← Back to Pilely

This document is provided in English.

Pilely Privacy Policy

Last updated: October 21, 2026

This Privacy Policy describes how Pilely ("Pilely", "we", "us") collects, uses, and protects your information when you use pilely.app and related services (the "Service"). By using the Service you agree to this policy.

1. What we collect

We collect only what we need to run the Service:

  • Email address. Used to create and identify your account, sign you in, and send you essential service notices (login, billing, security).
  • Your source bundles and app data. When you build and deploy an app, we store your source bundles and snapshots so you can resume your work from anywhere, on any device or AI agent client.
  • Traffic records for apps with a backend. When a request is forwarded to an app's own backend, we record the request — method, path, query, sizes, timing, the outcome, and the account of the caller when they are signed in — and we keep a copy of the request and response bodies. It is what lets us meter traffic accurately, tell an owner why their app is failing, and investigate abuse. Requests answered without a backend (a page load, a static app) are not recorded this way.
  • Billing and usage records. We keep records of your subscription, balance, and metered usage (such as traffic and storage) so we can bill you accurately.
  • Payment information. Payments are processed by Stripe. Stripe collects and stores your payment details (such as card numbers); we do not store them ourselves. Stripe's handling of your data is governed by Stripe's own privacy policy.
  • Domain registrant details, only if you buy a domain through us. ICANN requires a registrant record for every domain: your name, email, phone, street address, city, region, postal code, and country. We collect it when you ask us to register a domain and pass it to the registrar to complete the registration. WHOIS redaction is applied. We do not ask for any of this unless you buy a domain.

Some things you choose are public by design and are not private data: your @handle, the introduction on your profile page, and the title, description and icon of a public app.

2. Your data is private

  • All of your data — your email, your source bundles, your app data — is private by default. Only content you explicitly publish (for example, a deployed app made publicly reachable at your handle) is visible to others.
  • We do not sell your data, and we do not share it with any third party beyond the providers we need to run the Service, each described in Section 5 and each given only what its job requires.
  • We do not proactively read, inspect, or review your private data, except where strictly necessary to operate the Service (for example, automated processing to store and serve your bundles, and the traffic records described in Section 1) or where required by law.
  • If your content is reported to us by other parties (such as other users or authorities), we may — abiding by this policy and applicable law — review the reported content internally, and disclose it to law authorities where legally required. See the Product Terms for details.
  • We do not train any AI or LLM models on your data. Never.

3. Legal disclosure

If required by a local authority under applicable law (for example, a valid court order or legal process), we may disclose your email address and payment-related information to that authority. We will limit any such disclosure to what the law requires.

4. Data that flows through AI agent clients

You typically build with Pilely through an AI agent client of your choice (such as Claude, ChatGPT, or others). When you do, your prompts, code, and other data pass through that provider's servers. We do not control, and are not responsible for, how those providers handle your data. Please review the privacy policy of the AI agent client you use.

5. Third-party providers

We rely on third-party infrastructure providers to operate the Service: cloud hosting and storage, Stripe for payments, an email provider for the codes and notices we send you, and — only if you buy a domain — a domain registrar. Each receives only what its job requires. We choose reputable providers and configure them carefully, but if a provider suffers a failure, breach, or data loss caused by their mistake, we are not responsible for that loss, to the maximum extent permitted by law.

6. Security and data loss

We try our best to protect your data with industry-standard measures. However, no system is perfectly secure, and data may be lost or exposed due to events outside our control. You are encouraged to keep your own copies of important source bundles.

You are responsible for securely storing your credentials — including the JWT tokens used by your AI agent client. If your agent client leaks your JWT or other credentials and a malicious party misuses them, we are not responsible for the resulting damage. See the Product Terms for details.

7. Data retention and deletion

We keep your data for as long as your account is active. You can delete your account and all your data at any time, in the Pilely app or by email; Delete your account explains how. You can also request deletion by submitting a support ticket.

Upon a verified deletion request, we will delete your account and associated data, except for minimal records we are legally required to retain (for example, billing records required by tax law).

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

9. Translations

We may provide translations of this policy for your convenience. The English version is the official version: if a translation differs from it, the English version prevails, to the extent permitted by applicable law.

10. Contact

Questions about this policy? Reach us by submitting a support ticket.