LivePilot Privacy Policy

About LivePilot

LivePilot is an international personal and professional execution platform. It serves individuals, families, professionals, freelancers, businesses, nonprofits, schools, and organizations across multiple countries. LivePilot is not limited to Romania, company formation, legal work, or any single use case.

LivePilot includes a web application and optionally a LivePilot Executor Chrome extension for browser-assisted workflows. This policy covers both.

Age requirement

LivePilot is for adults only. You must be at least 18 years old to use LivePilot. We do not knowingly provide accounts to people under 18.

Data we process

When you use LivePilot, we may process:

• Account identity: email address and authentication information from your sign-in provider.
• Profile and entity data: name, address, identity metadata, and information about people or organizations you choose to add to your profile.
• Cases, goals, and workflow content: information you provide when creating and executing workflows, goals, and tasks.
• Documents and uploads: files you upload, including identity documents, contracts, and supporting materials. Documents are stored privately and are not publicly accessible.
• Execution history and evidence: records of what LivePilot did and did not do on your behalf.
• Mailbox content: if you connect a Google account, LivePilot may process mailbox thread metadata to support continuation workflows.
• Google workspace integration data: OAuth status and integration metadata (per-user authorization).
• Push notification subscription: if you opt in to push notifications.
• Billing and subscription metadata: subscription plan and billing identifiers (no raw payment card data).
• Usage metadata: product usage counts for entitlement enforcement.
• Privacy request records: records of any privacy requests you submit.
• Support records: beta issue reports and support correspondence.

LivePilot's browser extension may additionally process website content visible in the active tab, browser-side workflow status, and technical extension readiness data, when you start or approve a browser-assisted workflow.

Service providers

LivePilot uses the following service providers that may receive your data as part of delivering the service:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and compute.
• OpenAI — AI-powered planning, OCR document extraction, and workflow guidance.
• Google (per-user OAuth) — Gmail, Drive, and Calendar integration when you authorize it. Per-user authorization only; no shared account.
• Browser push service— your browser vendor's push infrastructure (e.g. Google FCM for Chrome), used when you opt in to push notifications.

Additional providers (Stripe for billing, Sentry for error monitoring, Resend for email) are provisioned but not yet active in production. Data processing agreements with active providers are in preparation. Counsel review is in progress.

How we use data

LivePilot uses data only to:

• provide and operate the LivePilot service;
• authenticate and secure your account;
• support user-approved workflow execution;
• maintain proof, evidence, and audit records;
• process billing and subscription entitlements;
• deliver push notifications you opt in to;
• handle support requests;
• respond to privacy and legal rights requests;
• prevent abuse and ensure security;
• comply with legal obligations.

Analytics: LivePilot uses only storage necessary for authentication, account security, and product operation. No non-essential marketing or behavioral analytics trackers are active at launch.

Data sharing

LivePilot does not sell user data. LivePilot does not share your data for advertising, behavioral profiling, creditworthiness, or unrelated purposes.

We may share limited data only when necessary to:

• provide the service through the service providers listed above;
• comply with law;
• protect security, prevent abuse, or investigate misuse;
• complete a business transfer (merger, acquisition, or asset sale), subject to appropriate protections.

Chrome Web Store Limited Use disclosure

LivePilot's use and transfer of information received from Chrome extension APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. LivePilot uses Chrome extension data only to provide or improve the extension's single purpose and does not use or transfer it for unrelated purposes.

Human approval and controlled execution

LivePilot does not silently submit forms, send emails, make payments, sign documents, or complete high-risk actions without your review and approval. Browser-assisted execution remains controlled by the LivePilot web app and your approval flow.

Security

LivePilot uses technical and organizational safeguards including access controls, encrypted transport (TLS), encrypted storage for OAuth tokens (AES-256-GCM), proof and audit mechanisms, and extension readiness verification through a browser-mediated runtime channel.

Data retention

Specific retention periods are under legal review and will be published after counsel review. LivePilot retains data as needed to provide the service, maintain security and proof records, meet legal obligations, and resolve disputes. Statutory and contractual requirements may require retaining some categories even after an account is deleted.

Billing records are subject to applicable accounting retention requirements (to be confirmed with accountant).

Evidence records may have preservation requirements that limit deletion.

Your rights

Depending on your jurisdiction, you may have rights including access, correction, erasure, restriction, objection, consent withdrawal, and data portability. The exact rights and lawful bases applicable to your use of LivePilot depend on your location and context — legal review is in progress.

You can currently:

• Export your account metadata, cases, execution history, and privacy records (document bytes and secrets are excluded) from account settings.
• Request deletion of your account and data from account settings. Deletion requests are reviewed — not automatically executed. Statutory or contractual retention requirements may limit some deletions.
• Disconnect integrations (Google) from account settings.
• Contact us at privacy@livepilot.app for access, correction, or other privacy requests.

User choices

You may update your account information, adjust notification preferences, disconnect third-party integrations, request a data export, or submit a deletion request from your account settings. Marketing communications require explicit opt-in and may be withdrawn at any time. Service, security, and account-operation messages are sent regardless of marketing preferences.

Children

LivePilot is for adults only. Users must be at least 18 years old. LivePilot is not directed to children and does not knowingly collect data from anyone under 18.

International transfers

LivePilot processes data in countries where its service providers operate. International transfer mechanisms (such as Standard Contractual Clauses) are under legal review. We will publish confirmed transfer mechanisms after counsel review.

Lawful basis for processing

[Counsel review required — specific lawful bases for each processing activity will be published after legal review.]

Governing law and jurisdiction

[Counsel review required — governing law and forum will be specified after legal review.]

Contact

For privacy questions, access requests, or rights requests, contact: privacy@livepilot.app

The founder is currently the responsible privacy contact during pre-commercial operation.

Updates

This policy will be updated before commercial launch and after counsel review. Updates will be posted with a new version number.