Privacy Policy
Pure Pilot Limited · Effective 24 September 2026
Pre-launch draft — professional legal review and the business's full statutory contact details are required before paid public launch.
Who we are
Pure Pilot Limited operates PurePilot and is the controller of the personal information described in this notice. Contact us at support@purepilot.co.uk.
Information we collect
We collect account and contact details, authentication records, subscription status, campaign briefs and generated content, saved Company Research, feedback, support correspondence, and limited product and security events. Stripe handles payment-card details; PurePilot does not store full card numbers.
Company Research and public sources
When you request Company Research, PurePilot retrieves publicly accessible pages from the website you submit and processes relevant page content to create the requested analysis. The resulting research can be stored in your account.
Why we use information
We use information to create and administer accounts, provide requested campaigns and research, operate subscriptions, respond to support requests, secure and troubleshoot the service, meet legal obligations, and understand how the product is used so we can improve it.
Lawful bases
We process information where necessary to perform our contract with you, comply with legal obligations, and pursue legitimate interests such as securing, supporting and improving the service. Where consent is the appropriate basis, you may withdraw it at any time. Withdrawing consent does not affect processing that was already lawful.
Service providers and sharing
Supabase provides authentication and database services. Stripe processes subscriptions, payment methods and invoices. Cloudflare provides hosting, networking and AI processing used by the service. We may also disclose information where required by law, to protect legal rights or security, or as part of a business reorganisation subject to appropriate safeguards. We do not sell personal information.
International processing
Some providers may process information outside the United Kingdom. Where required, we rely on an applicable adequacy regulation or contractual and organisational safeguards for those transfers. Contact us if you would like more information about the safeguards relevant to your data.
Feedback and product events
Feedback may include a rating, answers, route, plan and optional record references. Product events use allowlisted action names and limited metadata. They are designed not to contain passwords, access tokens, payment details, full campaign content or full research-page content.
Retention
Account-owned campaigns, research and feedback remain until you delete them or complete account deletion. Product events are deleted or aggregated after 13 months. Billing and operational records may be kept longer where reasonably needed for accounting, fraud prevention, disputes, security or legal obligations. Backup copies may persist for a limited period before routine deletion.
Your rights
Depending on the circumstances, UK data protection law may give you rights to access, correct or erase information, restrict or object to processing, and receive portable data. You may also withdraw consent where processing relies on it. These rights can have legal exceptions. Send a request to the contact address above; we may need to verify your identity.
Account deletion
Account deletion removes the profile and user-owned campaigns, research, feedback and linked product events after recent authentication and typed confirmation. An active or unresolved subscription must be ended first so billing can be safely closed.
Complaints
Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
Changes to this notice
We may update this notice when the service or legal requirements change. We will publish the revised version here and change the effective date, and will provide additional notice where a change is material.