Privacy Policy

1. Introduction

By accessing or using the AI Autopilot, Inc. ("AI Autopilot," "we," "us," or "our") website or the AI Autopilot Agentic AI automation platform and application programming interface ("API") cloud-based software (collectively referred to herein as the "Services"), you agree to comply with the terms and conditions of this Privacy Policy.

This Privacy Policy is incorporated in and forms part of our Terms of Service. Any dispute over your privacy rights is subject to our Terms of Service and the laws of the State of Delaware.

This Privacy Policy describes the types of Personal Information we collect, how we use it, whom we share it with, and how you may exercise your privacy rights under applicable US privacy laws (including the California Consumer Privacy Act "CCPA," California Privacy Rights Act "CPRA," and other state privacy laws).

For purposes of this Privacy Policy, "Personal Information" means information that identifies, relates to, describes, or could reasonably be linked to you or your household. We collect the following categories:

• a. Identifiers: Name, email address, phone number, mailing address, account username, IP address, and similar identifiers.
• b. Customer Records: Billing name, billing address, payment card information (last 4 digits only), bank account information, and purchase history.
• c. Commercial Information: Products or services purchased, obtained, or considered, and purchasing histories.
• d. Internet/Network Activity: Browsing history on our Services, search history, device type, operating system, browser type, pages visited, time spent on pages, and clickstream data.
• e. Geolocation Data: General location based on IP address (city/state level, not precise location).
• f. Professional Information: Job title, company name, and professional contact information.
• g. Inferences: Inferences drawn from the above to create a profile about preferences and characteristics.

Sensitive Personal Information

We do not intentionally collect Sensitive Personal Information as defined under CPRA (such as Social Security numbers, precise geolocation, racial or ethnic origin, religious beliefs, genetic data, biometric data, health information, or sexual orientation). If you believe we have inadvertently collected such information, please contact us immediately.

3. Sources of Personal Information

We collect Personal Information from the following sources:

• a. Directly from you: When you create an account, fill out forms, request a demo, or contact us.
• b. Automatically: When you use our Services through cookies and similar technologies.
• c. From service providers: Analytics providers, payment processors, and marketing partners.
• d. From publicly available sources: Business contact information from public databases and websites.

We use cookies, web beacons, pixels, and similar technologies to collect information automatically when you visit our website. A "cookie" is a small text file stored on your device that helps us recognize you and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Required for the Services to function. Cannot be disabled.
• Functional Cookies: Remember your preferences and settings.
• Analytics Cookies: Help us understand how visitors use our website.
• Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

Managing Cookies:

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may prevent you from using certain features of our Services. You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

Do Not Track Signals:

Our website does not currently respond to "Do Not Track" (DNT) signals from web browsers. However, you can manage your cookie preferences as described above and exercise your privacy rights as described in this Policy.

We use Personal Information for the following business purposes:

• a. Provide, maintain, and improve the Services;
• b. Process transactions and send related information;
• c. Create and manage your account;
• d. Respond to your inquiries and provide customer support;
• e. Send promotional communications (with your consent where required);
• f. Analyze usage and improve our Services;
• g. Detect, prevent, and address fraud and security issues;
• h. Comply with legal obligations;
• i. Enforce our terms and protect our rights.

We may share Personal Information with:

• a. Service Providers: Companies that perform services on our behalf (hosting, payment processing, analytics, customer support).
• b. Business Partners: With your consent, for joint marketing or other purposes.
• c. Legal Requirements: When required by law, subpoena, court order, or to protect our rights.
• d. Business Transfers: In connection with a merger, acquisition, or sale of assets.
• e. With Your Consent: When you direct us to share information.

Sharing for Cross-Context Behavioral Advertising: We may share certain Personal Information (such as device identifiers and browsing activity) with advertising partners for targeted advertising purposes, which may constitute "sharing" under CPRA. You have the right to opt out of this sharing as described below.

7. AI Processing

Our Services include AI features powered by Anthropic Claude and OpenAI, hosted on Microsoft Azure within the United States. When you use AI features:

• No Model Training: Your data is never used to train AI models.
• Stateless Processing: AI providers do not retain your data after processing.
• Credential Protection: AI features never access your credentials, API keys, or secrets. Sensitive data is automatically blocked or masked.
• Data Minimization: Only minimal data necessary is sent to AI providers.
• Permission Inheritance: AI features respect your existing access permissions.
• Opt-Out: You may opt out of AI features by contacting us.

All Personal Information is stored and processed exclusively within the United States. We do not transfer Personal Information outside of the United States. Our infrastructure is hosted on Microsoft Azure in US data centers.

We implement industry-standard security measures including: encryption at rest (AES-256) and in transit (TLS 1.2+), role-based access controls, multi-factor authentication, regular security assessments, continuous monitoring, and employee security training. Our platform is hosted on Microsoft Azure enterprise-grade infrastructure.

While we strive to protect your Personal Information, no method of transmission or storage is 100% secure. You provide Personal Information at your own risk.

10. Data Retention

We retain Personal Information for the following periods:

Upon contract termination, customer data is deleted within 30 days unless retention is required by law or you request earlier deletion.

11. Your Privacy Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your Personal Information:

• a. Right to Know: Request disclosure of the categories and specific pieces of Personal Information we collected, the sources, our purposes, and the third parties with whom we shared it.
• b. Right to Delete: Request deletion of your Personal Information, subject to certain exceptions.
• c. Right to Correct: Request correction of inaccurate Personal Information.
• d. Right to Opt-Out of Sale/Sharing: Opt out of the sale of your Personal Information or sharing for cross-context behavioral advertising.
• e. Right to Limit Use of Sensitive Personal Information: We do not use Sensitive Personal Information for purposes beyond those permitted by CPRA.
• f. Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights:

To submit a request, email info@aiautopilot.ai with the subject line "Privacy Rights Request" or mail your request to our address below. We will respond within 45 days, which may be extended by an additional 45 days if reasonably necessary.

Verification Process:

To protect your privacy, we will verify your identity before fulfilling your request. We may ask you to provide information that matches what we have on file (such as email address and account details). For requests submitted by an authorized agent, we require written authorization from you and may verify your identity directly.

California Shine the Light (Civil Code Section 1798.83):

California residents may request information about our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, email info@aiautopilot.ai with "Shine the Light Request" in the subject line.

12. Your Privacy Rights (Other US States)

If you are a resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have similar privacy rights under your state's laws, including:

• Right to access your Personal Information
• Right to delete your Personal Information
• Right to correct inaccurate Personal Information
• Right to data portability
• Right to opt out of targeted advertising
• Right to appeal our decision regarding your request

To exercise your rights, email info@aiautopilot.ai with "Privacy Rights Request" in the subject line and indicate your state of residence. We will respond within the timeframe required by your state's law (typically 45 days). If we deny your request, you may appeal by contacting us.

Our Services are not intended for individuals under 16 years of age. We do not knowingly collect Personal Information from children under 16. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at info@aiautopilot.ai. If we learn we have collected Personal Information from a child under 16, we will delete that information promptly.

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates when the latest changes were made. For material changes, we will notify you by email or by posting a prominent notice on our website. Your continued use of the Services after changes constitutes acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us: