Privacy Policy

Last updated: 2026-08-12 · Effective: 2026-05-18

Who we are

Piper Tech LLC ("we", "us") is a Pennsylvania limited liability company. We operate this marketing website at piper.tech to introduce gym owners to our Movement Pod product, and we operate Movement Pod kiosks in partner gyms. Contact: info@piper.tech · (724) 209-4199.

What we collect

  • Information you submit to forms (name, email, phone, gym name, message, ICP answers).
  • Mobile numbers entered on the Movement Pod kiosk when a member optionally requests a one-time SMS verification code (Meridian OTP).
  • Cookies for site functionality and, with your consent, analytics and marketing measurement.
  • Standard server logs (IP address, user agent, referrer, timestamp).
  • UTM parameters captured from inbound links.

How we use it

  • Respond to inquiries and schedule calls.
  • Send SMS or email updates if you opt in on this website (Lead Gen program).
  • Send one-time verification SMS codes when a gym member opts in on the Movement Pod kiosk (Meridian OTP / 2FA program).
  • Measure marketing performance and improve the site.
  • Defend our legal rights and comply with applicable law.

SMS / mobile opt-in

No mobile information will be shared with third parties or affiliates for their marketing or promotional purposes. We use your number only to send the messages you opted into (via Twilio as our SMS delivery sub-processor) and to honor STOP / HELP requests. Message and data rates may apply.

We operate two separate SMS programs:

  • Website Lead Gen — opt-in via forms on piper.tech; sender (724) 409-3815; up to 4 messages per month (frequency varies).
  • Meridian kiosk OTP (2FA) — opt-in only on the in-gym Movement Pod kiosk after an assessment; sender (724) 409-3816; typically 1 verification SMS per request (limited retries; not marketing). Public CTA evidence: /legal/meridian-otp-sms-consent.

See our SMS Terms for program details, STOP / HELP, and carriers.

Blueprint take-home page (/claim)

After an assessment, the Movement Pod kiosk can show a QR code that opens the Blueprint take-home page on your phone. The summary travels inside the link itself as a short-lived, signed snapshot — we do not look up your record from a database to render the page.

  • What the link carries: overall score, score band, whether the score is provisional, up to three focus areas with their descriptions, the recommended program, the gym's display name, and an assessment identifier with an expiry timestamp.
  • What it never carries: video or images, skeleton or joint coordinates, and personal details such as your name, email, phone number, or date of birth.

The page renders only what is inside the signed link, and the image you save is drawn on your own device. We do not store the snapshot on this website, and expired or altered links are rejected. Full assessment data stays on the gym's local Pod. The Blueprint uses coaching language and is not a medical report.

Invite-only checkout (/buy)

After a product walkthrough and a signed Pod Purchase and Service Agreement, eligible buyers may complete an invite-only online order at /buy using Stripe Checkout. Stripe is our payment processor and the system of record for payment status, invoices, and refunds related to that checkout. Completing Stripe Checkout pays the signed agreement; it does not replace it.

  • Collected via Stripe Checkout: business identity (for example legal / trade name), billing and shipping address, tax IDs when requested for tax calculation, and payment method details. Payment card and bank data are handled by Stripe — we do not store full payment card numbers on this website.
  • Invite codes: single-use invite codes are stored hashed in Upstash Redis. Plaintext codes are not retained in Redis after mint.
  • Order identifiers: Stripe Checkout Session / order IDs may be stored in Redis (for example to reserve or consume an invite and for webhook idempotency). Stripe remains the payment source of truth.

We use this information to fulfill Pod orders, calculate applicable tax, ship hardware, and operate the invite-only checkout flow. See also our Terms.

Sub-processors

We share information only with the following sub-processors to operate this site and deliver opted-in SMS:

ProcessorPurpose
VercelWeb hosting + Edge middleware + serverless functions
ResendTransactional email from no-reply@send.piper.tech
Google WorkspaceBusiness email at info@piper.tech
Google Tag Manager + Google Analytics 4Site analytics (consent-gated)
PostHogProduct analytics, A/B testing, session recordings (consent-gated)
SentryError monitoring (no PII transmitted; emails masked)
Upstash RedisLead intake queue, dedup hashes, hashed checkout invite codes, and Stripe Checkout Session / order IDs
StripeInvite-only payment processing for Movement Pod checkout (/buy)
HubSpotCRM contact storage and lead management
CalendlyMeeting scheduling
TwilioSMS delivery sub-processor: website Lead Gen ((724) 409-3815) and Meridian kiosk OTP 2FA ((724) 409-3816)
Meta / LinkedIn Conversions APIsServer-side ad attribution (consent-gated)

Cookies

Essential cookies run by default. Non-essential cookies (analytics, marketing) load only after you accept via the cookie banner. We honor the Sec-GPC: 1 Global Privacy Control header as an opt-out request.

Session replay (PostHog)

When you accept Analytics cookies, we may enable PostHog session replay to understand how visitors use this site. Form and field inputs are masked (maskAllInputs: true). You can decline analytics in cookie preferences at any time; replay does not run without analytics consent.

Session replay is disclosed on our Accessibility statement as a known third-party limitation. It is not required to contact us or request product information.

Your rights (GDPR & CCPA/CPRA)

You may request access, correction, deletion, portability, or restriction of your personal information at any time by emailing info@piper.tech. We respond within 30 days.

Do Not Sell or Share My Personal Information

We do not sell personal information. California residents may opt out of any sharing for cross-context behavioral advertising:

Data retention

Form submissions: 24 months. SMS consent logs: 24 months per TCPA recommendation. Server logs: 90 days. Anonymized analytics: 14 months (GA4 default). Meridian assessment data remains on the gym's local Pod (not uploaded to this marketing site).

Children

This site is not directed to children under 13. We do not knowingly collect personal information from children.

Changes

Material changes will be posted here with an updated "Last updated" date.