Privacy Policy

Pierce (“Pierce”, “we”, “us”) is an AI growth marketer that operates inside Slack and helps businesses manage their paid advertising. The service is operated by PIERCE, a French simplified joint-stock company (SAS, trade name HIREPIERCE), registered in France under RCS Paris 109 028 043.

Contact for anything in this policy: pierre@pierrenicolas.co.

Workspace data. When you install Pierce into your Slack workspace we receive the workspace and channel identifiers needed to post and to record who approved each action. We do not read unrelated conversations.

Advertising platform data. When you connect an ad account (Meta, Google Ads, LinkedIn Ads), we access, with your explicit consent through each platform’s official API: account metadata, campaigns, ad sets and ads, creatives, and performance metrics (impressions, clicks, spend, conversions). We request read access by default; write access is used only to execute changes you have approved.

OAuth tokens. Connecting a platform stores an access token scoped to that connection. Tokens are encrypted at rest with AES-256-GCM, one isolated record per client workspace and platform.

CRM and attribution data. If you connect a CRM (for example HubSpot or Attio) or install/analytics source, we read company, contact, deal, and event records to compute attribution and pipeline reporting for the workspace that owns the connection.

Onboarding activity. When you sign up, we record the steps you complete, the tools you ask to connect or connect, your credits and the videos you start, so we can help you finish setup. Refused sign-in attempts are recorded with the email address used.

Public LinkedIn engagement. When people react to or comment on posts published by Pierce’s founder, we store their public name, headline and profile link to understand who engages with our launch. Anyone can ask us to delete this data at the address below.

Usage data. Standard server logs (IP address, browser, requests) used for security and debugging.

We use the data above to operate the product: read your accounts, compute optimization proposals, post digests and alerts in Slack, and, where you click Approve, apply the advertising change you signed off on. We do not sell data. We do not use one customer’s data for another customer. We do not use advertising data for any purpose other than providing the service to the workspace that owns it.

Campaign performance data may be processed by our AI provider (Anthropic) to generate analysis and proposals. This data is not used to train models shared across customers.

Meta. Our use of data received from Meta’s APIs complies with the Meta Platform Terms and Developer Policies. We only request the permissions needed to provide the features you use.

Google. Pierce’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

LinkedIn. Our use of data received from LinkedIn’s Marketing APIs complies with the LinkedIn API Terms of Use. Advertising data is displayed only to the workspace that owns the connection and is never resold.

Data is hosted in the European Union: application hosting on Vercel, PostgreSQL database on Neon (Frankfurt, Germany), and processing infrastructure on OVHcloud (Gravelines, France). All data is encrypted in transit (TLS) and at rest. OAuth tokens are additionally encrypted at the application layer with AES-256-GCM.

Subprocessors: Vercel (hosting), Neon (database), OVHcloud (compute), Slack (messaging surface), Anthropic (AI processing), Unipile (LinkedIn and email connections). We connect ad platforms and CRMs directly through their official APIs. LinkedIn inbox and mailbox connections go through Unipile, and only when you choose to connect them.

We keep data for as long as your account is active. Disconnecting a platform deletes its stored token from our database at once; the agent that syncs your data stops using it within a few minutes, and no further sync happens after that. You can request deletion of synced advertising or CRM data, of a specific person’s data, or of your entire workspace at any time by emailing pierre@pierrenicolas.co. We confirm receipt within 72 hours and complete the deletion within 30 days, following a written procedure that covers our database, file storage and backups (encrypted daily backups are kept for 30 days and expire on their own).

We have never received a government or law-enforcement request for your data, and we have disclosed no personal data to public authorities. Should such a request arrive, we apply four rules. We review every request for legal validity before answering any part of it. We challenge requests we believe to be unlawful, overbroad, or improperly served. We disclose the strict minimum the request compels, never a broader export. And we document each request with our response, the legal basis relied on, and who was involved.

We notify the affected customer before disclosing anything, unless the law forbids it, in which case we notify as soon as that prohibition lifts.

If you are in the EU/EEA you have the right to access, rectify, export, and erase your personal data, and to object to or restrict certain processing. Write to pierre@pierrenicolas.co and we will respond within 30 days. You may also lodge a complaint with the CNIL (cnil.fr).

We will update this page when our practices change and revise the date at the top. Material changes are announced to account holders by email.