Privacy Policy

PathPilot ("we," "our," or "us") is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, store, and disclose information when you use our AI agent platform across cloud, private cloud, and on-premise deployments.

By using our Services, you agree to the practices described below.

1. Information We Collect

1.1 Information You Provide Directly

• Name, email address, company details, and login credentials.
• Configuration data and business rules used to customize AI agents.
• Information submitted in support requests or onboarding forms.
• Any data you upload or send while using the Services.

1.2 Customer Data Processed by AI Agents

"Customer Data" refers to any data you provide, store, or process through PathPilot, including user messages, internal notes or CRM data, financial or account-related information, and documents or workflow payloads.

Customer owns all Customer Data.

PathPilot does not use Customer Data to train machine learning models unless explicitly approved in writing.

1.3 Metadata We Collect Automatically

To ensure system performance, reliability, and debugging, we collect operational metadata such as timestamps, execution metrics, tool usage, system events, error logs, and API request metadata.

Metadata does not include Customer Data or PII content.

1.4 Information from Third-Party Integrations

If you integrate third-party services (for example CRM, ticketing, or LLM providers), we may process identifiers, routing information, and integration metadata only as needed to provide the Services.

2. How We Use Information

• Provide, maintain, and improve Services.
• Run AI agents, debug issues, and monitor performance.
• Send security notices, account updates, and support communications.
• Detect unauthorized access and enforce product policies.
• Comply with applicable laws and regulations.

3. How We Handle and Retain Customer Data

3.1 Cloud Deployment (PathPilot-Hosted)

• Customer Data is retained for a maximum of 90 days.
• After 90 days, Customer Data is automatically deleted unless required for security, legal, or contractual reasons.
• PathPilot may access Customer Data strictly for debugging, support, or incident resolution.
• Customers are responsible for removing or anonymizing PII before sending data to PathPilot.

3.2 Private Cloud / VPC Deployment

• Customer Data is stored in customer infrastructure.
• Any temporary support access is customer-controlled.
• Customers define retention policies.

3.3 On-Premise Deployment

• Customer Data remains in the customer environment.
• PathPilot may request temporary support access.
• Customers choose retention periods and PII policies.

4. How We Share Information

We do not sell Customer Data or Metadata.

• With trusted service providers/subprocessors for hosting, monitoring, logging, inference, and notifications.
• When required by law, regulation, subpoena, or government request.
• In business transactions such as merger or acquisition, under confidentiality protections.

5. Your Responsibilities Regarding PII

PathPilot does not intend to store or retain personal identifiable information (PII).

• Customers are responsible for removing or anonymizing PII before sending data to PathPilot cloud agents.
• If PII is included, it is treated as Customer Data and subject to retention and deletion terms.

6. Data Security

We implement industry-standard safeguards, including encryption at rest and in transit, access controls, firewalls, secure SDLC practices, and audit logging/monitoring.

7. Data Retention and Deletion

• Cloud Customer Data is retained no longer than 90 days.
• Metadata is retained according to internal operational policies.
• For on-prem and VPC deployments, retention is controlled by the customer.
• You may request deletion of account-level data at any time.

8. Children's Privacy

PathPilot is not intended for children under 13 and we do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your data, including metadata, may be processed in the United States. By using the Services, you consent to such transfers.

10. Changes to This Privacy Policy

We may update this policy periodically. Material changes may be communicated by email or in-product notice. Continued use of the Services constitutes acceptance of updates.

11. Contact

For questions or concerns: founders@getpathpilot.com