Privacy Policy

Pillar ("we", "us", or "our") operates the marketing website at demo.data-zip.com and the Pillar data integration platform. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website or use our services.

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR). All data processing occurs on EU-hosted infrastructure.

1. Information we collect

Information you provide

When you request a demo, sign up for a trial, or contact us, we collect the information you submit — typically your name, work email, company name, and any message you send.

Information collected automatically

When you visit our website, our privacy-friendly analytics (Plausible) record anonymous, aggregated information: page views, referring site, country (from IP, not stored), and device type. We do not use cookies for analytics, and we do not track you across other sites.

Customer data (platform users)

If you use Pillar as a customer, we process the business data you connect to the platform (CRM, ERP, finance, marketing tools) strictly to deliver the service you have subscribed to. This data is encrypted in transit and at rest, stored on EU-hosted infrastructure, and never shared with third parties.

2. How we use information

• To respond to your demo requests and support questions
• To provision and operate your Pillar workspace
• To improve the website and our services through anonymous usage analytics
• To comply with legal obligations

3. Legal basis for processing (GDPR)

We rely on the following lawful bases:

• Contract: to deliver services you have subscribed to
• Legitimate interest: to operate and improve the website
• Consent: where required, and always revocable

4. Data sharing

We do not sell personal data. We share information only with infrastructure providers that are necessary to operate the service (e.g. EU-based hosting, email delivery), all bound by data processing agreements compliant with GDPR.

5. Data retention

We retain marketing inquiries for up to 24 months. Customer data is retained for the duration of your subscription and deleted within 30 days of account closure, except where law requires longer retention.

6. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion ("right to be forgotten")
• Request data portability
• Object to processing or withdraw consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@data-zip.com.

7. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted, logged, and audited. We maintain a formal security program aligned with SOC 2 requirements.

8. International transfers

Your data is stored and processed exclusively within the European Union. We do not transfer personal data outside the EU.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page and, where appropriate, via email.

10. Contact

Questions about this policy can be sent to privacy@data-zip.com.