Privacy Policy

SuccessPilot.ai is operated by REACTIVE DIGITAL MEDIA LTD (company number 13878572), registered office Leytonstone House, 3 Hanbury Drive, Leytonstone, London, England, E11 1GA. We are the controller of the personal data described in this policy, which means we decide how and why it is used.

Privacy questions and requests: privacy@successpilot.ai. You may also write to our registered office.

This policy explains how we handle personal data when you visit our website, join our newsletter, take our quiz, create an account, use our planning, research, learning and AI coaching tools, contact us or, once available, buy a subscription. It applies to customers and visitors worldwide. We apply UK data protection law (the UK GDPR and the Data Protection Act 2018) and, where it applies to you, the EU GDPR and other local privacy laws.

Depending on how you use SuccessPilot, we may collect:

• Account details: name, email address, login details and account settings.
• Quiz and onboarding answers: your interests, skills, goals, time available, experience and similar answers you choose to give.
• Project content: your business idea, Project Brief, plans, offers, checklists, progress, notes and anything you type into our tools.
• Coach conversations and AI requests: messages you send to the Coach and the responses generated, plus research requests and results.
• Newsletter details: your email address, the list you joined, the date and how you signed up.
• Support messages: what you send us and our replies.
• Usage and device information: pages viewed, features used, clicks, approximate location derived from IP address, browser and device type.
• Payment information (once checkout is live): plan, billing interval, amounts, transaction status and limited card details such as card type and last four digits. Full card numbers are handled by our payment provider, not stored by us.

We only use personal data where the law allows. Our main purposes and lawful bases are:

• Providing your account and the service you asked for, including personalised plans and AI coaching — performance of our contract with you.
• Sending essential service emails such as sign-in links, account notices and, once live, receipts — performance of contract and legitimate interests.
• Sending our newsletter and marketing emails — your consent, which you can withdraw at any time.
• Understanding how people use our product so we can fix problems and improve it — legitimate interests, and consent where the law requires it for cookies or similar technologies.
• Keeping the service secure, preventing misuse and enforcing our terms — legitimate interests.
• Handling payments, tax and accounting records once checkout is live — performance of contract and legal obligation.
• Responding to support requests, complaints and legal claims — legitimate interests and legal obligation.

When you use the Coach, idea generation or similar features, the content you enter and relevant project details are sent to AI models to produce a response. We access these models through Lovable, our hosting and AI infrastructure provider, which passes requests to the model provider. Depending on the feature, this may be Google (Gemini), OpenAI (ChatGPT models) or Anthropic (Claude). Our research features send search queries based on your project to Perplexity to find public web information.

We do not use your content to train AI models, and our AI infrastructure is configured so that requests are not used to train the providers' models. Most requests are processed without being kept by the model provider after the response is returned. Some models may keep requests for a limited period (typically around 30 days) for security and abuse monitoring before automatic deletion.

Please do not enter sensitive information (such as health details, financial account numbers or other people's private data) into the AI tools. AI output is generated automatically and is not a decision with legal or similarly significant effect about you.

We do not sell your personal data. We share it only with service providers who help us run SuccessPilot, under contracts that limit their use of it, including:

• Lovable — website and application hosting, database, authentication and access to AI models.
• AI model and research providers (Google, OpenAI, Anthropic and Perplexity) — generating Coach, idea and research responses.
• Stripe — payment processing. Stripe also acts as an independent controller for some purposes, such as fraud prevention, under its own privacy policy.
• PostHog and Google Analytics — understanding how our website and product are used.
• Google Ads, Meta (Facebook and Instagram) and TikTok — measuring and improving our advertising, only with your consent.
• Resend — sending account and service emails.
• EmailOctopus — newsletter and marketing email lists.
• Professional advisers, authorities, courts or a buyer of our business, where needed for legal reasons or a business sale.

We use strictly necessary cookies and browser storage to keep you signed in, remember choices such as a selected plan, take payments securely and keep the service working. These do not need your consent.

With your consent, we also use analytics cookies (PostHog and Google Analytics) and advertising cookies or pixels (Google Ads, Meta and TikTok). We ask for your choice when you first visit, using our consent tool (CookieYes), and you can change it at any time using the cookie settings link in our website footer. You can also block or delete cookies in your browser settings.

Joining our newsletter is optional and separate from creating an account or buying a subscription. Every marketing email includes an unsubscribe link, or you can email us to stop. Unsubscribing does not stop essential service emails about your account or purchases.

Some providers process data outside the UK and European Economic Area, including in the United States. Where this happens we rely on lawful transfer mechanisms such as UK adequacy regulations (including the UK–US data bridge for certified organisations), the UK International Data Transfer Addendum or Standard Contractual Clauses, together with appropriate safeguards. You can ask us for more information about these safeguards.

We keep personal data only for as long as we need it for the purposes above:

• Account, project and Coach data — while your account is open. When you delete your account, we delete it from our live systems, subject to the limits below.
• Newsletter data — until you unsubscribe, after which we keep a minimal suppression record so we do not email you again.
• Payment and tax records — for the period required by tax and accounting law, normally six years after the end of the relevant financial year.
• Support messages — for as long as needed to resolve your request and handle any follow-up.
• Analytics data — for a limited period set in our analytics tool, then deleted or aggregated.
• Backups and provider logs — deleted on the provider's normal cycle; data in backups is not used for any other purpose.

We use appropriate technical and organisational measures, including encrypted connections, access controls and database security rules, to protect your data. No online service can be completely secure, so we cannot guarantee absolute security. If a breach is likely to put your rights at risk, we will tell you and the regulator where the law requires.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy in a portable format and withdraw consent at any time. You can download your data and delete your account from your account settings, or email us.

To make a request, email privacy@successpilot.ai. We may need to verify your identity. We aim to respond within one month, which may be extended where the law allows. We do not charge a fee for most requests.

Residents of some US states, Canada, Australia and New Zealand have similar rights under local law, and we will honour applicable requests. We do not sell or share personal data for cross-context behavioural advertising as those terms are defined under California law.

Please contact us first so we can try to put things right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk). If you live in Ireland or elsewhere in the EU you may complain to your local data protection authority, such as the Irish Data Protection Commission. Elsewhere, you may contact your local privacy regulator.

SuccessPilot is intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

We will update this policy when our services or providers change. We will show the date of the latest version at the top of this page and tell you about significant changes by email or in the app before they take effect.