Privacy Policy — CraftPilot AI

This Privacy Policy describes how CraftPilot AI (“we”, “us”, or “our”) collects, uses, and protects your information when you use the CraftPilot AI Chrome extension and website (craftpilot.ai). By using our services, you agree to the terms of this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: Your email address when you register or sign in via Firebase Authentication.
• Extension usage data: Features used, generation counts, and interaction patterns — used exclusively to improve the service quality.
• Jira ticket content: Text from Jira issues that you voluntarily submit for AI processing. This data is transmitted transiently to our processing pipeline and is not stored permanently.
• Payment information: Handled entirely by our payment processor (Stripe). We do not store credit card numbers or full payment details.

2. How We Use Your Information

We use the collected information solely to:

• Provide and continuously improve the CraftPilot AI service.
• Process your generation requests through our AI pipeline.
• Send transactional emails (account confirmation, password reset, billing notifications).
• Analyze aggregate, anonymized usage patterns to improve model accuracy and user experience.
• Comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following trusted third-party services to operate CraftPilot AI:

• Firebase (Google): Authentication and real-time configuration. Subject to Google’s Privacy Policy.
• n8n: Workflow automation platform used for our AI processing pipeline. Data is processed transiently and not retained by n8n.
• Pusher: Real-time WebSocket communication for streaming AI responses. Data is not persisted by Pusher.
• Xray API (Atlassian): Test case export functionality. Data is sent to Xray only when you explicitly trigger an export action.
• Stripe: Payment processing. We share only the minimum information required to complete transactions. Subject to Stripe’s Privacy Policy.

4. Data Retention

• Account information is retained for as long as your account is active.
• Jira ticket content submitted for AI processing is not retained beyond the duration of the request (typically a few seconds).
• You may request deletion of your account and all associated data at any time by contacting us at contact@craftpilot.ai.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): Request deletion of your personal data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to certain types of processing, including direct marketing.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.

To exercise any of these rights, please contact us at contact@craftpilot.ai. We will respond within 30 days.

6. Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit.
• Firebase Security Rules to restrict data access.
• Strict access controls within our engineering team.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Children’s Privacy

CraftPilot AI is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of material changes by:

• Updating the “Last updated” date at the top of this page.
• Sending an email notification to registered users for significant changes.

Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to report a data concern, please contact us:

Email: contact@craftpilot.ai Website: https://craftpilot.ai