Privacy Notice

Chat Pilot is operated by TIME PLUS (PRIVATE) LIMITED (“we”, “us”), a private limited company incorporated in Pakistan on 12 August 2026 under company registration number 0350392. For the personal data described here we act as the data controller: we decide what is collected and why. Privacy questions and data requests go through our contact page and are answered by email.

• Account data — email address, display name, date of birth (to confirm you are old enough to hold an account), and optional profile details such as avatar, bio, location, timezone, occupation and website. Used to create and run your account. Legal basis: performance of our contract with you.
• Authentication and security data — password hashes held by our authentication provider, one-time email codes, passkey credentials, trusted-device fingerprints, sign-in and security events, and IP address. Used to sign you in, run two-step verification, and detect abuse. Legal basis: contract and our legitimate interest in keeping accounts secure.
• Content you submit — chats, prompts, uploaded documents and files, project notes, and saved memories. Used to provide the assistant’s answers, search and memory features. Legal basis: performance of our contract with you.
• Usage and billing records — plan, credit consumption, subscription status and payment records received from our payment provider. Used to enforce plan limits, show your balance, and keep accurate billing history. Legal basis: contract and legal obligation.
• Technical and support data — device and browser information, error logs, and messages you send us. Used to fix problems, improve the product and answer support requests. Legal basis: legitimate interests.
• Connected accounts — tokens and settings for third-party services you choose to connect. Used only to perform the actions you ask for. Legal basis: consent, which you can withdraw by disconnecting the service.
• Marketing preferences — whether you want product updates or a digest. Legal basis: consent.

We do not sell personal data, and we do not use your private chats or documents to train our own models.

Please do not paste passwords, full card numbers, government identity numbers or other highly sensitive secrets into chats. Chat Pilot’s memory system is designed to refuse to store credentials of that kind, but the safest approach is not to submit them.

• AI model providers — the prompt, and the relevant files or memory context needed to answer it, are sent to the model provider that generates the response.
• Hosting, database and email providers — our infrastructure processors, who store your account data and content and deliver transactional email such as verification codes.
• Paddle.com — our Merchant of Record for the sale of Chat Pilot subscriptions, handling checkout, subscription management, payments, invoicing, tax compliance and refunds. Paddle handles your payment details directly; we never see or store your full card number.
• Third-party services you connect — only the data needed for the action you requested.
• Professional advisers and authorities — legal and accounting advisers, and public authorities where the law requires it.

Our providers operate data centres outside your country, so your data may be processed abroad. Where data originates in the UK or EEA, transfers rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Account data, chats, documents and memories are kept while your account is open, so the product works as you expect. You can delete individual chats, documents and memories at any time, and deleting your account removes your content from our production systems. Security and billing records are kept for as long as needed for fraud prevention, accounting and tax purposes, then deleted or anonymised.

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or provide it in a portable form, and you can withdraw consent where processing relies on consent. Send the request through our contact page and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level database authorisation so accounts can only reach their own data, server-side authorisation for privileged actions, two-step verification, passkeys, and audit logging of security events. No system is perfectly secure, so please use a strong unique password and enable two-step verification.

We use strictly necessary cookies and browser storage to keep you signed in, remember trusted devices, and store interface preferences. We do not use advertising cookies. You can clear this data in your browser settings, but doing so signs you out.

Chat Pilot is not intended for children. We ask for date of birth at sign-up and do not knowingly create accounts for anyone under 16. If you believe a child has an account, contact us and we will remove it.

We will update this page when our practices change and revise the date above. Material changes are announced by email or in the app. See also our Terms & Conditions and Refund Policy.