Privacy Policy
CompliancePilotAI.io is operated by Garrett Medical Technologies LLC ("we", "us"). This policy explains what we collect when you use the website and service, why, who helps us process it, and how to have it deleted. Questions go to Info@CompliancePilotAI.io.
What we collect
Information you give us
- Your email address and the website you ask us to scan, when you request a free scan, sign in, download a resource, or ask for the free book chapter.
- Contact form details: name, organization, email, phone, website, number of sites, and your message.
- Purchase details. Payments are handled by Stripe. We never see or store your card number. Stripe tells us your name, email, what you bought, the amount, and whether a subscription is active, cancelled, or behind on payment.
- Content you submit for review: pasted text, and the text we read out of screenshots and documents you upload. We keep the extracted text and the review results. We don't keep the uploaded image or file itself.
- Preflight profile and history: practice name, type, services, location, tone, words to avoid, and the posts you check or have written.
- Report branding for agencies: business name, logo, color, and contact email shown on your reports.
Information from websites you ask us to scan. We read the public pages of the website you enter and store their text with your report. These pages are public, and the website may belong to someone other than you.
Information collected automatically
- One sign-in cookie, which keeps you signed in and remembers that you've unlocked a download. We don't use analytics, advertising, or tracking cookies.
- Server logs kept by our hosting provider, such as IP address, page requested, and time, used for security and troubleshooting.
- The video on our homepage is embedded from YouTube in its privacy-enhanced mode. YouTube may set its own cookies once you press play.
Please don't send us patient information
The service reviews marketing content. It isn't built for patient records, and you shouldn't submit protected health information. Before uploading a screenshot or document, remove patient names, faces, and other identifiers, for example in before-and-after photos or testimonials. We are not acting as your HIPAA business associate and don't sign business associate agreements.
How we use it
- To run scans, produce and deliver reports, review content you submit, and rescan sites on your plan.
- To send the emails the service depends on: your report, sign-in links, receipts, rescan results, and purchased downloads.
- To process payments and manage subscriptions.
- To answer you when you contact us.
- To send occasional compliance updates if you asked for the free chapter or another resource. You can unsubscribe at any time by replying to any of those emails.
- To improve our rules and publish aggregate findings (for example, "44% of the sites we scanned had a Critical finding"). We don't name the websites behind those numbers.
Who processes it for us
We use a small number of service providers, only to run the service:
- Stripe: payments and subscription billing.
- Anthropic: the AI that reviews page text and the content you submit.
- Resend: sending email.
- Railway: hosting the website and its database.
We don't sell your personal information, and we don't share it for advertising. We may disclose information if the law requires it, or as part of a sale or merger of the business, in which case this policy continues to apply to it.
How long we keep it
We keep your account information, reports, and review history while you use the service, and for 24 months after your last activity, so past reports stay available if you come back. Payment records are kept as long as tax and accounting rules require. You can ask us to delete your information at any time.
Your choices
- See, correct, or delete your information: email Info@CompliancePilotAI.io from the address on your account. We'll respond within 30 days.
- Stop marketing emails: reply to any of them and ask. Emails the service needs to work, such as receipts and sign-in links, continue while you have an account.
- Cancel a subscription: from Billing when signed in.
Depending on where you live, you may have additional rights under state privacy laws. To use them, email us as above.
Security
The site runs over encrypted HTTPS, the back office is password-protected, and each report sits at its own long, unguessable link. Anyone you share a report link with can open it, so share it only with people you trust. No system is perfectly secure, but we work to protect what you give us.
Children
The service is for businesses and isn't directed to anyone under 18.
Changes
If we change this policy, we'll post the new version here with a new effective date. If a change is significant, we'll email account holders before it takes effect.