PilotAI

INTRODUCTION

Welcome to the Privacy Policy for PilotAI. This document serves as a legally binding agreement between you, the user, and PilotAI ("we," "us," or "our"). This Privacy Policy outlines how we collect, utilize, disclose, and safeguard your information when you use PilotAI's websites, applications, and related services (collectively, the "Services").

By accessing or using PilotAI, you expressly consent to the terms contained in this Privacy Policy. If you do not agree, please discontinue the use of PilotAI.

SCOPE AND APPLICABILITY

This Privacy Policy applies to personal information we collect through PilotAI, including our websites, mobile applications, AI chatbot, alert systems, and any other interactions you may have with our Services. It also applies to information shared with us by third parties when you authorize them to do so.

We primarily operate in the United States. If you use PilotAI's Services from outside the U.S., please note that your data may be transferred to and stored on servers within the U.S., and your information will be handled according to this Privacy Policy and U.S. law.

INFORMATION WE COLLECT

We may collect both "voluntarily provided" and "automatically collected" information:

A. Voluntarily Provided Information

Account Registration: When you create an account or contact us, we may request your name, email address, phone number, mailing address, and/or other relevant details.
Financial Information: If you choose to link external financial accounts (e.g., bank or brokerage accounts), you may provide us with access to account balances, transaction data, and related financial details.
User-Generated Content: Any text, images, videos, queries, or other materials that you submit through PilotAI, including interactions with our AI chatbot.
Customer Support Communications: Information you choose to share when contacting our support team.

B. Automatically Collected Information

Log Data: We may automatically collect IP addresses, browser types, device types, pages visited, date/time stamps, and time spent on each page.
Device Data: We may collect information about your device's operating system, geo-location (where applicable), unique device identifiers, and crash data.
Error & Diagnostic Information: If errors occur, we may collect data about the issue, your device specifications, and other related technical information.
Usage Analytics: We collect data about how you interact with PilotAI's features, including which alerts you view, chatbot interactions, dashboard usage patterns, and feature engagement metrics.

C. Payment Information

For paid subscriptions, PilotAI may collect and process payment-related information, including but not limited to:

Name and billing details;
Payment card information (processed securely via PCI-DSS compliant third-party payment processors — PilotAI does not store full credit card numbers on its servers); and
Transaction history and invoice details.

D. AI Interaction Data

When you interact with PilotAI's AI features, we collect:

Chatbot Conversations: The queries you submit to our AI chatbot and the responses generated. This data is used to improve the accuracy and relevance of AI outputs.
Alert Interaction Data: How you interact with AI-generated alerts, including views, clicks, and actions taken.
AI Model Training Data: Aggregated and de-identified interaction data may be used to improve our AI models. Individual user data is not used for model training without explicit consent.

COOKIES AND OTHER TRACKING TECHNOLOGIES

We use cookies, web beacons, and similar technologies to improve your experience, analyze website usage, and tailor content to user preferences.

A. Types of Cookies We Use

Essential Cookies: Necessary for the basic functionality of our Services, such as authentication and session management. These cannot be disabled.
Analytics Cookies: Help us understand how users interact with PilotAI so we can improve our Services.
Preference Cookies: Remember your settings and preferences for a better user experience.
Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

B. Cookie Management

You can manage your cookie preferences through our cookie consent banner displayed on first visit. You may also modify your browser settings to decline cookies. Note that disabling essential cookies may affect the functionality of PilotAI's Services.

Third-party providers may also employ cookies or similar technologies if you use third-party integrations (e.g., payment processors and analytics services). We encourage you to review their respective privacy notices.

HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

Providing Services: Creating and managing your account (including password recovery), delivering core features (such as AI-generated alerts and chatbot functionality), and processing transactions.
Customization: Personalizing your user experience and improving our applications and communication strategies.
Customer Support: Responding to inquiries, resolving technical issues, and addressing feedback.
Analytics & Research: Analyzing usage trends, diagnosing technical problems, and enhancing our Services based on aggregated insights.
AI Improvement: Using aggregated, de-identified data to improve the accuracy and performance of our AI models and algorithms. We do not use individually identifiable data for model training without your explicit consent.
Marketing & Communication: We may send promotional materials, updates, and offers via email, push notifications, calls, and SMS (which may be automated), subject to your marketing preferences and applicable law.
Legal Compliance & Enforcement: Complying with applicable laws, regulations, or other legal obligations, and enforcing our Terms of Service.
Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other potentially illegal activities.

HOW WE SHARE AND DISCLOSE INFORMATION

We do not sell your personal information (see Section 10 for your specific rights regarding the sale of personal information). We may share data under the following circumstances:

Within Our Corporate Group: We may share information with our subsidiaries, affiliates, or parent company for operational or administrative purposes.
Service Providers & Partners: We engage reputable third-party vendors (e.g., payment processors, hosting providers, analytics tools, AI infrastructure providers) to perform services on our behalf. These entities are contractually obligated to protect your data and process it only for the purposes we specify.
Legal or Regulatory Requirements: We may disclose information to courts, law enforcement, or regulatory agencies if required by law, subpoena, or other legal process.
Protecting Rights & Safety: We may disclose information if we believe it is necessary to protect our rights, property, safety, or that of our users or others.
With Your Consent: We will share information in any other way you direct or consent to at the time of collection or sharing.

If you choose to link external financial accounts, you authorize us to receive and share information with these third parties. We recommend reviewing their privacy policies, as their data practices may differ from ours.

DATA SECURITY

We maintain administrative, technical, and physical safeguards designed to protect your personal information against accidental, unlawful, or unauthorized access, use, alteration, or disclosure. These measures include, but are not limited to:

Encryption of sensitive data in transit and at rest (e.g., financial account information, payment data);
Access controls that limit employee or contractor access to personal information on a need-to-know basis;
Multi-factor authentication for administrative access to our systems;
Periodic security assessments, penetration testing, and ongoing monitoring of our systems; and
Secure data processing practices for AI model training and inference.

Although we strive to protect your information, no security method is 100% foolproof. If we become aware of a data breach that compromises your personal information, we will notify you and the relevant authorities as required by applicable law. Depending on the situation, we may notify you by email, posting a notice on our site, or other channels.

DATA RETENTION

We retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. Specifically:

Account Data: Retained while your account is active and for a reasonable period thereafter if needed for legal, regulatory, or legitimate business purposes.
Financial Data: Stored as long as your linked accounts are active or as necessary for transactional or compliance records.
Payment Data: Payment-related information is retained as needed to manage subscriptions, process payments, issue refunds, and comply with financial reporting requirements.
AI Interaction Data: Chatbot conversation logs and AI interaction data are retained for service improvement purposes.
Marketing & Analytics: Aggregated or anonymized data may be retained indefinitely for trend analysis and statistical purposes.

Once no longer needed, we will securely delete or anonymize your data in accordance with our retention policies. Paid subscribers may request deletion of payment data post-subscription cancellation, subject to legitimate business reasons such as security requirements or legal obligations.

YOUR RIGHTS & CHOICES

Depending on where you live and applicable laws, you may have the following rights regarding your personal information:

Access and Portability: Request details or a copy of the personal information we hold about you in a structured, commonly used, and machine-readable format.
Correction: Ask us to correct any inaccuracies or outdated information.
Deletion: Request deletion of your personal information, subject to certain legal exceptions.
Opt Out of Marketing: Withdraw your consent to receive marketing communications at any time by clicking the "unsubscribe" link in any email, adjusting your notification preferences, or contacting us.
Restrict Processing: Request that we limit the processing of your personal information under certain circumstances.
Nondiscrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at [email protected]. We may request additional information or take steps to verify your identity before completing your request. We will respond to verified requests within the timeframe required by applicable law (generally 45 days, with a possible extension of an additional 45 days for complex requests).

ADDITIONAL DISCLOSURES FOR CALIFORNIA RESIDENTS

This section applies to California residents and supplements the information contained in this Privacy Policy pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA").

A. Categories of Personal Information

In the preceding 12 months, we may have collected the following categories of personal information:

Identifiers (e.g., name, email address, IP address);
Financial information (e.g., linked account data, payment information);
Internet or other electronic network activity (e.g., browsing history, interaction with our Services);
Geolocation data;
Inferences drawn from the above categories (e.g., user preferences and behavior patterns); and
Sensitive personal information (e.g., financial account credentials when provided for account linking).

B. Your California Privacy Rights

As a California resident, you have the following rights:

Right to Know: You may request information about the categories and specific pieces of personal information collected, used, disclosed, or sold.
Right to Delete: You may request deletion of personal information we have collected, subject to legal exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information as those terms are defined under CCPA/CPRA. PilotAI does not sell personal information for monetary consideration. To the extent any data sharing for targeted advertising or analytics purposes may constitute a "sale" or "sharing" under CCPA/CPRA, you may opt out using the "Do Not Sell or Share My Personal Information" link available on our website.
Right to Limit Use of Sensitive Personal Information: You may direct us to limit our use and disclosure of your sensitive personal information to uses necessary to provide the Services.
Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of these rights.

You may submit requests by contacting us at [email protected] or by using the "Do Not Sell or Share My Personal Information" link on our website. Please include "California Privacy Rights Request" in your message and describe the specific request. You may also designate an authorized agent to make a request on your behalf, subject to verification.

C. California Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. To make such a request, please contact us at [email protected].

CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly take steps to delete that information. If you believe we have collected information from a child under 13, please contact us at [email protected].

DO NOT TRACK

Some web browsers offer a "Do Not Track" (DNT) setting or the Global Privacy Control (GPC) signal. At this time, PilotAI honors the Global Privacy Control signal as a valid opt-out of "sale" or "sharing" of personal information under CCPA/CPRA. We will continue to review evolving standards for DNT signals and may update our practices accordingly.

INTERNATIONAL DATA TRANSFERS

If you access or use our Services from outside the United States, your information may be transferred to and processed in the U.S. or other countries where we or our service providers maintain facilities. Those countries may not have data protection laws equivalent to those in your country of residence. We will take measures to ensure that your personal information is protected in accordance with this Privacy Policy and applicable law, including the use of standard contractual clauses or other approved transfer mechanisms where applicable.

DISCLOSURE OF YOUR PERSONAL DATA

A. Business Transfers

If we (or substantially all of our assets) are acquired by a third party, or in the unlikely event that we go out of business or enter bankruptcy, user information (including personal data) may be transferred or acquired by a third party as part of that transaction. Any acquiring party will be bound by the terms of this Privacy Policy or substantially similar terms regarding the continued use of your data. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

B. Law Enforcement

Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

C. Other Legal Requirements

We may disclose your personal data in good faith belief that such action is necessary to:

Comply with a legal obligation;
Protect and defend our rights or property;
Prevent or investigate possible wrongdoing in connection with the Services;
Protect the personal safety of our users or the public; or
Protect against legal liability.

AI DATA PROCESSING PRACTICES

PilotAI uses artificial intelligence and machine learning technologies as part of its Services. This section provides transparency about how your data is used in connection with AI:

A. How AI Uses Your Data

Service Delivery: Your portfolio data, preferences, and interaction history may be processed by AI algorithms to generate personalized alerts, signals, and chatbot responses.
Model Improvement: Aggregated and de-identified data from user interactions may be used to improve the accuracy and relevance of our AI models. We do not use individually identifiable data for model training without your explicit opt-in consent.
Automated Decision-Making: PilotAI's AI systems generate signals and alerts through automated processing. These outputs are informational only and do not constitute binding decisions or personalized advice. You retain full control over any actions you take based on AI outputs.

B. Your Rights Regarding AI Processing

You may request information about the logic involved in AI-generated outputs that affect you;
You may opt out of having your individual data used for AI model improvement by contacting us at [email protected];
You may request human review of AI-generated outputs if you believe they are inaccurate or have adversely affected you.

C. AI Data Safeguards

We implement the following safeguards for AI data processing:

Regular audits of AI models for bias and accuracy;
Data minimization — we use only the data necessary for the specific AI function;
Access controls limiting which personnel and systems can access training data; and
Separation of individual user data from aggregated training datasets.

COOKIE CONSENT AND PREFERENCE MANAGEMENT

When you first visit PilotAI, we will display a cookie consent banner that allows you to:

Accept all cookies;
Reject all non-essential cookies; or
Customize your preferences by category (essential, analytics, preference, marketing).

You may update your cookie preferences at any time by visiting our Cookie Preferences page, accessible from the footer of any page on our website. Your preferences will be stored and respected across sessions.

THIRD-PARTY ANALYTICS AND ADVERTISING

We may use third-party analytics services (such as Google Analytics) to help us understand how users interact with our Services. These services may use cookies and similar technologies to collect information about your use of PilotAI and other websites. We encourage you to review the privacy policies of these third parties.

To the extent we use targeted advertising services, you may opt out through the "Do Not Sell or Share My Personal Information" link on our website, through your cookie preferences, or through industry opt-out mechanisms such as the Digital Advertising Alliance (DAA) at www.aboutads.info/choices.

UPDATES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy periodically to reflect changes in our data practices, technological changes, or legal requirements. When we make material changes, we will:

Post the revised Privacy Policy on our website with a new "Last Updated" date;
Notify you via email or other prominent notice at least thirty (30) days before changes take effect (where legally required); and
Obtain your consent for material changes where required by applicable law.

Your continued use of our Services after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of our Services before the effective date.

MARKETING COMMUNICATIONS, TCPA COMPLIANCE, AND DO-NOT-CONTACT RIGHTS

A. Opt-In Consent for Marketing

PilotAI will only send you marketing and promotional communications if you have provided your express written consent. Marketing consent is collected separately from account registration and is entirely optional. You are not required to consent to marketing communications as a condition of purchasing any service or using the platform.

B. TCPA Compliance

In accordance with the Telephone Consumer Protection Act (47 U.S.C. § 227) and applicable FCC regulations, PilotAI will not place promotional calls, send promotional text messages, or use automatic telephone dialing systems or pre-recorded voice technology to contact you unless you have provided prior express written consent. Your consent, if given, may be revoked at any time.

C. Types of Communications

PilotAI distinguishes between two types of communications:

Marketing Communications (opt-in required): Promotional offers, product announcements, newsletters, market commentary, and other non-essential communications. These require your express opt-in consent and you may opt out at any time.
Transactional/Service Communications (no opt-in required): Account alerts, billing notifications, security notices, changes to Terms of Service or Privacy Policy, and other communications necessary for the operation of your account. You will receive these as long as you maintain an active account.

D. How to Opt Out

You may withdraw your consent to marketing communications at any time:

Reply STOP to any SMS/text message;
Click "unsubscribe" in any marketing email;
Adjust notification preferences in your account settings;
Email [email protected] with the subject "Do Not Contact"; or
Call (877) 766-2208 to be added to our internal do-not-contact list.

PilotAI will process opt-out requests within ten (10) business days and maintains an internal do-not-contact list in accordance with the TCPA and the FTC's Telemarketing Sales Rule (16 CFR Part 310). Opt-out preferences are retained for a minimum of five (5) years.

E. Third-Party Marketing

PilotAI does not share your phone number, email address, or other contact information with third parties for their independent marketing purposes without your separate, explicit consent.

CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:

PilotAI
Email: [email protected]
Privacy Requests: [email protected]

We are committed to resolving any privacy-related issues and appreciate the opportunity to address your concerns. We will respond to all inquiries within a reasonable timeframe.

THANK YOU FOR CHOOSING AND TRUSTING PILOTAI

By using our Services, you agree to the collection, use, and sharing of your information in accordance with this Privacy Policy. We value your privacy and will continue to make your privacy our priority.