Privacy Policy

Pierce (“Pierce”, “we”, “us”) is an AI growth marketer that operates inside Slack and helps businesses manage their paid advertising. The service is operated by PN CORP, a French simplified joint-stock company (SASU), VAT FR37104333273, registered in France.

Contact for anything in this policy: pierre@pierrenicolas.co.

Workspace data. When you install Pierce into your Slack workspace we receive the workspace and channel identifiers needed to post and to record who approved each action. We do not read unrelated conversations.

Advertising platform data. When you connect an ad account (Meta, Google Ads, LinkedIn Ads), we access, with your explicit consent through each platform’s official API: account metadata, campaigns, ad sets and ads, creatives, and performance metrics (impressions, clicks, spend, conversions). We request read access by default; write access is used only to execute changes you have approved.

OAuth tokens. Connecting a platform stores an access token scoped to that connection. Tokens are encrypted at rest with AES-256-GCM, one isolated record per client workspace and platform.

CRM and attribution data. If you connect a CRM (for example HubSpot or Attio) or install/analytics source, we read company, contact, deal, and event records to compute attribution and pipeline reporting for the workspace that owns the connection.

Usage data. Standard server logs (IP address, browser, requests) used for security and debugging.

We use the data above to operate the product: read your accounts, compute optimization proposals, post digests and alerts in Slack, and, where you click Approve, apply the advertising change you signed off on. We do not sell data. We do not use one customer’s data for another customer. We do not use advertising data for any purpose other than providing the service to the workspace that owns it.

Campaign performance data may be processed by our AI provider (Anthropic) to generate analysis and proposals. This data is not used to train models shared across customers.

Meta. Our use of data received from Meta’s APIs complies with the Meta Platform Terms and Developer Policies. We only request the permissions needed to provide the features you use.

Google. Pierce’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

LinkedIn. Our use of data received from LinkedIn’s Marketing APIs complies with the LinkedIn API Terms of Use. Advertising data is displayed only to the workspace that owns the connection and is never resold.

Data is hosted in the European Union: application hosting on Vercel, PostgreSQL database on Neon (Frankfurt, Germany), and processing infrastructure on OVHcloud (Gravelines, France). All data is encrypted in transit (TLS) and at rest. OAuth tokens are additionally encrypted at the application layer with AES-256-GCM.

Subprocessors: Vercel (hosting), Neon (database), OVHcloud (compute), Slack (messaging surface), Anthropic (AI processing). We never route your platform connections or tokens through integration brokers or other third parties.

We keep data for as long as your account is active. Disconnecting a platform deletes its stored token immediately. You can request deletion of synced advertising data or of your entire account at any time by emailing pierre@pierrenicolas.co. Deletion requests are honored within 30 days.

If you are in the EU/EEA you have the right to access, rectify, export, and erase your personal data, and to object to or restrict certain processing. Write to pierre@pierrenicolas.co and we will respond within 30 days. You may also lodge a complaint with the CNIL (cnil.fr).

We will update this page when our practices change and revise the date at the top. Material changes are announced to account holders by email.