Privacy Policy

1. Information We Collect

We collect information you provide directly and information collected automatically when you use our service.

Category	Data Collected	When
Account Info	Name, email address, password	Account creation
Business Info	Business name, trade, city, state, phone, address, photos	Site generation
Payment Info	Billing name, last 4 digits, billing address (Stripe handles full card data)	Subscription checkout
Usage Data	Pages visited, features used, time on site, browser type, device type	Automatically
Communications	Messages you send us via email or contact forms	When you contact us

We do not collect Social Security numbers, government ID numbers, or sensitive financial credentials. Full payment card numbers are processed directly by Stripe and are never stored on our servers.

2. How We Use Your Information

We use the information we collect to:

Generate and host your contractor website using AI
Process payments and manage your subscription
Send transactional emails (receipts, site-ready notifications, account alerts)
Improve and personalize our AI generation models
Provide customer support and respond to inquiries
Detect, prevent, and address fraud, abuse, and security issues
Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data to serve third-party advertisements.

3. How We Share Your Information

We share your information only in these limited circumstances:

Service Providers: Trusted vendors who help us operate the service (see Section 4). They are bound by confidentiality agreements and may only use your data to provide services to us.
Legal Requirements: When required by law, court order, or government authority.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate privacy protections in place.
With Your Consent: Any other sharing with your explicit permission.

4. Third-Party Services

LocalPilot AI integrates with the following third-party services to deliver our product:

Service	Purpose	Data Shared
Anthropic (Claude AI)	AI website and content generation	Business name, trade, city, description
Supabase	Database storage and file hosting	Business info, generated HTML, photos
Stripe	Payment processing	Email, billing info
Netlify	Website hosting and delivery	Site files, usage logs
Google Maps	Location maps on generated contractor sites	Business address (publicly visible)

Each provider has its own privacy policy. We encourage you to review them: Anthropic · Supabase · Stripe.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

Account data: Retained until you request deletion or your account is closed.
Generated websites and photos: Retained while your subscription is active. Deleted within 30 days of account closure or upon written request.
Payment records: Retained for 7 years as required by tax and accounting regulations.
Usage logs: Retained for up to 12 months for security and analytics purposes.

6. Security

We implement industry-standard security measures to protect your information, including:

TLS/HTTPS encryption for all data in transit
Encrypted storage for sensitive data at rest
Access controls limiting data access to authorized personnel only
API keys and credentials stored as encrypted environment variables, never in code

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you suspect a security breach, please contact us immediately at Ossotan.consulting@gmail.com.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data ("right to be forgotten").
Portability: Request your data in a portable, machine-readable format.
Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email we send.
California residents (CCPA): You have the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at Ossotan.consulting@gmail.com. We will respond within 30 days.

8. Cookies

We use a minimal set of cookies and similar technologies:

Essential cookies: Required for the service to function (authentication sessions, security tokens). Cannot be disabled.
Analytics: We may use anonymized analytics to understand how users interact with our service. No personally identifiable information is included.

We do not use advertising cookies or cross-site tracking cookies. You can control cookies through your browser settings.

9. Children's Privacy

LocalPilot AI is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and update the "Last Updated" date at the top of this page. Your continued use of LocalPilot AI after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Ossotan Consulting — LocalPilot AI
Email: Ossotan.consulting@gmail.com
Website: localpilot.pro

Table of Contents