Privacy Policy

MarkPilot (“MarkPilot”, “we”, “us”) provides an AI marketing platform that helps businesses create and publish content to their connected social media accounts. This policy explains what we collect, how we use it, and your choices. By using MarkPilot (the “Service”) at trymarkpilot.com, you agree to this policy.

Information we collect

• Account information — your name, email, password (stored hashed), and the brand/team details you provide when you sign up.
• Connected accounts — when you connect a social account (e.g. Instagram, X), we receive access tokens and basic profile/account identifiers from that platform via OAuth. Access tokens are stored encrypted and used only to publish and manage content you authorize.
• Content — the prompts, brand details, captions, hashtags, and images you create or that our AI generates on your behalf, and the posts we publish for you.
• Usage & device data — log data, IP address, browser type, and how you interact with the Service.
• Billing data — plan and transaction records. Payments are processed by our payment provider; we do not store full card numbers.

How we use your information

• Operate the Service — generate content, run brand-safety checks, and publish to your connected accounts at your direction.
• Authenticate you and keep your account secure.
• Process payments and manage subscriptions.
• Provide support, send service-related communications, and improve the Service.
• Meet legal and regulatory obligations.

AI processing

To generate captions, hashtags, and images, your prompts and brand information are sent to our AI provider (Anthropic) for processing. We do not sell this data, and we do not use your private content to train third-party models beyond what is required to fulfil your request.

Social platform data

When you connect Instagram, Facebook, or X, we access and use platform data only to provide the features you request — such as publishing posts and reading basic account information. We use this data in accordance with the Meta Platform Terms, the Instagram Platform policies, and the X Developer Agreement. We do not use platform data for advertising, and we do not sell it.

Google user data & Limited Use

If you connect a Google account, MarkPilot uses Google APIs only with your explicit consent and only to display your own marketing data back to you inside the Service:

• Google Analytics (Google Analytics Data API, analytics.readonly) — we read your own Google Analytics 4 metrics (users, sessions, page views, traffic sources and top pages) for the property you authorize and show them, read-only, in your Insights dashboard.
• Google Search Console (Search Console API, webmasters.readonly) — we read your own search-performance data (clicks, impressions, average CTR and position, top queries and pages) for sites you own and display it, read-only, in your Insights dashboard.

We request read-only access, never modify your Google data, and access only the properties and sites you explicitly authorize. You can disconnect Google at any time from Integrations, which revokes our access.

MarkPilot’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell or transfer it, and we do not use it to train AI/ML models — it is used solely to provide the user-facing analytics features you request.

Sharing & sub-processors

We share data only with service providers that help us run MarkPilot, under appropriate safeguards:

• Social platforms (Meta/Instagram, X) — to publish and manage your content.
• Anthropic — AI content generation.
• Amazon Web Services — image generation and hosting.
• Vercel (application hosting) and Neon (database hosting).
• A managed publishing API provider, where used to deliver posts to social platforms.
• A payment processor for billing.

We may disclose information where required by law. We do not sell your personal data.

Data residency

MarkPilot is operated from India and billed in Indian Rupees (INR). Our application and database are hosted in the Singapore / Asia-Pacific (ap-southeast) region, and some processing — such as AI content generation and image generation by our sub-processors — may occur in other regions under appropriate safeguards and their data-processing terms. By using the Service, you consent to your data being processed in these locations. We handle personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws.

Data retention & deletion

We retain your data while your account is active. You can disconnect any social account in one click, which revokes our stored access for that account. To delete your account and associated data, use the in-app account controls or email us; we will delete or anonymise your data within 30 days, except where we must retain it for legal or accounting reasons.

Data deletion requests: email privacy@trymarkpilot.com with the subject “Data Deletion” and the account email to delete.

Security

Access tokens and sensitive credentials are encrypted at rest. We apply industry-standard measures to protect your data, though no method of transmission or storage is completely secure.

Your rights

Depending on where you live — including under India’s Digital Personal Data Protection Act, the GDPR, and similar laws — you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact the data fiduciary and grievance officer details set out under Data Fiduciary & Grievance Officer below.

Data Fiduciary & Grievance Officer

Under India’s Digital Personal Data Protection Act, 2023 (DPDPA), the data fiduciary responsible for your personal data is:

Brilliant Minds Global Private Limited
375, Near ICICI Bank, Moti Doongari Road, Adarsh Nagar, Jaipur, Rajasthan 302004, India

To exercise your DPDPA rights (access, correction, erasure, withdrawal of consent) or to raise a grievance about how we handle your data, contact our Grievance Officer, Sumit Gilhotra, at support@trymarkpilot.com. We will acknowledge and respond to your request within the timelines required by law.

Cookies

We use essential cookies to keep you signed in and to operate the Service, plus limited analytics to understand usage. You can control cookies through your browser settings.

Children

MarkPilot is not directed to children under 18, and we do not knowingly collect their data.

Changes

We may update this policy. We’ll post the new version here and update the “Last updated” date; material changes will be communicated where appropriate.

Contact

Questions or requests: privacy@trymarkpilot.com.