Privacy Policy

MarketPilot AI ("we", "us", "our") provides an AI-powered marketing command center. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our services you agree to the practices described below.

1. Information we collect

Account information

Name, email, password hash, organisation details, billing details, and profile preferences.

Content & integrations

When you connect third-party platforms (Facebook, Instagram, YouTube, WhatsApp, Google Ads, etc.), we receive tokens and content (posts, messages, metrics, audience data) you authorise us to access.

Usage data

Logs, device data, IP, browser, pages visited, feature usage, and diagnostics for security and analytics.

Cookies

We use essential and analytics cookies. You can control cookies via your browser settings.

2. How we use information

• Provide, maintain, and improve the service.
• Authenticate users and secure accounts.
• Generate AI insights, content suggestions, and reports you request.
• Process payments and manage subscriptions.
• Communicate updates, security alerts, and support messages.
• Comply with legal obligations and enforce our terms.

3. AI processing

Some features use large language models and other AI providers. Content you submit may be processed by these providers solely to deliver the requested output. We do not sell your data and do not allow providers to train foundation models on your private content. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements; in particular, Google user data is never used to develop, improve, or train generalized or non-personalized AI and/or ML models (see section 3c). We specifically do not use content or metadata obtained from the Reddit Data API to train, fine-tune, or evaluate any AI/ML model, and this is enforced contractually with our AI providers.

3a. Reddit data (Reddit Data API)

If you connect a Reddit account, MarketPilot AI accesses the Reddit Data API strictly on your behalf, using OAuth 2.0 and the minimum scopes required to operate the features you enable (typicallyidentity, read, submit, edit, and history). We use this access only to:

• Publish content you author to subreddits you are personally authorized to post in.
• Show you replies, mentions, and basic engagement counts on your own submissions in your private inbox.
• Let you reply to comments on your own submissions as yourself.

We adhere to Reddit's Data API Terms and Responsible Builder Policy. Specifically we:

• Never train, fine-tune, or evaluate AI/ML models on Reddit content, user data, or metadata.
• Never sell, license, resell, or share Reddit data with third parties, ad networks, or data brokers.
• Never re-identify Reddit users or use Reddit data for surveillance, background checks, credit, employment, insurance, housing, or law-enforcement purposes.
• Never enable vote manipulation, artificial engagement, or spam — no automated voting, following, awarding, or reporting.
• Honor Reddit's 48-hour deletion propagation requirement: when a Redditor edits or removes content, our cached copy is updated or deleted within 48 hours. When a Reddit account is deleted, all associated cached content is purged.
• Respect Reddit's rate limits and identify our client with a descriptive User-Agent.
• Immediately revoke your OAuth token via Reddit's /api/v1/revoke_token endpoint when you disconnect Reddit inside MarketPilot, and purge cached Reddit content from our systems.

Reddit data is displayed only to you, the authenticated account owner, inside your private MarketPilot dashboard. It is never shown to other MarketPilot users, published outside the app, or redistributed.

3b. Insights, analytics and creator discovery data

Data obtained through official platform APIs (including Meta Insights, Instagram/Facebook creator discovery, Google, TikTok, LinkedIn, Pinterest, X and Threads) is used only for the permitted purposes described in our Platform Data Use Policy, which also covers prohibited uses, retention and deletion for that data.

3c. Google user data, AI/ML and Limited Use

When you connect a Google account, MarketPilot AI requests only the scopes needed for the features you enable, limited to Google Ads, YouTube (your own channel), Google Analytics, Google Tag Manager and Google Merchant Center. We do not request, receive, store or process Google Workspace data (Gmail, Drive, Calendar, Docs, Contacts) or Google Photos data, and no such data is ever sent to any AI or machine-learning system.

MarketPilot AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:

• Use Google user data only to provide or improve user-facing features that are prominent in the MarketPilot AI interface and that you explicitly requested.
• Do not use Google user data to develop, improve, or train generalized or non-personalized AI and/or ML models. Where AI features operate on Google API data (for example, generating ad copy or summarizing campaign performance), that data is used solely to produce the output you requested in that session, and is never used for model training, retraining, or fine-tuning.
• Do not transfer, sell, or share Google user data with third parties, except as necessary to provide or improve the features you use, to comply with applicable law, or as part of a merger or acquisition with notice.
• Do not use Google user data for advertising, ad targeting, credit-worthiness, or lending purposes.
• Do not allow humans to read Google user data, unless we have your explicit consent, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized.

In summary:

• MarketPilot does not receive or process Google Workspace API or Google Photos API user data.
• Accordingly, Google Workspace API and Google Photos API user data is not transferred to any AI/ML provider.
• MarketPilot also does not use Google user data to create, train, fine-tune, or improve foundational or generalized AI/ML models.
• Our use of Google user data adheres to the Google API Services User Data Policy, including the applicable Limited Use requirements.

3d. Third-party AI integrations

MarketPilot integrates with Google-provided generative AI services for application functionality including generation of text responses, images, and videos. The AI services currently used include:

• Gemini — text and response generation.
• Nano Banana — image-generation functionality.
• Imagen — image-generation functionality.
• Veo — video-generation functionality.

These services are accessed through:

• Gemini API / Google AI Studio
• Google Cloud Vertex AI

Our applicable service tier is a Paid API plan. MarketPilot does not transmit Google Workspace API or Google Photos API user data to these AI services. Google user data obtained through the Google APIs used by MarketPilot is not used by MarketPilot to train, fine-tune, or improve generalized AI/ML models. MarketPilot does not currently use a third-party multi-model aggregator, gateway, or external model hub for these integrations.

4. Sharing

We share data only with:

• Service providers (hosting, analytics, payment, AI) under contract.
• Third-party platforms you explicitly connect.
• Authorities where required by law.
• Acquirers in the event of a merger or sale, with notice.

5. Data retention

We retain account data while your account is active and for a reasonable period afterward to meet legal, accounting, and reporting obligations. You can request deletion at any time.

6. Security

We use encryption in transit, encrypted secret storage, role-based access controls, and audit logging. No system is 100% secure; please use strong passwords and protect your credentials.

7. Your rights

Subject to your jurisdiction (including GDPR/CCPA where applicable), you may access, correct, export, or delete your personal data, and object to or restrict certain processing. Contact us to exercise these rights.

8. International transfers

We may process data in countries other than yours. Where required, we use appropriate safeguards such as standard contractual clauses.

9. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy. Material changes will be notified via email or in-app notice.

11. Contact

Questions or requests: privacy@marketpilot.ai.