Privacy Policy
Last updated: February 2026
PostPilotAI ("we", "us", or "our") is a digital product operated by ShapLabs. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at post-pilot-ai.shaplabs.com or use our services.
Contents
1 Data We Collect
We collect information you provide directly and information collected automatically:
Information you provide
- Email address (provided during checkout)
- Name (if provided during checkout)
- Files, images, or content you upload as part of using our service
Information collected automatically
- IP address and approximate geographic location
- Browser type and operating system
- Pages visited, time spent, and referring URL
- Device identifiers
Payment information
Payment details (credit card numbers, billing address) are collected and processed entirely by our payment processor, LemonSqueezy. We never receive, store, or have access to your full payment information.
2 How We Use Your Data
We use the information we collect for the following purposes:
- Service delivery — to process your order and deliver the product you purchased
- Communication — to send order confirmations, delivery emails, and respond to support requests
- Improvement — to understand how our service is used and improve our products
- Security — to detect and prevent fraud or abuse
We do not sell, rent, or trade your personal data to third parties.
3 Legal Basis for Processing
If you are located in the European Economic Area (EEA), our legal basis for processing your personal data depends on the context:
- Contract performance — processing your order and delivering the product
- Legitimate interests — improving our services, fraud prevention, and website analytics
- Legal obligation — compliance with applicable laws and regulations
- Consent — where you have given explicit consent for a specific purpose
4 Third-Party Services
We rely on the following third-party service providers to operate PostPilotAI:
| Provider | Purpose | Data Shared |
|---|---|---|
| LemonSqueezy | Payment processing | Name, email, payment details |
| Cloudflare | Website hosting, CDN, security | IP address, usage data |
| Resend | Transactional email delivery | Email address |
Each provider operates under their own privacy policy. We encourage you to review them.
6 Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- TLS/SSL encryption for all data in transit
- Encrypted storage for data at rest
- Access controls limiting data access to essential personnel and systems
- Regular review of our data handling practices
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7 Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
- Transaction records — retained for up to 7 years as required for tax and legal compliance
- Uploaded files and generated content — retained for 30 days after delivery to allow re-downloads, then permanently deleted
- Email address — retained until you request deletion
- Usage data — retained in aggregate form and automatically purged after 12 months
You may request earlier deletion at any time (see Your Rights).
8 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
For all users
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your personal data
- Objection — object to processing of your data for certain purposes
For EEA residents (GDPR)
- Right to data portability
- Right to restrict processing
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
For California residents (CCPA)
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9 Children's Privacy
Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
10 International Data Transfers
Your data may be transferred to and processed in countries other than your own, including the United States and Israel, where our servers and third-party service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable law.
11 Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the service after changes constitutes acceptance of the revised policy.
12 Contact Us
If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, contact us: