Privacy notice

When you sign in, we collect the email address you give us so we can send you a six-digit sign-in code. When you create captures, suppliers, or SKUs we store the data you enter and any photos, business cards, or quote sheets you upload. We do not buy or rent contact data.

We also collect minimal product telemetry, the page you are on, whether an action succeeded, the time it took, so we can keep the app fast and fix bugs.

When you accept our Terms of Service and this Privacy Notice, we log the acceptance event, the version you accepted, your IP address, and a short user-agent string, so we have a record that you saw and agreed to these documents. You can request a copy of your acceptance history at any time by emailing the address at the bottom of this page.

Your trip data, suppliers, and SKUs are visible only to you and to the teammates you have explicitly invited to your workspace. We use the email you provided to send sign-in codes, billing receipts, and a small number of product updates you can opt out of from /settings.

We process payments through Stripe, and your card number never touches our servers. We use OpenAI to parse business cards and quotes you upload; the prompts contain only the fields you entered for that capture and are not used for model training.

Your data is stored on managed Postgres in the EU/US region you chose at signup, with row-level access control so one customer cannot read another customer’s rows. Photos and PDFs are stored in private object storage and only delivered through short-lived signed URLs.

You can export your data, change your email, or delete your account at any time from /settings. Account deletion removes your captures, suppliers, SKUs, and uploads within 30 days. Anonymised aggregate metrics that cannot be linked back to you may be retained for product analytics.

Questions or data requests: privacy@buypilot.io.