Privacy notice
Last updated: October 16, 2026
Summary
PilotPlan is operated by Govind Waghmare. It uses the information you submit to research and generate an implementation plan. Do not submit passwords, payment card details, health information, government identifiers, or confidential personal data.
Information PilotPlan handles
- Your problem description, company context, selected requirements, refinements, and feedback.
- The reports, source links, and share links produced for you.
- Optional analytics events tied to a random browser identifier, but only after you allow analytics.
- Technical request data such as IP address and browser details that hosting and security providers may process in service logs.
- A usage-limit cookie: a random, signed visitor number (no name or email) stored in an httpOnly cookie, so PilotPlan can count how many plans this browser has made. A one-way hash of your IP address is also counted per day as a backstop. Both are used only to apply the free-plan limit.
- If you unlock a plan by sharing it, the link to your public post and which network it is on, so the owner can see where PilotPlan is shared.
- If you join the paid-plans waitlist, your email address and the consent you gave.
- Payment information if paid features are activated. Card details are handled by Stripe and are not stored by PilotPlan.
Why the information is used
The information is used to generate, refine, save, and share reports; protect and operate the service; respond to feedback; and, with your consent, understand product usage. PilotPlan does not sell personal information or use it for targeted advertising.
Service providers and AI processing
Submitted content may be processed by Vercel for hosting, Neon for database storage, OpenRouter and the selected downstream AI model providers for generation, Jina AI for web research, and Stripe if payment is activated. These providers may process data in other countries under their own service terms. Avoid entering regulated or confidential data unless you have independently confirmed the service is suitable for it.
Storage, links, and retention
- Report history and cached copies may be stored in your browser until you delete them or clear browser storage.
- Completed reports may be mirrored in cloud storage. A share link is not password protected. Anyone who has the link can view the report.
- Public gallery: a report is never added to the gallery automatically. Only if you choose Publish to gallery, after previewing an anonymised copy, is that copy shown on a public page that search engines and AI tools can index. You can unpublish it from the report on the same browser.
- Analytics events and report-operation logs are scheduled for deletion after 90 days.
- Feedback records are scheduled for deletion after 180 days.
- Temporary generation checkpoints are scheduled for deletion after 24 hours.
- Daily IP-hash counters for the free-plan limit are scheduled for deletion after 2 days. The usage-limit cookie expires after a year.
- A plan that is locked until shared is kept in cloud storage like a share copy. Post links for unlocked plans are kept so the owner can review them.
- Waitlist emails are used once, to tell you when paid plans launch, and kept until then or until you ask for removal. The delete control below removes a waitlist email joined from this browser after analytics was allowed; otherwise use the contact below.
- Hosting, security, and provider logs may follow the provider's separate retention schedule.
Your choices
Analytics is off until you allow it. You can change that choice or delete report copies and analytics linked to this browser below. Deletion cannot remove data from logs or backups immediately, or from a report someone else copied from a share link.
Your privacy controls
Current analytics setting: Not chosen
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of personal information, and to complain to your data protection authority. The self-service controls above are the fastest option.
A dedicated privacy contact address is being configured. Until it is published, use the self-service controls above.
Children and changes
PilotPlan is for business users aged 18 or older. This notice may change as the service develops. Material changes will be shown on this page with a new update date.