Scope and operator
This policy applies to artistpilot.co, the ArtistPilot web application, and related support and operational communications. ArtistPilot is operated by Dylan Lott and Greg Long, doing business as ArtistPilot, based in Utah, United States. For applicable UK and European data-protection law, the operators are the controller of personal information described here.
This policy does not govern third-party sites or services that you choose to visit or connect. Their own notices apply to their processing.
Information we process
Account and workspace information
- Email address, password hash, verification status, authentication tokens, role, team memberships, invitations, referral information, and workspace name.
- Artist profiles, release dates and plans, goals, tasks, campaign notes, social links, imported source material, URLs, and other workspace content you submit.
- Chat prompts, conversation history, AI responses, generated artifacts, feedback, and relevant workspace context used to answer a request.
Billing and trial information
We receive subscription status, seat count, price and product identifiers, checkout-session identifiers, customer and subscription identifiers, trial dates, renewal dates, and limited billing status from Stripe. Payment-card details are entered into Stripe's checkout and are not stored directly by ArtistPilot.
Usage, attribution, and diagnostics
- Feature usage, message and token estimates, selected model, routing reason, latency, errors, timestamps, and operational email logs.
- Referral, landing-page, experiment, and campaign parameters, including UTM values, when supplied in the page URL or signup flow.
- Technical request and diagnostic information such as IP-derived request data, device/browser information, server logs, and error or performance telemetry.
How and why we use information
We process information to:
- create and secure accounts, verify email, maintain sessions, and administer workspaces;
- provide release-planning, collaboration, search, import, generation, and support features;
- start trials, process subscriptions, manage seats, prevent fraud, and keep transaction records;
- send verification, account, billing, service, and support communications;
- measure reliability, troubleshoot errors, protect the service, enforce our Terms, and improve product performance; and
- comply with law, tax, accounting, security, and valid legal-process obligations.
Where UK or EEA law applies, our legal bases are performance of our contract, our legitimate interests in operating and securing ArtistPilot, compliance with legal obligations, and consent where the law requires it. You may object to processing based on legitimate interests; we will assess the request against any compelling or legally required reason to continue.
AI processing
When you use AI features, ArtistPilot sends the prompt, relevant prior messages, and relevant workspace or imported-source context through OpenRouter to a selected model provider. ArtistPilot also sends text used for semantic search to an embedding model. We configure eligible OpenRouter requests to deny provider data collection and require zero-data-retention routing. This reduces available provider endpoints and does not prevent ArtistPilot from retaining your workspace content and conversation history as described in this policy.
OpenRouter retains request metadata such as token counts and latency. Its own documentation says it does not retain prompt and response content unless account-level logging or data-use options are enabled. Model routing and provider policies can change, so we periodically review these controls. Do not submit secrets or sensitive personal information that is unnecessary for your request.
Cookies and browser storage
ArtistPilot uses essential cookies and local storage for authentication and selected workspace identifiers. A temporary signup draft may be kept in session storage until signup finishes or the browser session is cleared. URL campaign and referral parameters may be attached to signup records so we can understand acquisition and referral performance.
Browser “Do Not Track” signals are not governed by a single accepted standard, so the site does not respond to them as a separate control. Where applicable law recognizes an opt-out preference signal such as Global Privacy Control, we will honor it for covered processing. ArtistPilot does not currently conduct sale or cross-context behavioral-advertising activity that would require that opt-out.
Retention and security
We retain information for as long as reasonably needed to provide the service, maintain your account and workspace, complete billing and tax records, resolve disputes, enforce agreements, prevent abuse, and meet legal obligations. Different records have different lifecycles. For example, signup and reset tokens expire, while contract-acceptance and transaction records may be retained longer as evidence of the relationship. Deleted chat threads may remain in a restricted soft-deleted state until a later purge or backup rotation.
We use administrative and technical safeguards intended to protect information, including access controls, password hashing, encrypted network transport, and service monitoring. No internet service can guarantee absolute security. Contact us promptly if you believe your account or information has been compromised.
International transfers
ArtistPilot is operated from the United States. If you use the service from the UK, EEA, or another country, your information may be processed in the United States and in countries where our service providers or selected AI providers operate. Where required, we rely on recognized safeguards such as adequacy decisions, contractual protections, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.
Your privacy rights
Depending on where you live, you may have rights to know or access personal information, correct it, request deletion, obtain a portable copy, restrict or object to certain processing, withdraw consent, and appeal a denied request. You may also complain to your local data-protection authority, including the UK Information Commissioner's Office where applicable.
Send requests to admin@artistpilot.co. Describe the request and the account email involved. We may verify your identity and may retain or decline to delete information when an exception applies—for example, where records are needed for security, billing, legal compliance, or establishment or defense of legal claims. We will not discriminate against you for exercising applicable privacy rights.
Children
ArtistPilot is a professional service for people at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted information, contact us so we can investigate and take appropriate action.
Changes and contact
We may update this policy as ArtistPilot, its providers, or legal requirements change. We will post the revised version and effective date here and provide additional notice when a change is material or the law requires it.
Privacy questions and requests can be sent to admin@artistpilot.co. ArtistPilot is operated by Dylan Lott and Greg Long, doing business as ArtistPilot, Utah, United States.
Questions or requests?
Email admin@artistpilot.co. We may need to verify your identity before completing a privacy or account request.