This privacy policy describes how PilotScribe (hereinafter "PilotScribe", "we") collects, uses and protects your personal data when you use our service available at app.pilotscribe.com and the pilotscribe.com website.

1. Publisher and data controller

The data controller is:

Company name: Mistral JS
SIRET: 942 586 793 00013
Address: 7 Allée Cervantes, 13009 Marseille, France
Contact: contact@pilotscribe.com

2. Data we collect

As part of providing the service, we collect the following data:

Login email — used to create and secure your account and to contact you.
Your website URL — the address of the website you entrust to us for analysis and article writing.
Generated content — the articles, keywords and other content produced for your account.
Billing data — managed by our payment provider Stripe (customer ID, subscription status, payment history). We never store your bank card details.
Google Search Console data — when you consent to it via the Google OAuth connection, we access your site's performance data: search queries, clicks, impressions and average positions.

3. Purposes of processing

We use this data to:

create, manage and secure your account and your session;
analyze your activity and identify relevant keywords;
write, publish and host blog articles optimized for search engine ranking;
measure and improve your site's SEO performance using Google Search Console data;
manage your subscription and billing;
send you service-related communications;
comply with our legal and regulatory obligations.

4. Legal basis (GDPR)

In accordance with the General Data Protection Regulation (GDPR), our processing relies on the following legal bases:

Performance of the contract — to provide the service you have subscribed to (account, content generation and publication, billing).
Your consent — for access to Google Search Console data via OAuth; this consent can be withdrawn at any time.
Our legitimate interest — for security, fraud prevention and service improvement.
Compliance with legal obligations — in particular accounting and tax obligations.

5. Subprocessors and recipients

To provide the service, we rely on carefully selected subprocessors, who access your data only to the extent necessary to perform their services:

Anthropic — editorial content generation (AI).
SEO data providers — search volume and keyword data.
Cloudflare — hosting, delivery and security.
Neon — hosted database.
Stripe — payment and billing processing.
Google — performance data via Google Search Console.
Replicate — image and media generation.

We never sell your personal data and never share it with any third party for advertising purposes.

6. Use of Google API data

PilotScribe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Specifically, data obtained from Google Search Console:

is used only to provide and improve the user-facing SEO features within PilotScribe;
is not sold to third parties;
is not used for advertising, targeting or ad personalization purposes;
is not transferred to third parties, except where necessary to provide or improve the service, for security reasons, to comply with applicable law, or as part of a merger or acquisition with your consent;
is not read by humans, unless you have expressly consented to it, it is necessary for security (for example to investigate abuse), or the law requires it.

7. Retention periods

Account data and generated content: kept for the entire duration of your subscription, then deleted within a reasonable time after the closure of your account.
Google Search Console data: kept for as long as necessary to provide the service, then deleted upon revocation of access or closure of the account.
Billing data: kept in accordance with legal accounting and tax obligations (generally 10 years).

8. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

right of access;
right to rectification;
right to erasure ("right to be forgotten");
right to portability of your data;
right to object to processing;
right to restriction of processing;
right to withdraw your consent at any time.

To exercise these rights, write to us at contact@pilotscribe.com. You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL).

9. Cookies

PilotScribe uses only cookies strictly necessary for authentication and to maintain your login session. We do not use advertising cookies or marketing tracking cookies.

10. Transfers outside the European Union

Some of our subprocessors may process data outside the European Union (in particular in the United States). In such cases, these transfers are governed by appropriate safeguards, such as the standard contractual clauses adopted by the European Commission, in order to ensure an adequate level of protection of your data.

11. Changes

We may update this privacy policy. Any change will be published on this page with a revised update date.

A question about your data? Write to us at contact@pilotscribe.com.