Privacy Architecture
Last Revision: 2026-08-19
Privacy Policy
[ DATA_COLLECTION_LAYER ]
Click Pilot collects only the absolute minimum telemetry required to operate the service. We do not sell, share, or broker your data with third parties.
-
01
Identity
Google account email address — used strictly to create and authenticate your license account via the portal. -
02
Billing & Encryption
Prepaid balances and device token associations are stored in our database. License keys are cryptographically hashed at rest (SHA-256) for maximum security. All payment processing is securely offloaded to Stripe; Click Pilot never touches, sees, or stores your raw credit card data. -
03
Telemetry
Server-side request logs — IP address, timestamp, API endpoint, and HTTP status code are retained temporarily for security and abuse prevention. -
04
Screen Analysis & Zero Retention
Screenshots are transmitted to our AI provider solely to generate navigation instructions. Click Pilot does not store, log, or retain your screen images at any point.
Data in Transit & AI Processing
All communication between your device and our servers is secured via enterprise-grade HTTPS/TLS encryption. Click Pilot utilizes commercial, enterprise-tier API infrastructure for visual processing (Google Gemini). Under these strict B2B data agreements, your screen images are processed entirely transiently and are immediately discarded. Your data is never stored at rest and is strictly never used to train any AI models by either Click Pilot or our infrastructure providers.
Cookies
We use a single functional session cookie to maintain your logged-in state in the account portal. This cookie does not track cross-domain activity and is cleared when you log out. Client applications use localized, on-device storage for your license key.
Compliance Query?
If you require a detailed audit of our privacy practices or wish to exercise your right to request deletion of your account data, contact our engineering core directly.
alternate_email support@gracetechnology.org