Bold PilotBold Pilot
Back to Bold Pilot

Privacy Policy

Last updated: July 1, 2026

1. Introduction

This Privacy Policy explains how Bold Pilot ("we", "the app") collects, uses, and protects your personal data when you use our service. By using Bold Pilot, you agree to the practices described in this policy.

2. Data We Collect

To provide the service, we collect the following data:

  • Google account information: Your email address and basic profile information (name, profile photo) when you sign in with Google.
  • Google Search Console data: Search queries, ranking positions, impression, and click data for the website(s) you connect. This data is read-only; nothing in your Search Console account is ever deleted or modified.
  • Webhook endpoint details: If you connect a webhook, the endpoint URL you provide and the signing secret we generate for it. We never receive credentials or access to your own infrastructure — the connection is outbound only, from us to your endpoint.
  • Generated article content: The blog posts you generate and edit through the app.

3. How We Use Your Data

The data we collect is used solely to analyze your own website's search performance, generate SEO-focused content drafts on your behalf based on that data, and deliver that content to your own website (via a webhook you connect), with your approval. Data is not used for advertising, profiling, or analysis on behalf of any other user.

4. Third-Party Services

To provide the service, we work with the following third-party service providers. These providers only access the data necessary to perform their function:

  • Google OAuth & Search Console API: For authentication and read-only access to search data.
  • Supabase: User account and application database hosting.
  • Anthropic: AI content generation based on the keywords you provide.
  • LemonSqueezy: Handling subscriptions and payments.

5. Data Sharing

Your data is never shared, sold, or rented to any person or organization other than the third-party service providers listed above, which are required to run the service.

6. Data Security

Your access tokens and account data are transmitted over encrypted connections and stored securely on Supabase's infrastructure. Only the minimum access required to provide the service is used.

7. Your Rights

You have the right to access your data, correct it, request its deletion, and remove your Google connection or any webhook/cross-posting connections at any time from the Settings page. To request complete deletion of your account and associated data, you can contact us.

8. Cookies

Only essential authentication cookies are used to keep your session active. No third-party cookies are used for advertising or tracking purposes.

9. Changes to This Policy

This policy may be updated from time to time. Material changes will be announced by posting them on this page.

10. Contact

If you have questions about this privacy policy, you can reach us at ahmet@boldpilot.club.