Privacy Policy

1. Who We Are

FrontPilot AI, accessible at frontpilotai.com, is the data controller for personal data collected through this website. Contact us at [email protected].

2. Data We Collect

• Name, email address, business type, and message when you submit a contact or demo request form
• Chat messages submitted through the website chat widget
• IP address and browser information for security and spam prevention (Cloudflare Turnstile)

3. How We Use Your Data

• To respond to your enquiry or demo request
• To send transactional emails (confirmation, signup URL, onboarding) via Brevo
• To improve our chat knowledge base (anonymised question logs)
• We do not sell, rent, or share your data with third parties for marketing

4. GDPR (European Union / UK)

If you are in the EU or UK, you have the right to access, correct, delete, restrict, or port your personal data. Our lawful basis for processing is legitimate interest (responding to enquiries) and consent (marketing communications). To exercise your rights, email [email protected]. You may also lodge a complaint with the ICO (UK) or your national supervisory authority.

5. CAN-SPAM Act (United States)

All emails we send comply with the CAN-SPAM Act. We identify ourselves clearly as the sender, include a valid postal address, and honour opt-out requests within 10 business days. Every marketing email includes an unsubscribe link. We do not use deceptive subject lines or false headers.

6. CASL (Canada)

We only send commercial electronic messages to individuals who have expressly consented or where implied consent applies under Canada's Anti-Spam Legislation. Each message identifies the sender, includes contact information, and provides a working unsubscribe mechanism honoured within 10 business days.

7. International — APPI (Japan) & General

For users in Japan and other jurisdictions with personal data protection laws, we apply the same principles: data minimisation, purpose limitation, security safeguards, and the right to request access or deletion. Data may be transferred and processed on servers located in the EU or USA. Where required, we rely on standard contractual clauses or equivalent safeguards.

8. Data Retention

Contact and demo request data is retained for up to 2 years or until you request deletion. Chat logs are retained in anonymised form for up to 12 months.

9. Cookies

We use only essential session cookies for authentication on the client dashboard. No advertising or tracking cookies are used on the public website.

10. Third-Party Services

• Brevo — transactional email delivery (EU data centre)
• Cloudflare Turnstile — spam/bot protection
• Nginx / Ubuntu Server — hosting

11. Changes to This Policy

We will update this page if our practices change. The date at the top reflects the latest revision.

12. Google OAuth & Gmail Data Access

When you connect your Gmail account via Google OAuth, FrontPilot AI requests the gmail.modify scope. This allows our AI agent (Mira) to:

• Read email metadata (sender, subject, timestamp) to triage your inbox
• Flag urgent client communications for your attention
• Draft reply suggestions based on past conversations
• Apply labels to organize emails by priority and client
• Generate a weekly digest summarizing your inbox activity

What we do NOT do: We never read email bodies without explicit service activation. We never send emails from your account without your explicit approval of each draft. We never share your email data with third parties.

Data storage: OAuth access tokens are stored encrypted in our database and used only for the purposes described above. You may revoke access at any time from the Mailbox service page in your dashboard, or directly through your Google Account security settings (myaccount.google.com/permissions).

FrontPilot AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Contact

Email: [email protected]
Website: frontpilotai.com