Privacy Policy

Last updated: June 29, 2026

In plain English: We collect what we need to run your account and billing. Your footage is only used to make grades — a downscaled frame goes to our AI provider, we don't store your footage, and we never use it to train models or sell it.

1. Who we are

This Privacy Policy explains how ColorPilot (“we,” “us”) handles information when you use the ColorPilot app, website, and services (the “Service”). By using the Service, you agree to this Policy.

2. Information we collect

Account information — your email, name, and a securely hashed password (we never store your password in plain text).
Subscription & usage — your plan/trial status and a count of how much AI usage you've used in the current period (to enforce limits).
Payment information — handled entirely by our payments provider, Lemon Squeezy. We do not receive or store your card details.
Footage you process — the frames you grade (see §3).
Basic technical data — e.g. app version and error/diagnostic logs needed to operate and secure the Service, and your IP address and browser/device (User-Agent) recorded with each login session for security.

3. How your footage is handled

When you generate a grade, ColorPilot downscales a single still frame and sends it to our AI provider (Anthropic) to produce the grade. We do not store your footage on our servers, we do not sell it, and it is not used to train AI models. Your media stays on your device except for that downscaled frame used to fulfill your request.

4. How we use information

We use the information above to: provide and operate the Service; create grades you request; manage your account, trial, and billing; enforce usage limits; provide support; and keep the Service secure and reliable.

5. Service providers

We rely on a small number of trusted providers to run the Service:

Cloudflare — hosting, database, and authentication storage.
Anthropic — the AI that generates grades (receives a downscaled frame + your prompt).
Lemon Squeezy — payments and subscription management.
Resend — sends account emails (welcome, password reset); receives your email address.

These providers process data only to provide their services to us.

6. Cookies & local storage

We store a login token in your browser/app so you stay signed in. We do not use advertising or cross-site tracking cookies.

7. Data retention

We keep your account and subscription data while your account is active. If you close your account or ask us to delete it, we remove your personal data, except where we must keep limited records (e.g., for tax or legal reasons).

8. Your rights

You can access, correct, or delete your personal information by emailing us. Depending on where you live (e.g., the EU/UK under GDPR, or California under CCPA), you may have additional rights over your data, which we honor.

9. Security

We take reasonable measures to protect your data — for example, AI API keys are kept server-side and never shipped in the app, and passwords are hashed. No method of storage or transmission is 100% secure, but we work to protect your information.

10. Children

The Service is not directed to children under 13 (or 16 in the EU), and we do not knowingly collect their data.

11. International users

The Service runs on Cloudflare's global network and data may be processed in the United States and other countries. By using the Service you consent to this processing.

12. Changes to this Policy

We may update this Policy from time to time. We'll update the “Last updated” date and post changes on this page.

13. Contact

Questions about your privacy or this Policy? Email support@colorpilot.io.