Privacy Policy

1. Information Collection (GDPR/CCPA Compliant)

xPilot collects the following personal information to provide and improve our services:

• •
  Account Information: Name, email, phone provided during registration
• •
  Social Media Credentials: API tokens for X, TikTok, Instagram, and other platforms
• •
  Payment Information: Transaction records and subscription status
• •
  Usage Data: IP address, device information, and access logs
• •
  API Usage Records: Logs of AI generation and platform usage for billing and improvement

2. Legal Basis for Processing

We process your data based on:

• • Contract Necessity: To deliver our services
• • Legal Compliance: Tax, regulatory, and anti-fraud obligations
• • Your Consent: Where you have explicitly opted in
• • Legitimate Interests: Security, fraud prevention, service optimization

3. How We Use Your Data

We use collected information to:

• • Provide, maintain, and improve service features
• • Process payments and manage subscriptions
• • Send service updates and security notifications
• • Analyze usage patterns and optimize user experience
• • Prevent fraud and maintain platform security

4. Data Security

Your data is stored on US-based Vercel and Neon servers. We implement:

• ✓ AES-256 database encryption
• ✓ TLS 1.2+ transport security
• ✓ Multi-factor authentication
• ✓ Regular security audits and penetration testing
• ✓ Automated backups and disaster recovery

5. Third-Party Data Sharing

We share information only with:

Statement: We never sell your data. All partnerships are governed by strict Data Processing Agreements.

6. Data Retention

Except where required by law, we delete most personal data within 90 days of service termination. Tax and legal records are retained 5-7 years per regulatory requirements. You can request deletion anytime.