Privacy Policy

1. Who we are

DataPilot Srl. is the controller for customer accounts, billing metadata, and telemetry. When you send documentation content, schema scans, or run metadata, we act as your processor under your instructions.

2. What we collect

We collect account details, workspace settings, documentation texts, query metadata, export records (CSV/XLSX), usage telemetry, device identifiers, IP addresses, and billing information processed via our payment service provider. Support requests and transcripts are also part of the data we retain.

3. How we use it

• Deliver authentication, scheduling, exports, downloads, and notifications (legal basis: contract performance).
• Protect the platform with logs, rate limits, and monitoring (legal basis: legitimate interest).
• Improve reliability and UX with aggregated analytics (legal basis: either legitimate interest or consent).
• Send essential service emails, including release notes and policy updates.
• Honor marketing preferences and never email without consent.

4. Sharing + processors

We only share data with processors under contracts: hosting/infrastructure, payments, email delivery, analytics, and optional AI model partners. A list of subprocessors is available in our Subprocessors page.

5. Transfers & retention

Transfers outside the EU/EEA rely on adequacy decisions or standard contractual clauses plus safeguards. Data remains while your account is active, then we delete or anonymize it in line with retention responsibilities.

6. Your rights

EU/EEA residents can request access, rectification, erasure, restriction, portability, or objection. Reach out to privacy@getdatapilot.com or through our Contact page.

7. Cookies

Necessary cookies power navigation and security. Optional cookies deliver analytics and personalization. Adjust your preferences via browser controls or the Cookie Policy.

8. AI features & managed services

Managed AI prompts and outputs are processed by our hosted services; we do not use them for model training. If you provide your own AI key the request goes directly to your chosen provider.

9. Security & payments

We apply TLS encryption, access controls, and monitoring across services. Payments are processed via Stripe and card numbers never reach our servers. DataPilot is meant for business users and not directed to children under 18.

10. Updates

We may update this policy with a new date and provide notice for material changes.