Privacy Policy

1. Scope

This Privacy Policy explains how Pivot collects, uses, discloses, and safeguards information when you use our A/B testing and experimentation platform, website, SDK, and related services.

If you use Pivot on behalf of a company, that company is responsible for ensuring lawful use of the platform in your region.

2. Information We Collect

The data we collect depends on how you use Pivot. This can include account information, product usage data, and technical telemetry needed to run experiments reliably.

• Account and business information (name, email, role, company, billing contact details).
• Configuration and experiment data (hypotheses, variants, targeting rules, metrics definitions).
• Technical and device data (IP address, browser type, operating system, language, approximate location, and timestamps).
• Event and interaction data sent via our JavaScript snippet or integrations (page views, custom events, conversion events, assignment events).
• Support and communication data when you contact us.

3. How We Use Information

• Provide and maintain the Pivot platform.
• Assign users to experiment variants and measure experiment outcomes.
• Generate analytics dashboards, reporting, and experiment insights.
• Secure the platform, prevent abuse, and troubleshoot incidents.
• Improve product features, performance, and reliability.
• Comply with legal obligations and enforce our terms.

4. Cookies and Similar Technologies

Pivot and customer implementations may use cookies, local storage, or similar identifiers to support consistent experiment assignment, frequency controls, and measurement.

Customers are responsible for implementing cookie notices and consent flows where required by law.

5. Data Controller and Processor Roles

For customer end-user event data processed through the Pivot platform, customers are generally the data controllers and Pivot acts as a data processor/service provider.

For account administration, billing, and direct interactions with Pivot, Pivot is generally the data controller.

6. Data Sharing and Subprocessors

We do not sell personal information. We may share data with service providers that help us operate the business, such as infrastructure, analytics, support, and payment providers, under contractual safeguards.

We may also disclose information where required by law, regulation, legal process, or to protect rights, safety, and platform security.

7. Data Retention

We retain data only for as long as needed to provide services, fulfill contractual obligations, resolve disputes, and meet legal requirements. Retention periods may vary by data type and customer plan.

Customers can request deletion or export of their data, subject to legal and operational constraints.

8. Security

We use reasonable technical and organizational measures to protect data, including access controls, encryption in transit, and monitoring for abuse. No system can be guaranteed 100% secure.

9. International Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or restrict use of personal data, and to object to or request portability of your data.

To exercise rights, contact us at privacy@runpivot.com. We may need to verify your identity before processing requests.

11. Children's Privacy

Pivot is not directed to children and is not intended for use by individuals under the age required by applicable law to consent to data processing.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date.

13. Contact

If you have questions about this policy or our privacy practices, contact us at privacy@runpivot.com.

Effective date: February 10, 2026.