Privacy Policy

1. Introduction

This Privacy Policy describes how Pilotify ("Pilotify", "we", "us", or "our") collects, uses, and shares information about you when you install and use the Pilotify application (the "App") on your Shopify store.

The App is operated by:

MECKLER DAVID (trading as CEODMLIMITED)

SIREN: 951067677 · SIRET: 95106767700017

VAT: FR35951067677 · RCS Annecy

Website: pilotify.fr

By installing or using the App, you agree to the collection and use of your information in accordance with this Privacy Policy.

2. Information We Collect

When you install and use Pilotify, we collect the following information:

2.1 — From Shopify

• Shop domain and store name
• Store owner email address
• Store data as authorized by the scopes you grant during installation (such as product data)

2.2 — When you subscribe to a paid plan

• Full name
• Email address
• Phone number (if provided)
• Billing address
• Payment information — processed securely by Stripe (we do not store card numbers)

2.3 — Usage & Analytics

• Login events (date and time of connections)
• Feature usage (actions performed within the App)
• Subscription and payment status

This data is visible only to Pilotify administrators and is used exclusively for product improvement and support purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App and its features
• Process your subscription and payments via Stripe
• Authenticate your Shopify store and execute authorized actions on your behalf
• Communicate with you about your account, updates, and support requests
• Monitor usage to detect errors and improve the App
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Performance of a contract — to fulfill our obligations when you subscribe to the App
• Legitimate interests — to operate, secure, and improve the App
• Legal obligation — to comply with applicable laws

5. Third-Party Services

We use the following third-party services that may process your data:

• Shopify — e-commerce platform providing the API and merchant data
• Stripe — payment processing, subscription management
• Anthropic (Claude API) — AI processing of store data to perform tasks within the App
• Google Cloud — cloud infrastructure and related services
• Hostinger — web hosting and server infrastructure, servers located in the EU

Each of these providers has its own privacy policy. We encourage you to review their practices.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your data only:

• With service providers listed in Section 5 who help us deliver the App
• If required by law, court order, or governmental authority
• To protect the rights, property, or safety of Pilotify, our users, or others

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the App. Upon cancellation of your subscription or deletion of your account, we will delete or anonymize your personal data within 30 days, unless we are required to retain it for legal or regulatory purposes.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Data is transmitted over encrypted connections (HTTPS/TLS). However, no method of transmission over the Internet is 100% secure.

9. Your Rights (GDPR)

If you are located in the EEA or the UK, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — to request deletion of your data
• Right to restrict processing — to request limitation of how we use your data
• Right to data portability — to request your data in a machine-readable format
• Right to object — to object to processing based on our legitimate interests

To exercise any of these rights, please contact us at: privacy@pilotify.fr

10. Cookies

The App may use session cookies or similar technologies solely for authentication and security purposes. We do not use cookies for tracking or advertising.

11. Children's Privacy

The App is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and, where appropriate, by email. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of the App after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

MECKLER DAVID — CEODMLIMITED

Email: privacy@pilotify.fr

Website: pilotify.fr

Postal address: France (RCS Annecy)