Skip to content
BizOps PilotTerms of Service

Privacy Policy

Effective July 17, 2026

This policy says what BizOps Pilot collects, why, and what control you have. It is written to be read, not skimmed past. The short version: we collect the minimum needed to run your automations, we encrypt the sensitive parts, we sell nothing, and you can delete your data yourself at any time (Pro subscribers cancel billing first; details below).

What we collect

  • Account data: your email address, an optional display name, and a hash of your password (scrypt with a per-user salt; we never store or see the password itself).
  • Automation data: the Pilots you create (titles, descriptions, workflow steps), their run history, and the trigger payloads external services send to your delivery URLs.
  • Connector credentials: API keys and tokens you choose to connect (for example a Slack webhook URL, a Resend key, or your own Anthropic key). These are encrypted with AES-256-GCM before they reach the database and are never shown again after you save them.
  • Brain memory: notes and context your Pilots and Systems accumulate across runs, used to inform future AI suggestions. You can view and edit this from each entity. It is deleted when the Pilot or System it belongs to is deleted, and all of it is deleted when your account is deleted.

We do not collect analytics profiles, advertising identifiers, or behavioral tracking data.

Cookies

We set an httpOnly session cookie that keeps you logged in, plus a short-lived state cookie during Google sign-in to prevent cross-site request forgery. Both are strictly necessary for the service to function, which is why you do not see a cookie consent banner. There are no third-party or tracking cookies.

How your data is used

  • To execute the automations you build, exactly as configured.
  • To show you run history and step output on your own dashboard.
  • To secure the service (rate limiting, abuse prevention).
  • To contact you about your account when necessary. No marketing without consent.

We do not sell or rent your data. We do not share it with advertisers.

AI processing

If you connect your own AI provider key (Anthropic, OpenAI, Google AI, OpenRouter, or a local model), the content of AI steps (the step instruction plus the data flowing through that step) is sent to that provider under your key and their terms, billed to you directly. If a server-side key is configured, the same content is processed under our key. With no key at all, AI steps run a deterministic local fallback and nothing leaves the server. Separately, when you search the template catalogue, create a Pilot, or ask the Advisor, that text (your search query, or the Pilot's title and description) is sent to OpenAI to generate an embedding that powers template matching. This uses our own operator key, not yours, and happens regardless of which AI key you have connected.

Retention and deletion

  • Run history is capped at the newest 100 runs per Pilot; older runs are deleted automatically.
  • Finished queue jobs (which can contain trigger payloads) are deleted after 7 days.
  • Disconnecting a connector deletes its encrypted credentials immediately.
  • Deleting your account (Account page) immediately and permanently deletes your user record, all Pilots, all run history, all queued jobs, and all encrypted credentials. There is no soft-delete or retention window in our own database. If you have an active Pro subscription you must cancel it in the billing portal first, so we never keep charging a card with no account behind it. Payment records held by our payment processor are retained as required for accounting and fraud prevention, and any connected third-party account we could not fully revoke on our end lives outside our database entirely; contact support to request erasure there too. Anonymous rate-limit counters used for abuse prevention are not tied to your account and age out automatically.

Your rights

You can export any Pilot as JSON from its page, change your password, and delete your account without asking us, subject to the Pro subscription condition above. For access, correction, or portability requests beyond that (including GDPR and CCPA requests), email support@bizopspilot.com and we will respond within 30 days.

Subprocessors

The service runs on cloud hosting and a managed database provider, and, only when an AI key is in use, Anthropic for AI processing. OpenAI processes template search and Pilot-description text to power template matching, regardless of AI key. Stripe processes payment details for paid plans and holds your payment method and billing history under its own terms; we never see your full card number. If you connect third-party accounts, the relevant provider (via Composio, our connector infrastructure, or directly) holds the OAuth grant for that connection. Each subprocessor processes data solely to provide the service. A current list is available on request via the support email.

Security

Credentials are encrypted at rest (AES-256-GCM). Passwords are scrypt-hashed with per-user salts. Sessions are httpOnly JWTs. Webhook delivery URLs use per-Pilot secrets compared in constant time. Every route enforces per-user ownership. Sessions last up to 30 days and are not individually revocable today; if you suspect your account is compromised, change your password immediately. If we ever learn of a breach affecting your data, we will notify you without undue delay.

Changes

If this policy changes materially we will update the effective date above and, for significant changes, notify you by email before they take effect.

Contact

Privacy questions: support@bizopspilot.com