Privacy Policy

Where processing happens

Interactive planning calculations run deterministically in your browser. The protected workflow API uses the same deterministic calculation logic on our server. When you use Ask Pilot, the wording of your question may be sent to our servers so that an AI service can interpret your intent, extract the values you provided, and identify the right tool. The AI does not perform the arithmetic. Classification suggestions and extracted inputs can be wrong and must be checked; the maths is always done by the deterministic engine. If AI interpretation is unavailable, Pilot falls back to its built-in understanding.

Server-side AI interpretation

To interpret Ask Pilot questions we send the text of the question to an AI service through a managed AI gateway. We do not send this to advertising networks, and we do not attach your identity to it. We transmit only what is needed to interpret the request and we bound the size of each request. Do not include confidential information in your questions.

Information we collect

We may collect basic usage information such as pages visited, feature interactions, browser or device information, referral source, and approximate location derived from analytics. Our analytics events are privacy-safe by design: we record that an action happened (for example, that a problem was submitted or an answer was shown), but we do not record the text of your questions, the descriptions you enter, prices, or the specific codes or results produced. Free-text search parameters are excluded from our custom analytics events. If you contact us by email, we receive what you send.

Cookies, consent and advertising

Optional Google Analytics stays off until you choose Accept analytics. Rejecting it does not limit any tool. Your choice is stored in your browser. Open Cookie settings in the footer to change or withdraw it; withdrawal stops our analytics events and removes accessible first-party Analytics cookies. With consent, Google may receive page and interaction information, device/browser information, IP addresses and cookie identifiers to measure usage. We disable Google Signals and advertising personalisation signals in our Analytics configuration. Already collected information is not automatically erased when you withdraw consent.

Google advertising is currently disabled. If enabled later, Google and advertising partners may place and read cookies or use web beacons, IP addresses and other identifiers for ad delivery, measurement and abuse prevention. Where personalised advertising is enabled with the required consent, Google and its partners may use visits to this and other websites to select ads. Required regional consent arrangements must be in place before advertising starts. Our analytics choice is not a certified advertising consent platform. Advertising will remain outside Ask Pilot answers, clarification prompts, error and empty states, API responses and setup screens.

Google information and your choices

Read how Google uses information from sites and apps that use its services and manage Google advertising preferences or participating third-party advertising choices. These choices are separate from UtilityPilot’s Cookie settings.

Saved products and scenarios

When you choose to save a product or scenario, its description, figures and any associated question or result may be stored locally in this browser. It is not a shared public page. Use the saved-product controls or clear this site’s browser storage to remove it. Anyone with access to your browser profile may be able to see locally saved information.

Business workspace, partner widget and Shopify preview

Product CSV files and restored workspace files are read locally in your browser. Saving a workspace or comparison writes to browser storage; downloading an export creates a file on your device. Optional cloud snapshots, where enabled in the standalone business workspace, store your email/account identity and the product and comparison data you explicitly save with Supabase in Tokyo, Japan. Personal cloud snapshots are private to your account. If you explicitly save a shared team snapshot, members of that team can read it according to their role. You can delete each snapshot using its Delete control; contact us to request account deletion. Deleted records may remain temporarily in provider backups according to provider retention. Signing out does not erase local copies. Named scenario histories and source notes saved within the workspace are included in workspace snapshots. Unsaved note edits and unrelated standalone browser histories are not included. Shopify preview data is not uploaded through this cloud feature. Do not import customer records or unnecessary confidential data. Managed partner widgets record aggregate views and decision actions only if the visitor opts in; no quote values or visitor identifiers are included in those counts. If you explicitly submit a contact inquiry, your name, email, message and consent statement are stored for the named partner to respond. This does not subscribe you to marketing. The partner owner can read, export and delete inquiries; they remain until deleted. Contact hello@utilitypilot.net to request deletion. Exported copies are controlled by the partner. No automated inquiry email is sent. Browser storage may be restricted when a widget appears on another website.

If the Shopify closed pilot is activated and you authenticate through Shopify, the server validates your signed Shopify ID token and obtains a session-bound access token to read product titles, SKUs and selling prices from the authenticated store. This version requests product read access only, stores no Shopify access token or merchant catalogue in a server database, and does not request customer or order data. Data displayed in your browser can be saved or exported only when you choose. The protected workflow API processes supplied comparison inputs to return a result; activation and partner access are controlled separately.

Installable app (PWA)

UtilityPilot can be installed as an app on supported desktop and mobile browsers. Installing does not grant us extra access to your device. The installed app needs an internet connection to answer new questions, and it does not cache your questions or answers for reuse.

Browser extension

The optional browser extension uses the minimum permissions needed. It sends highlighted text to UtilityPilot only when you explicitly choose to ask about it — never automatically or in the background. It contains no credentials or secrets.

API

UtilityPilot does not currently provide a public API. If a limited integration is introduced, access will require a server-side credential and requests will be validated and rate-limited. The API remains disabled unless it is expressly enabled and configured for a deployment.

How we use information

We use information to operate the site, interpret and answer questions, improve the tools, understand usage, respond to enquiries, and protect the service. UtilityPilot does not sell personal data.

Retention

Question text sent for AI interpretation is used to produce your answer, not to build an advertising profile. Hosting and interpretation providers may process operational logs under their own service settings. Analytics records are subject to our Google Analytics property’s retention settings; they are not necessarily aggregate at collection. Emails you send us are kept for as long as needed to handle your enquiry.

Security

We use reasonable technical measures to protect information in transit and at rest, including server-side handling of any credentials. No system is perfectly secure, so please avoid submitting sensitive information.

External links

UtilityPilot may link to external websites, including official trade and customs sources. We are not responsible for the privacy practices or content of external sites.

Changes

We may update this policy from time to time. The latest version will be posted on this page.

Contact

For privacy questions, contact: hello@utilitypilot.net