PII Masker & CSV Checker
Two tools for the CSV files going into and out of Pipedrive. Nothing to configure, no account to connect, and your file never leaves the browser tab.
What they do
Mask PII in a CSV
Replaces the personal data in an export with stand-ins that keep the file usable. Every real value maps to one consistent stand-in, so the columns that joined two files still join — use the same run key across a set of exports and a masked People file still matches a masked Deals file.
Shapes stay valid wherever validity is checkable: masked payment cards satisfy Luhn,
masked IBANs carry correct check digits, masked phone numbers keep their country code and
use the reserved 555 exchange, and masked email addresses use the reserved
example.com domain so they can never reach an inbox.
Check a CSV for import
Checks a file against Pipedrive's documented import rules before the import runs rather than after it half-finishes: the 50 MB and 50,000-row ceilings, the mandatory field for each item type, currency codes rather than symbols, and ID fields that must be whole numbers.
Findings are separated into what will fail, what might fail, and what to check in your account first — because which fields your account marks mandatory is not something a CSV can see, and claiming to know would cost you a failed import.
How to use them
Open either tool from the actions menu (⋮) on any People, Deals or Organizations list view, or from Tools and apps → Marketplace apps. Drop in a CSV and take the result. There is nothing to set up.
Limits worth knowing
| Files up to 10 MB | Everything runs in the browser tab, so the ceiling is your tab's memory rather than a server's. A 10 MB export is roughly 76,000 rows. |
|---|---|
| Names in prose are not masked | Email addresses, phone numbers, cards, IBANs and IP addresses are found in free text because they have recognisable shapes. Names largely are not — the column awareness that stops a company name being masked as a person is exactly what makes a name inside a note invisible. |
| Passports and dates of birth are opt-in | Both are shape-only patterns that also match SKUs, order references and ordinary dates. On by default they would silently rewrite real data, so you switch them on deliberately. |
| The checker reports, it does not fix | It will not invent values or repair misaligned rows. Where Pipedrive documents no rule, there is no check. |
What happens to your data
Your file is read inside the browser tab and never leaves it. There is no upload. The app asks Pipedrive for basic information only — the authorised user's settings and the account's currency list — so it cannot read your deals, people, organizations, activities or mail, because it never asked to.
The one request either page makes is to this origin, carrying only the signed token Pipedrive issues to prove the frame is genuine. Your CSV is never part of it.
The only thing kept on our side is the refresh token Pipedrive issues at install, held so that uninstalling can revoke it. It is deleted when you uninstall.
Why the re-identification key is a separate download
The masker can give you a key mapping every stand-in back to the real value, so you can undo the masking later. It is a separate download, named differently, and it is never inside the masked file — a masked export with its key attached is not masked, it is the original with an extra step.
Uninstalling
Remove the app from Tools and apps → Marketplace apps. Pipedrive tells us, we revoke the token and delete the record. Nothing else was ever stored, so nothing else is left behind.