Privacy Policy — Pilot

Who we are

Pilot (“Pilot”, “we”, “us”) is an AI social-media assistant that learns your brand and drafts and publishes posts to the Facebook Page and Instagram Business account you connect. This policy explains what we collect, why, and your choices.

Information we collect

Account information — your email address and a securely hashed password.
Brand profile— the business details you provide (business name, description, audience, do/don't guidance, links) so Pilot can write in your voice.
Connected social accounts — when you connect via Facebook Login, we receive access tokens for the Facebook Page and linked Instagram Business account you authorize. We never receive or store your password. Tokens are encrypted at rest.
Content— drafts Pilot generates, posts you approve and publish, and your account's own recent published posts (used to learn your established voice — only from accounts you connect).
Operational logs — audit records of key actions (connections, approvals, publishes) to operate and secure the service.

How we use information

To learn your brand voice and generate on-brand draft posts.
To publish posts you approve (or that you opt into auto-publishing) to your connected Facebook Page and Instagram account.
To operate, secure, support, and improve the service.

We do not sell your personal information.

Information obtained through Meta

We access only the Pages and Instagram Business accounts you explicitly authorize, and only the data needed to (a) publish content you approve and (b) learn your established voice from your own posts. Our use of information received from the Meta Platforms follows the Meta Platform Terms and Developer Policies. We do not access other people's data.

Service providers we share with

To deliver the service we share the minimum necessary data with:

Meta (Facebook/Instagram) — to publish your approved content and read your own posts.
Anthropic (Claude) — to generate post text from your brand profile.
fal.ai — to generate post images when you enable media.

These providers process data on our behalf under their own terms.

Retention & deletion

We keep your data while your account is active. You can disconnect your social accounts at any time (which deletes the stored tokens), and you can request deletion of your account and associated data at any time. See our Data Deletion instructions.

Security

Platform access tokens are encrypted at rest, passwords are one-way hashed, and access is restricted. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

Contact

Questions about this policy or your data? Email privacy@pilotsmm.com.