Privacy Policy

1. Scope

This Privacy Policy explains how StatePilot collects, uses, stores and shares personal information through the website and application. StatePilot is a SaaS service designed to help organize and track U.S. business compliance obligations.

2. Information we may process

• Account information: name, email address and authentication data.
• Company and compliance profile: company name, formation state, entity type, formation date, tax classification and selected employee/sales-tax profile information.
• Tasks and preferences: completed tasks, reminder preferences and application settings.
• Documents: files you choose to upload to the document center and basic file metadata.
• Subscription information: your selected plan, subscription status and limited customer/subscription references needed to link billing records to your StatePilot account. StatePilot does not store full card numbers or card security codes.
• Technical data: limited browser/device and application logs needed for security, troubleshooting and service operation.

3. Why we use information

We use information to provide accounts, build compliance profiles and calendars, send reminders, manage paid plans, store documents when requested, maintain security and performance, prevent abuse and comply with applicable legal obligations.

4. Service providers

StatePilot uses Supabase for authentication/database/storage, Resend for service email, Netlify for hosting, OpenAI for authorized user-initiated notice analysis, and Lemon Squeezy as Merchant of Record for checkout and subscription billing. Google Analytics loads only after opt-in.

5. Payment data

Paid-plan payments are processed by Lemon Squeezy. Full card numbers and card security codes are not stored on StatePilot servers. StatePilot stores only limited subscription references needed to synchronize plan access and billing lifecycle status.

5A. Analytics preference

Google Analytics loads only after you select “Allow analytics.” Your choice is stored in local storage on your device. Declining does not affect your account or app features.

6. Documents, AI analysis and security

Uploaded documents are designed to be stored in private, access-controlled storage. When an authorized user requests notice analysis, StatePilot provides the AI service a temporary, time-limited link to the specific document rather than a public document URL. The API request uses store:false as a data-minimization control. AI output is a draft for human review and is not an autonomous filing, signing, payment, or government-submission service. No internet service can guarantee absolute security, so users should also protect their credentials and devices.

StatePilot is an independent private software service and is not a government agency. Links to the IRS, FinCEN, or state agencies are provided only to help users reach and verify official sources; they do not imply agency approval, sponsorship, partnership, affiliation, or endorsement.

7. Retention and rights

We retain information for as long as reasonably necessary to provide the service and meet security, dispute, accounting and legal requirements. Depending on applicable law, you may request access, correction or deletion of certain personal information.

8. Contact

Privacy questions can be sent to support@statepilot.app.