1. Information We Collect

When you use PlacePilot, we collect information you provide directly:

Account information (email, name) when you sign up
Location data you submit for analysis
Business type information for analysis requests
Payment information processed securely by Stripe

2. How We Use Your Information

We use collected information to:

Provide location analysis services
Generate market intelligence reports
Process payments and manage your account
Improve our AI analysis capabilities
Send service-related communications

3. Data Security

We implement industry-standard security measures to protect your data:

Encryption in transit and at rest
Secure authentication via Clerk
Payment processing via PCI-compliant Stripe
Regular security audits and monitoring

4. AI Processing Disclosure

Your analysis requests are processed using artificial intelligence. This means:

Your location and business type inputs are sent to Google Gemini AI for analysis
AI models synthesize data from multiple sources to generate reports
No human reviews your specific analysis unless you contact support
AI outputs may be used in aggregate to improve model performance (no personal data)

We do not use your personal information to train AI models. Your analysis inputs (location, business type) may be processed through AI systems but are not retained by those systems beyond the generation of your report. AI-generated outputs are informational tools only and should not be treated as professional advice. See our Terms of Service, Section 4 for important limitations.

5. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Google Gemini AI - For market analysis and report generation. Your analysis inputs are processed through Google's AI infrastructure.
Google Maps Platform (including Street View and Places API) - For location data, competitor analysis, and visual area assessment. We query business listings, public reviews, geographic data, and street-level imagery on your behalf.
Google Search - For market research data gathering from public web sources.
Clerk - For authentication and user management. Your email and profile are stored with Clerk.
Stripe - For payment processing. Payment card details are handled directly by Stripe; we never see your full card number.

By using PlacePilot, you acknowledge that your data may be processed by these third-party services in accordance with their respective privacy policies.

6. Data Retention

We retain different types of data for different periods:

Account data (email, profile) - Retained while your account is active and for 30 days after deletion request
Analysis job data (inputs, intermediate processing) - Automatically purged 90 days after purchase
Generated reports (PDFs, interactive dashboards) - Available for download for 90 days from purchase date; we recommend downloading your deliverables when the report is ready
Payment records - Retained for 7 years as required for tax and accounting compliance
Usage logs - Anonymized after 30 days; aggregated statistics retained indefinitely

You may request deletion of your data at any time by contacting us. Note that some data may be retained as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

7. Cookies and Tracking Technologies

We use cookies and similar technologies to provide, protect, and improve our services. Here are the cookies used on PlacePilot:

Essential Cookies (Required)

Clerk - Authentication session management, user identity
Stripe - Payment processing, fraud prevention

Analytics Cookies (Optional)

Google Analytics - Usage patterns, page views, feature adoption

Third-Party Cookies

Google Maps - Map rendering and location services

You can manage your cookie preferences at any time. Note that disabling essential cookies may prevent you from using certain features of our service.

8. Your Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Object to processing of your data
Withdraw consent for optional processing (e.g., analytics cookies)

9. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your personal data under the following legal bases:

Contract performance (Article 6(1)(b)): Processing necessary to deliver location analysis services you have purchased — including generating reports, managing your account, and processing payments.

Legitimate interest (Article 6(1)(f)): Service improvement, fraud prevention, and security monitoring. We balance these interests against your rights and only process what is necessary.

Consent (Article 6(1)(a)): Analytics cookies and optional communications. You can withdraw consent at any time without affecting the lawfulness of prior processing.

Legal obligation (Article 6(1)(c)): Retention of payment records for tax compliance and responding to lawful data access requests.

10. Automated Decision-Making (GDPR Article 22)

PlacePilot uses automated processing to generate location intelligence reports. This includes:

AI-powered analysis of competitor data, market conditions, and co-tenancy patterns
Automated scoring (Market Position Score, Co-Tenancy Score) based on algorithmic processing
AI-generated strategic recommendations and risk assessments

Important: These automated outputs are informational tools only. They do not produce legal effects or similarly significant effects on you. No automated decision determines whether you can access our service, what price you pay, or any other consequential outcome.

You have the right to request human review of any automated analysis by contacting support@placepilot.ai.

11. International Data Transfers (GDPR Articles 44-49)

PlacePilot is operated from Dubai, UAE. Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including:

United States: Google (Maps Platform, Gemini AI, Analytics), Clerk (authentication), and Stripe (payments) process data in the US under Standard Contractual Clauses (SCCs) and/or their respective Data Processing Agreements.

UAE: PlacePilot's infrastructure runs on Google Cloud Platform (Middle East region). Account and job data is stored in the UAE.

We ensure appropriate safeguards are in place for all international transfers, including Standard Contractual Clauses approved by the European Commission. You may request a copy of these safeguards by contacting privacy@placepilot.ai.

12. Your California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know - You can request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete - You can request deletion of your personal information, subject to certain exceptions
Right to Opt-Out - You can opt out of the sale of your personal information (see below)
Right to Non-Discrimination - We will not discriminate against you for exercising any of your CCPA rights

Sale of Personal Information

PlacePilot does not sell your personal information to third parties as defined under the CCPA. We may share data with service providers (Clerk, Stripe, Google) solely to operate our service, which is not considered a "sale" under California law.

To exercise any of these rights, contact us at privacy@placepilot.ai. We will respond to verifiable requests within 45 days.

13. Data Controller

Data Controller: PragmaTech LLC-FZ

Email: privacy@placepilot.ai

Jurisdiction: Dubai, UAE

14. Contact Us

For privacy-related inquiries, please contact us at privacy@placepilot.ai

Privacy Policy