom fields you chose), stored encrypted. Lookups are cached for 10 minutes. A backup copy is kept for 24 hours and is only shown when Pipedrive's daily API limit is reached. Then it is deleted.
• Lists from your Pipedrive company that fill the card and its forms (stages, user names, person labels, lead labels, organization labels and industries, activity types, currencies and custom field names) and your Pipedrive user's time zone and default currency, cached for one day.
• Your text templates and your Scheduler link, if you save them in Settings. They are kept until you delete them or ask us to delete your data.
• The date you first opened the add-on and the date it first found a Pipedrive contact for you, kept with your Google email address. We use them only to count how many people use the add-on. We do not record which emails you open.
• When you subscribe: your Stripe customer id, your subscription status, and the dates your subscription started and was cancelled. Card details are held by Stripe, never by us.
• On a team plan: the Google email addresses the team admin added, whether each member has opened the add-on, and the date a member's own subscription was cancelled when they joined. We use them only to know who the team plan covers and how many members to bill.
• Error records, with personal data removed, so we can fix problems. Kept up to 90 days.

We do not store email subjects, email bodies or the email addresses of emails you open, except as the key of a cached lookup for the times above.

Who we share it with

We do not sell your data. We share it only with the services that run the add-on: Pipedrive (to look up contacts and save what you choose), Google (to read the open email's addresses, and its subject, date and text when you log it), Render (hosting and database) and Stripe (billing). We count users from our own database. We do not use analytics or tracking, and we show no ads.

Google API data

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you the matching Pipedrive contact and to save what you choose to your own Pipedrive, is not used to train any AI model, and is not read by people.

Deleting your data

In Gmail, open PipePanda in the side panel on the right, click the three-dot menu at the top of the panel, click "Manage add-on", then click "Uninstall". You can also remove the app in Pipedrive (Tools and apps, Marketplace apps). Pipedrive then tells us, and we delete your Pipedrive connection and the lists kept for it from our database at once.

To have your connection and the dates listed under "What we store" deleted from our database, email support@bluedotapps.com and we delete it within 7 days. When we delete your connection on request, we also end the add-on's access in Pipedrive, which removes the app from your Pipedrive account. Cached lookups expire on their own within 24 hours.

A team admin can remove a member's address at any time on the Manage team page, and it is deleted from our database at once. A member can also email support@bluedotapps.com to have it deleted.