Privacy policy

The short version

• The app collects nothing. No telemetry, no phone-home, no crash reporting.
• The website runs no analytics and loads no third-party fonts or trackers.
• We process personal data only where unavoidable: your account (if you create one), your purchases (via our merchant of record) and standard infrastructure logs.

1. The Pilot desktop application

Pilot runs entirely on your machine. All cluster data, including resources, logs, metrics and secrets, stays local. The only outbound connections the app makes are:

• to the Kubernetes API servers configured in your kubeconfig, and
• optionally, to an AI endpoint that you explicitly configure and consent to. The AI assistant is off by default; if you never enable it, no such connection is ever made.

License verification happens offline against a signed license file. There is no activation server and the app never contacts us.

2. The pilot8.io website

We do not use analytics, advertising or tracking scripts, and we do not embed third-party fonts. Our infrastructure providers process technical data needed to deliver the site:

• Cloudflare (CDN/proxy) processes IP addresses and request metadata to route and protect traffic.
• Our servers (hosted in the EU) keep short-lived technical logs for security and operations.

3. Accounts

An account is only needed to buy and retrieve licenses. When you sign in with Google or GitHub we receive your name, email address and avatar from the provider and store them, along with a session cookie that is strictly necessary for the account area to work. We do not use cookies for anything else and there are no marketing cookies.

4. Purchases

Checkout is operated by our merchant of record (Paddle), which processes your payment details, billing address and tax information as an independent seller of record. Card details never reach our servers. We store the purchase outcome (subscription status, transaction reference) and the license files we issue to you, which contain your name and email address.

5. Retention

Account, purchase and license records are kept while your account exists and as long as required for tax and accounting law. You can request deletion of your account by emailing us; records we must keep by law are retained for the legally required period only.

6. Your rights

Where the GDPR or comparable laws apply, you have the right to access, rectify, export and erase your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority. To exercise these rights, email [email protected].

7. Controller

Core Engine. Full controller details to be completed during legal review; see the imprint. Contact: [email protected].