Privacy Policy

We collect the following categories of information when you use BizPilot:

• Account information: your name, email address, business name, business type, and phone number when you sign up or complete onboarding.
• Customer messages: messages sent to your business via Instagram, Facebook, WhatsApp, SMS, or email that BizPilot processes on your behalf.
• Booking data: appointment details, customer contact information, and availability schedules you configure.
• Billing information: subscription plan and payment method details (processed by Stripe — we do not store raw card numbers).
• Usage data: pages visited, features used, and interactions with the BizPilot dashboard.
• Waitlist data: email address and business type submitted via our waitlist form.

BizPilot uses your information to:

• Provide and operate the AI customer messaging, booking management, and automated follow-up services.
• Process incoming messages through our AI to generate and send replies on your behalf.
• Manage appointment bookings and send confirmations and reminders to your customers.
• Trigger automated follow-up sequences after completed appointments.
• Process subscription payments and manage your billing through Stripe.
• Send transactional emails (account confirmations, support replies, trial reminders).
• Improve our AI models and service quality using aggregated, anonymised data.
• Comply with legal obligations and enforce our terms of service.

We do not sell your personal information or your customers' data to third parties.

BizPilot uses AI language models (via Google Gemini) to read, understand, and respond to customer messages on your behalf. By using BizPilot you authorise us to process message content through these models. Message content is used only to generate replies and booking actions — it is not used to train third-party models. AI-generated responses are sent under your business identity; you remain responsible for the accuracy of those replies.

We integrate with the following third-party services to deliver BizPilot:

• Stripe — payment processing and subscription billing. Stripe's privacy policy applies to all payment data: stripe.com/privacy.
• Meta (Facebook & Instagram) — receiving and sending DMs via the Messenger API. Your use of Meta integrations is subject to Meta's data policy: facebook.com/privacy/policy.
• WhatsApp Business API — sending and receiving WhatsApp messages on your behalf. Meta's WhatsApp Business Policy applies.
• Twilio — SMS message delivery. Twilio's privacy policy: twilio.com/en-us/legal/privacy.
• Supabase — secure database storage and authentication. Data is stored in encrypted, access-controlled databases.
• Google Gemini — AI language model used for message processing and automated responses.

We retain your data for as long as your account is active. Specifically:

• Account and business data: retained for the duration of your subscription plus 90 days after cancellation to allow account recovery.
• Message and conversation history: retained for 12 months from the date the message was received, then automatically deleted.
• Booking records: retained for 24 months to support business reporting and dispute resolution.
• Payment records: retained as required by applicable law (typically 7 years for financial records).

You may request earlier deletion of your data by contacting us at bizpilot@leapd.ai.

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: request deletion of your personal data (“right to be forgotten”).
• Portability: receive your data in a machine-readable format.
• Objection: object to processing of your data for direct marketing.
• Restriction: request that we limit how we process your data in certain circumstances.

To exercise any of these rights, email us at bizpilot@leapd.ai. We will respond within 30 days.

BizPilot uses essential session cookies required for authentication and to keep you signed in. We do not use advertising tracking cookies or third-party analytics cookies. You can disable cookies in your browser settings, but this will prevent you from signing in to the BizPilot dashboard.

We implement industry-standard security measures including encrypted data storage (AES-256), TLS in transit, and row-level security policies that ensure each business account can only access its own data. Access to production systems is restricted to authorised personnel only. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take reasonable steps to protect your information.

BizPilot is intended for use by business owners and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately at bizpilot@leapd.ai.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date below and, for material changes, notify you by email or by a prominent notice in the BizPilot dashboard. Continued use of BizPilot after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us at: bizpilot@leapd.ai
BizPilot · bizpilot@leapd.ai