How to disconnect Pipedrive from SourceLoop

This article covers the Pipedrive disconnect flow end-to-end: what stops immediately, what data we delete, what we retain for 30 days, and how to request full data removal. It exists so you (and your data-protection officer, if you have one) can answer every reasonable question about SourceLoop’s handling of Pipedrive-sourced data after disconnect.

Before you start

Set expectations:

• Disconnecting on SourceLoop’s side revokes OAuth and stops sync.
• Uninstalling on Pipedrive’s side removes SourceLoop from the company’s Marketplace apps list (recommended for clean cleanup).
• Neither action deletes data from Pipedrive itself. SourceLoop has never had delete permissions on Persons, Organizations, or Deals. Disconnect doesn’t trigger any cleanup on Pipedrive’s end.
• Existing SourceLoop data stays in your workspace unless you explicitly request deletion under GDPR.

Step 1: Disconnect on SourceLoop’s side

1. Sign in to SourceLoop.
2. Open Setup -> CRM -> Pipedrive.
3. On the Pipedrive card, click the three-dot menu (top-right) and select Disconnect.
4. Confirm the disconnect dialog.

The moment you confirm:

• SourceLoop revokes the OAuth access and refresh tokens stored on our side.
• SourceLoop stops scheduling sync jobs for this connection.
• The Pipedrive card on the CRM tab flips to Disconnected.
• The cached custom field metadata and pipeline schema are cleared.

No additional Pipedrive API calls are made by SourceLoop after this point.

Step 2: Uninstall SourceLoop on Pipedrive’s side (recommended)

This step is optional but recommended for completeness:

• Creates a record in Pipedrive’s audit log
• Prevents any cached OAuth tokens from being reused
• Is the cleanest end-state for SOC2 / GDPR records

1. Sign in to Pipedrive as a Company Admin.
2. Open Settings (your initials, top-right) -> Marketplace apps.
3. Find SourceLoop in the Installed apps list.
4. Click Uninstall.
5. Confirm.

Pipedrive invalidates the OAuth tokens issued to SourceLoop. From this point on, even cached tokens are unusable.

Step 3: Decide what to do with the SourceLoop custom fields

During normal operation, SourceLoop auto-created these custom fields on the Person object (and Organization, Deal):

• sourceloop_first_source, sourceloop_first_medium, sourceloop_first_campaign, sourceloop_first_content, sourceloop_first_term
• sourceloop_first_landing_page, sourceloop_first_channel
• sourceloop_latest_source, sourceloop_latest_medium, sourceloop_latest_campaign, sourceloop_latest_content, sourceloop_latest_term
• sourceloop_latest_landing_page, sourceloop_latest_channel
• sourceloop_id (internal mapping ID)

After disconnect, these fields stay in your Pipedrive company with their last-synced values. SourceLoop does not, and cannot, delete custom fields automatically.

Options:

• Leave them (recommended). They don’t affect Pipedrive behavior. If you reconnect, SourceLoop picks them up automatically without recreating.
• Delete them manually. In Pipedrive, go to Settings -> Company settings -> Data fields -> Person (and Organization / Deal), filter for sourceloop_*, and delete each. Warning: this also deletes the data stored on every Person. Once deleted, the historical attribution values are gone, even if you reconnect later.

What SourceLoop retains after disconnect

Deleted at the moment of disconnect

• Pipedrive OAuth access token (encrypted at rest)
• Pipedrive OAuth refresh token (encrypted at rest)
• Company-specific API domain cache
• Scheduled sync jobs for the connection
• Cached field and pipeline metadata

Retained for 30 days, then permanently deleted

• The connection record (company domain, last-sync cursor, sync-in-progress flag)
• Field mapping rules you configured
• Label / lead status mapping rules you configured
• The most recent 30 days of sync logs

The 30-day window covers accidental disconnects, reconnect within that window and your mappings are preserved. After 30 days, the connection record and all associated configuration are purged.

Retained indefinitely (until you request deletion)

• Persons, Organizations, and Deals ingested from Pipedrive inbound sync. Once synced, these records are part of your SourceLoop workspace data and follow your workspace’s data policy.
• Conversion records, journeys, attribution. SourceLoop-owned records that reference the Pipedrive Person via email/external ID.
• Aggregated and anonymized analytics.

These retained records can be deleted on request, see below.

GDPR / full data removal

To request complete removal of all data we ever ingested from your Pipedrive company, including Persons, Organizations, Deals, pipelines, sync logs, and derived analytics:

1. Email [email protected] with the subject “GDPR data deletion request” and your Pipedrive company domain (e.g., acme.pipedrive.com).
2. Confirm your identity (authenticated SourceLoop account email or verified workspace owner).
3. We acknowledge within 2 business days.
4. We complete deletion within 30 days and confirm in writing.

We delete:

• The Pipedrive connection record (if not auto-purged)
• All Person, Organization, and Deal records ingested from the company
• All conversion records and journeys tied to those records
• All sync logs, error logs, configuration history
• All custom analytics derived from Pipedrive data

This is irreversible. After completion, reconnecting Pipedrive starts from a blank state.

Reconnecting later

If you change your mind within the 30-day grace window:

1. Sign in to SourceLoop.
2. Open Setup -> CRM -> Pipedrive.
3. Click Connect on the Pipedrive card.
4. Run the OAuth flow with Pipedrive.
5. SourceLoop resumes syncing from the last cursor, with your field and label mappings preserved.

If you reconnect after 30 days, the connection record is fresh. Mappings need to be reconfigured. Existing SourceLoop contacts get re-stitched to Pipedrive Persons on the next sync by email match.

When to email support

For anything outside the standard flow:

• “I disconnected by mistake and want a full reset” → email [email protected]
• “Our compliance team needs a written data-processing agreement (DPA)” → we provide a signed DPA on request
• “An auditor needs evidence of what was retained vs deleted on our connection” → we provide a written audit trail keyed to your Pipedrive domain
• “Pipedrive Marketplace still shows SourceLoop installed even though I disconnected” → complete Step 2 above; email if it still shows

Email [email protected] for any of the above. We respond within one business day.