Privacy Policy
Last Updated: January 2025
🔒 Key Principle: We collect only what's necessary to operate the Service. We do NOT access your model inputs, outputs, or generated content.
1. Introduction
This Privacy Policy explains how ModelPilot ("we", "us") collects, uses, and protects your information when you use our Service.
2. Information We Collect
Account Information
- Email address
- Name (optional)
- Password (hashed, never stored in plain text)
- OAuth profile data (if you sign in with Google/GitHub)
Billing Information
- Credit balance and transaction history
- Payment processed by Stripe (we never see your card details)
- Stripe Customer ID for linking your payments
Deployment and Usage Data
- Deployment IDs, names, and configurations
- Model type and instance type selected
- Start/stop timestamps
- Pod status (running, stopped, failed)
- Compute costs and billing increments
- IP address and user agent (for fraud prevention)
Persistent Storage (Optional)
- If you enable persistence, data is stored in Google Cloud Storage
- We do not access this data
- You control and own the GCS bucket
Cookies and Analytics
- Essential cookies: Session cookies for authentication (required to use the Service)
- Analytics cookies: We use Google Analytics 4 to understand how visitors use our site (optional - you can opt out)
- No advertising or marketing cookies
For detailed information about cookies we use, see our Cookie Policy.
3. What We DON'T Collect
- Your model prompts or inputs
- Your model outputs or generated content
- Files stored in your persistent volumes
- Browsing history or behavior outside ModelPilot
4. How We Use Your Information
To Provide the Service:
- Create and manage your account
- Process deployments and billing
- Communicate about your account (service emails, billing alerts)
To Improve and Protect:
- Analyze usage patterns (anonymized) to improve features
- Detect and prevent fraud or abuse
- Provide customer support
We DO NOT:
- Sell your personal data
- Use your data for advertising
- Train AI models on your data
5. Who We Share Data With
Third-Party Service Providers
Legal Requirements: We may disclose information if required by law, subpoena, or to protect our rights.
We do NOT sell your data to third parties.
6. Data Retention and Deletion
- Account Data: Retained while your account is active
- Billing Records: Retained for 7 years (tax/legal requirements)
- Deployment Logs: Retained for 90 days, then deleted
- Persistent Storage: YOU control deletion via Google Cloud Storage
Deleting Your Account
Email support@modelpilot.app to request account deletion. We will:
- Delete your account within 30 days
- Retain billing records for legal compliance
- NOT delete your GCS persistent storage (you control that)
7. Data Security
We protect your data with:
- Encryption in transit (HTTPS)
- Encrypted password storage (bcrypt)
- Secure session management
- Regular security updates
Your Responsibility:
- Keep your password secure
- Don't share API keys or tokens
- Secure your RunPod API key (if you provide one)
No system is 100% secure. We cannot guarantee absolute security.
8. International Users and GDPR
Data Location: Your data is processed in the United States (Google Cloud, Stripe, RunPod are US-based).
Legal Basis for Processing (GDPR):
- Contract: To provide the Service you requested
- Legitimate Interest: To improve and secure the Service
- Consent: For optional features
Your Rights (EEA/UK Users):
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Delete your account (subject to legal retention)
- Portability: Export your data
- Object: Object to certain processing
- Withdraw Consent: For optional features
To exercise these rights, email support@modelpilot.app
9. Children's Privacy
We do not knowingly collect data from anyone under 18. If we discover we have, we'll delete it immediately.
10. California Privacy Rights (CCPA)
California residents have additional rights:
- Know: What personal information we collect and how we use it
- Delete: Request deletion of your personal information
- Opt-Out: We don't sell data, so nothing to opt out of
- Non-Discrimination: We won't discriminate for exercising your rights
To exercise rights: support@modelpilot.app
11. Changes to This Policy
We may update this Privacy Policy. We'll notify you of material changes via email or a notice on the Service. Continued use after changes = acceptance.