Privacy Policy

Last updated: May 29, 2026

Piloto, Inc. (“Piloto,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Information We Collect

Information you provide

• Waitlist & account data: name, email address, and company name when you join our waitlist or create an account.
• Payment information: billing details processed securely by our third-party payment processor (Stripe). We do not store your full card number.
• Content you create: ad copy, campaign briefs, creative assets, and scheduling preferences you provide within the product.

Information received from Meta Platform

When you connect your Meta (Facebook/Instagram) account to Piloto, we receive data from Meta's APIs on your behalf, including:

• Ad account information: ad account IDs, campaign names, ad set configurations, and ad creative data.
• Performance data: impressions, reach, clicks, conversions, spend, and other campaign metrics.
• Page and profile data: Page name, Page ID, profile information associated with your connected accounts.

This data (“Platform Data”) is processed solely to provide you with campaign management services. We do not sell, license, or share Platform Data with third parties except as described in this policy and in compliance with Meta's Platform Terms.

Information collected automatically

• Usage data: pages visited, features used, time spent, and interactions within the product.
• Device & browser info: IP address, browser type, operating system, and device identifiers.
• Cookies: we use essential cookies for authentication and optional analytics cookies (you can opt out).

2. How We Use Your Information

• Provide, maintain, and improve our services
• Create, manage, and publish advertising campaigns to Meta on your behalf
• Display campaign performance data and provide optimization recommendations
• Process transactions and send related information
• Send you waitlist updates, product announcements, and support messages
• Analyze usage to improve product experience
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

We process Meta Platform Data only for the purposes described in this policy and only as permitted by Meta's Platform Terms. We do not use Platform Data to build user profiles for advertising, perform surveillance, or make eligibility determinations.

3. Sharing Your Information

We do not sell your personal information. We may share data with:

• Service providers: hosting (Vercel), database (Supabase), payment processing (Stripe), and analytics tools that help us operate the service. Service providers are contractually prohibited from using your data for their own purposes.
• Meta Platforms: when you publish campaigns, we transmit campaign data to Meta's advertising APIs on your behalf. This is done solely at your direction.
• Legal requirements: if required by law, regulation, or valid legal process.

4. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide services. Meta Platform Data is retained only as long as necessary for the purposes described in this policy.

We will delete your data in the following circumstances:

• When you request deletion (see Section 6 below)
• When you disconnect your Meta account from Piloto
• When your account is terminated
• When retention is no longer necessary for a legitimate business purpose
• When required by applicable law or regulation
• When requested by Meta for the protection of users

Waitlist data is retained until you unsubscribe or we no longer need it.

5. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. We maintain administrative, physical, and technical safeguards designed to protect against unauthorized access, destruction, loss, alteration, or disclosure of your data. No method of transmission over the internet is 100% secure, but we strive to protect your data.

6. Your Rights & Data Deletion

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

How to request deletion of your data

You can request deletion of your data in any of the following ways:

• In-app: Go to Settings → Delete Account. This will delete your account and all associated data, including any Meta Platform Data we hold.
• Email: Send a request to privacy@usepiloto.com. We will process your request within 30 days.
• Via Meta: If you remove Piloto from your Facebook Apps and Websites settings and request data deletion, we will receive a callback from Meta and delete all Platform Data associated with your account.

Upon receiving a deletion request, we will delete all your data from our systems and confirm completion. If we are required to retain certain data by law, we will inform you of the specific data retained and the legal basis.

7. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

8. Children's Privacy

Piloto is not directed to children under 16. We do not knowingly collect personal information from children under 16.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: privacy@usepiloto.com