Legal

Privacy Policy

Last updated: 17 August 2026

Piloted is an independent software product operated by a sole founder based in India. This policy explains what information we collect, how it is processed, and the choices available to you.

1. Who we are

Piloted (“Piloted”, “we”, “us”) is operated by an individual software founder residing and operating from India. We act as the data controller for information processed through the Piloted application and website.

For any privacy question or request, contact us at privacy@copiloted.app. We aim to respond within thirty days.

2. Information we collect

  • Account information. Your name and email address when you create an account or sign in with Google.
  • Academic content. Syllabus files you upload, along with the courses, assignments, deadlines, tasks, notes, and study materials generated from them.
  • Product usage. Study sessions, task completions, and feature interactions used to generate your plans and progress insights.
  • Support and feedback. Messages you send us through the in-app feedback tool or by email.

We do not collect payment card numbers, CVV codes, or bank details at any point. See section 5.

3. How Piloted uses AI to process your syllabus

When you upload a syllabus, the document is transmitted over an encrypted connection to our servers and the text is sent to a third-party AI model provider for the sole purpose of extracting structured academic information: assignment names, due dates, exam dates, readings, and related course details.

  • AI processing is limited to producing your plan. Your syllabus content is never sold, published, or used for advertising.
  • Files and extracted text are transmitted using TLS encryption and stored in access controlled databases protected by row-level security, so your records are readable only by your authenticated account.
  • Our AI providers process your content under contractual terms that prohibit using it to train their general-purpose models.
  • AI extraction is automated and may be incomplete or inaccurate. You review every extracted item before it is saved, and section 8 of our Terms of Service explains your responsibility to verify official university deadlines.

4. Why we process your information

  • To provide the service you requested, including plans, reminders, and study tools.
  • To maintain your account, authenticate you, and keep your data secure.
  • To send transactional and weekly planning emails you have enabled.
  • To improve reliability and product quality using aggregated, non-identifying usage data.
  • To comply with legal, tax, and accounting obligations.

Where required by law, our legal bases are the performance of our contract with you, your consent, and our legitimate interest in operating and improving Piloted.

5. Payments and card data

We never see or store your credit card details. All international transactions are sold and processed by Paddle.com Market Ltd, which acts as our Merchant of Record and as the reseller of Piloted subscriptions.

Paddle collects and processes your payment method, billing address, and applicable tax information under its own privacy policy and PCI-DSS compliant infrastructure. Piloted receives only a subscription status, plan type, renewal or expiry date, and a masked transaction reference. Card numbers, CVV codes, and bank credentials never reach our servers.

6. Service providers

We share limited data with the vendors that make Piloted work:

  • Cloud hosting, database, authentication, and file storage providers.
  • AI model providers, for syllabus extraction and study-tool generation.
  • Paddle, as Merchant of Record for billing and tax.
  • Our transactional email provider, for account and weekly planning emails.

Each provider is bound to process data only on our instructions. We do not sell your personal information.

7. International transfers

Piloted is operated from India and our providers may store or process data in other countries, including the United States and the European Union. Where such transfers occur, they are covered by appropriate contractual safeguards with each provider.

8. Data retention

We retain your academic content for as long as your account remains active. On the free Semester Kickstart tier, an unsaved parse exists only in your browser session and is discarded when the session ends. You may delete individual courses, tasks, and study resources at any time from within the app.

If you request account deletion, we remove your personal data and academic content within thirty days, except records we must retain for tax or legal purposes.

9. Your rights

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023 and the GDPR where relevant, you may request access to, correction of, export of, or deletion of your personal data, and you may withdraw consent for optional emails at any time. Contact privacy@copiloted.app to exercise these rights.

10. Children

Piloted is intended for university and postgraduate students and is not directed at children under 16. We do not knowingly collect data from children under 16.

11. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in the app or by email, and the date at the top of this page will always reflect the current version.

Questions about this document? Write to support@copiloted.app.