Privacy Policy

Overview

BrandPilot ("BrandPilot", "we", "us") provides an AI-powered marketing platform for local service businesses. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. BrandPilot is the data controller for information you provide to us. Payment-card details are handled by our payment processor, Stripe (see "Payments and Stripe" below).

Information you provide

• Account and profile: name, email address, password credentials, and account preferences.
• Business Brain™ information: business name, services, service areas, brand voice, FAQs, and other business context you save to power AI generation.
• Uploaded photos: before-and-after photos and logos you upload for campaigns.
• AI-generated content: the posts, weekly plans, and campaigns generated on your behalf, along with prompts and inputs you provide.
• Support and feedback: messages, screenshots, and diagnostic details you share with us.

Information we collect automatically

• Usage and device data: pages viewed, features used, IP address, device and browser information, approximate location derived from IP, and diagnostic logs.
• Cookies and similar technologies: essential cookies for authentication and preferences.

Payments and Stripe

When you purchase a BrandPilot subscription, our payment processor Stripe, Inc. handles your payment on our behalf. Payment-card details and certain billing information are collected and processed directly by Stripe—not by BrandPilot. Depending on the transaction and applicable requirements, Stripe may also collect a billing address, tax information, or other payment-related information. BrandPilot receives from Stripe a limited set of data needed to operate your subscription, such as your Stripe customer ID, subscription ID, plan, status, billing dates, and transaction metadata. See Stripe's privacy policy (opens in a new tab) for how Stripe handles your data.

How we use information

• Operate the service and generate marketing content on your behalf.
• Personalize outputs using your Business Brain™.
• Provide customer support and respond to feedback.
• Detect and prevent fraud, abuse, and security incidents.
• Send service and account communications (e.g. billing, security).
• Improve BrandPilot and develop new features.
• Comply with legal obligations.

Legal bases (EEA/UK)

Where GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the service you purchase), legitimate interests (to secure, improve, and support the service), consent (where required), and legal obligation.

Sharing

We do not sell your personal information. We share data only with:

• Stripe, our payment processor for subscriptions, billing, and invoicing.
• AI providers: third-party AI service providers that process prompts and business context to generate requested marketing content, subject to applicable contractual and data-protection requirements.
• Infrastructure providers for hosting, database, storage, email delivery, and analytics.
• Professional advisers (legal, accounting) and authorities where required by law.

Data retention

We retain account and business data for as long as your account is active. After account deletion we remove or anonymize data within a reasonable period, except where longer retention is required for legal, tax, accounting, or fraud-prevention reasons (Stripe may retain payment records independently as required by financial regulations).

Data security

We use industry-standard technical and organizational measures, including encryption in transit and access controls. No online service is 100% secure; please use a strong, unique password and enable available account protections.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent. To exercise these rights, email hello@gobrandpilot.com.

EEA / UK (GDPR)

You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data-protection authority.

United States (California and other states)

California and certain other US residents may have rights to know what personal information we collect, request deletion or correction, and opt out of "sale" or "sharing" of personal information. BrandPilot does not sell personal information.

Children's privacy

BrandPilot is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us.

International transfers

BrandPilot and its service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, communicated to you.

Contact

Questions? Email hello@gobrandpilot.com.