Privacy Policy

This privacy policy (“Policy”) explains how PilotApps.ai (Amaravel Technologies) or any of its affiliates or subsidiaries (“We”, “Us”, “Our”) Processes Personal Data collected from natural persons as specified in clause 2 below (“You”), as a Controller.

1. Definitions

Capitalised terms not specifically defined herein shall have the meaning ascribed thereto in the Terms.

1.1 “Controller” means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of Personal Data.

1.2 “Customer” means the natural or legal person that has subscribed to Services by agreeing to the Terms.

1.3 “End-User(s)” means any person or entity other than the Customer or the Users whose data is transmitted by or on behalf of the Customer to the Services.

1.4 “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.5 “Process/Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.6 “User” means a designated user within the Services, including an account administrator, employee, shareholder, auditor, lawyer, founder, and other designated users.

1.7 “Terms” shall mean the Terms of Service available here.

1.8 “Website(s)” means the websites that We operate, including pilotapps.ai.

2. How we collect, use, and share your Personal Data

2.1 Personal Data that you provide us

We collect Personal Data that You provide when You create an Account, sign in, contact support, subscribe to Services, or otherwise communicate with Us. This typically includes name, work email address, organisation name and domain, job title, phone number, billing details, and account credentials.

How we use it: to create and administer Your Account; authenticate You; provide, maintain and support the Services; send service and security notices; process payments where applicable; and respond to Your requests.

Whom we share it with: Our personnel who need it to perform their duties; sub-processors who host or operate the Services on Our behalf; payment processors (if You purchase a paid plan); and professional advisors as required.

2.2 Personal Data that we collect not provided directly by you

We may collect device, log, and usage information (IP address, browser type, pages viewed, approximate location derived from IP, and diagnostic logs) when You use the Website(s) or Services. We may also receive information from identity providers (for example Microsoft sign-in) if You choose those options.

If You provide Us with any Personal Data relating to other individuals, You represent that You have the authority to do so, and, where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Policy. If You believe that Your Personal Data has been provided to Us improperly, please contact Us using the information in clause 12 below.

2.3 In addition, We may also share Your Personal Data with:

1. an entity to which we divest all or a portion of Our business, or otherwise in connection with a merger, consolidation, change in control, reorganisation or liquidation of all or a portion of Our business;
2. law enforcement authorities, government authorities, courts, dispute resolution bodies, regulators, auditors, and any party appointed or requested by applicable regulators to carry out investigations or audits of Our activities;
3. professional advisors who advise and assist Us in enforcing Our contracts and policies, handling Our claims, effective management of Our company and in relation to any disputes We may become involved in.

3. Legal basis for processing (EEA region)

3.1 If You are a data subject from the European Economic Area, Our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which We collect it.

3.2 We will normally collect Personal Data from You only where it is needed to perform a contract with You, where the Processing is in Our legitimate interests and not overridden by Your data protection interests or fundamental rights and freedoms, or where We have Your consent. In some cases, We may also have a legal obligation to collect Personal Data from You. If We Process Personal Data with reliance on Your consent, You may withdraw Your consent at any time.

3.3 If You have questions or need further information concerning the legal basis on which We collect and use Your Personal Data, please contact Us using the contact details provided under clause 12.

4. International transfer

4.1 We Process Personal Data in India and in other jurisdictions where We or Our sub-processors operate. We may transfer Personal Data outside Your country of residence only for the purposes referred to in clause 2. We will ensure that the recipient of Your Personal Data offers an adequate level of protection that is at least comparable to that which is provided under applicable data protection laws.

4.2 If You are a resident of the European Economic Area and when Your Personal Data is Processed outside the EEA, We will ensure that the recipient of Your Personal Data offers an adequate level of protection, for instance by entering into standard contractual clauses for the transfer of Personal Data as approved by the European Commission (Article 46 GDPR), or We will ask You for Your prior consent to such international data transfers.

5. Security of Personal Data

We use appropriate technical and organizational measures to protect the Personal Data that We collect and Process. The measures We use are designed to provide a level of security appropriate to the risk of Processing Your Personal Data. If You have questions about the security of Your Personal Data, please contact Us using the contact details provided under clause 12.

6. Retention of Personal Data

6.1 We will retain Your Personal Data for as long as reasonably necessary to provide You with Our Services that You request, for marketing purposes unless You opt out as described in this Policy, or otherwise where permitted or required in accordance with applicable law. We will retain and use Your Personal Data as necessary to comply with Our legal obligations, resolve disputes, and enforce Our agreements.

6.2 In the absence of a need to retain Personal Data under clause 6.1 above, We will either delete it or aggregate it or, if this is not possible then We will securely store Your Personal Data and isolate it from any further processing until deletion is possible.

7. Your privacy rights

7.1 You have the right to opt out of marketing communications We send You at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails We send You. To opt out of other forms of marketing, please contact Us.

7.2 You are entitled to the following rights:

7.2.1 You can request access to your Personal Data.

7.2.2 You can request that We correct inaccurate Personal Data about You, subject to appropriate verification.

7.2.3 You may have the right to request that We delete Personal Data that We have collected from You, subject to certain exceptions.

7.2.4 If You are a resident of the EEA, UK, or Switzerland, You are also entitled to object to the Processing of Your Personal Data, ask Us to restrict the Processing of Your Personal Data, or request portability of Your Personal Data.

7.2.5 If We have collected and processed Your Personal Data with Your consent, then You can withdraw Your consent at any time. Withdrawing Your consent will not affect the lawfulness of any processing We have conducted prior to Your withdrawal, nor will it affect Processing of Your Personal Data conducted in reliance on lawful processing grounds other than consent.

7.3 You have the right to appeal a decision We have made in connection with Your privacy rights request by contacting Us using the contact information provided in Clause 12. You also have the right to complain to a data protection authority about Our collection and use of Your Personal Data.

7.4 If You seek to exercise Your rights under this clause, please contact Us at the details provided in clause 12. We will verify any requests before acting on the request and respond within a reasonable timeframe in accordance with applicable data protection laws. We will not discriminate against You if you decide to exercise Your privacy rights. We may decline a request if We are unable to verify Your identity (or an agent’s authority to make the request).

8. Notice for California residents

8.1 Clause 8 applies only to California residents and the Personal Information We collect as a Business. For the purposes of this section, the terms “Business”, “Business Purpose”, “Consumer”, “Personal Information”, “Sale/Sell”, “Service Provider”, “Sensitive Personal Information” and “Share” shall have the meaning given to them under the CCPA as amended by the CPRA.

8.2 Categories of Personal Information We may collect include identifiers (name, email, account name, IP address); commercial information (transaction and payment information); internet or other electronic network activity and device information; and geolocation data such as device location.

8.3 We disclose such Personal Information for Business Purposes described in clause 2 to service providers or contractors who support our business. We shall not disclose further the Personal Information collected for verification of a consumer’s request or retain it longer than necessary for verification.

8.4 We do not Sell Personal Information. Some analytics or advertising cookies on Our Website may be considered a “Sale” or “Share” under California law. You may opt-out as described in clause 9.

8.5 As a California resident, You have the right to know, delete, opt-out of sale/share, and not to be discriminated against for exercising CCPA rights. To exercise these rights, contact Us using clause 12.

9. Cookie policy

9.1 Cookies are text files that are placed on Your computer to collect standard internet log information and visitor behaviour information by Us. When You visit the Website(s), We may collect Personal Data automatically from You through cookies or similar technology.

9.2 Necessary Cookies: We set essential cookies that enable core functionality such as security, session management (including the pbtoken authentication cookie), and accessibility. You may not opt-out of these cookies. You may disable these by changing Your browser settings, but this may affect how the Website(s) functions.

9.3 Statistics, Preference, and Marketing Cookies: We may set these cookies to help Us improve Our Website(s) by collecting and reporting information on how You use them, and to remember preferences such as theme. Where required by law, a cookie banner will provide options to opt out of non-essential cookies.

10. Privacy of children

We recognize the importance of children's safety and privacy. Our Services are not directed to individuals under the age of 16. We do not knowingly request, or collect, any Personal Data from children under the age of 16. If We become aware that an individual under 16 has provided Us with Personal Data, We will take steps to delete such data as soon as possible. If a parent or guardian becomes aware that his or her child has provided Us with Personal Data, they should write to Us at the email address provided in clause 12.

11. Notice to End-User and other exclusions

11.1 Our Services are intended for use by businesses. Except for the Personal Data collected from You for the purposes mentioned under clause 2, this Policy is not applicable to Our Processing of any Personal Data transmitted by the Customer as part of the Customer Data. We may receive End-Users’ Personal Data as a part of the Customer Data for which We will only act as a Processor and such Processing will be governed by the Terms and the DPA. In such a case, the End User’s data privacy questions and requests should be submitted to the Customer in its capacity as a Controller. We are not responsible for Customers’ privacy or security practices which may be different from this notice.

11.2 Our Website(s) contain links to other Websites. Our Policy applies only to Our Website(s), so if You click on a link to another Website, You should read their privacy policy.

12. Contact information

You may contact us if you have any inquiries or feedback on our data protection policies and procedures:

Kind Attention: PilotApps.ai (Amaravel Technologies) Privacy Team
Email Address: support@pilotapps.ai

13. Changes to the Policy

We may update this Policy from time to time in response to changing legal, technical, or business developments. When We update Our Policy, We will take appropriate measures to inform You, consistent with the significance of the changes We make. We will obtain Your consent to any material Policy changes if and where this is required by applicable data protection laws. You can see when this Policy was last updated by checking the “Last Updated” date displayed at the bottom of this Policy.

Effective Date: 18 August 2026
Last Updated: 18 August 2026