ShotPilot Privacy Policy

ShotPilot Privacy Policy

Draft pending user confirmation. This text is an implementation-aligned draft. It must not be treated as a published legal document until the product owner reviews and explicitly approves it.

Last updated: 2026-08-13

ShotPilot is a store-screenshot workspace operated with CorePlatform account, billing, and AI services. This draft describes how the current product actually works.

If you do not agree with this Policy, do not use ShotPilot.

1. What the product stores locally

ShotPilot is browser-local first. The following stay in the current browser profile for the signed-in account and are not synced to a ShotPilot cloud workspace:

  • project / workspace documents
  • conversation history
  • source screenshots (IndexedDB blobs)
  • a 30-day recently deleted list for projects you delete in this browser
  • optional .shotpilot backup files that you export yourself

Clearing site data, switching browsers or devices, or deleting the browser profile without a .shotpilot backup makes those files unrecoverable. ShotPilot does not provide automatic cloud backup or cross-browser restore.

2. What is sent to hosted services

When you sign in or use AI generation, ShotPilot uses the shared CorePlatform services:

  • Account: email, authentication session, and project identity
  • AI requests: the text and source images needed for the current generation request are sent to the managed AI gateway; they are used to produce store-story output, not to create a ShotPilot-specific cloud library
  • Billing: subscription and credit records for purchases made through the generic platform billing APIs (currently Creem for web checkout)

We do not ask you to paste provider API keys, supplier URLs, or model IDs into the browser.

3. What we do not do

  • We do not operate ShotPilot-specific cloud workspaces, cloud assets, or session sync.
  • We do not automatically recover projects on a new browser.
  • We do not publish screenshots directly to the Apple App Store or Google Play. You export a ZIP and upload it yourself.
  • We do not sell your screenshots or use them to train a public model as part of this product.

4. Account deletion

You can delete your platform account from ShotPilot Settings. After the generic DELETE /users/me request succeeds, ShotPilot clears this browser’s current-user project data, source images, and pending checkout ID, then signs you out.

Account, subscription, and credit records on the platform are handled by the shared account-deletion process. Local projects are not uploaded as part of deletion. Export a backup first if you still need them.

5. Contact

  • Support email: [email protected]
  • Privacy / Terms / Support drafts: https://legal.opaic.me/ShotPilot/