Privacy Policy

1. Who we are

LeadPilot is a product of ctrlAIshift (“we”, “us”, “our”). We provide an AI-powered lead management and business operations platform for service businesses. Contact us at hello@ctrlaishift.com.

2. Data we collect

• Business and account information you provide during setup (business name, email address)
• Lead and customer data you or your clients submit through the platform
• Integration data from connected services (Google Calendar events, QuickBooks invoices and customer records) — only accessed with your explicit authorization
• Usage logs for error diagnosis and performance monitoring

3. How we use your data

• To operate and deliver the LeadPilot service to your account
• To create calendar events and invoices on your behalf when you authorize integrations
• To send notifications and automated messages as configured by you
• To improve platform reliability and diagnose issues

We do not sell your data to third parties.

4. Third-party integrations

When you connect Google Calendar or QuickBooks, we store OAuth tokens securely in AWS Systems Manager Parameter Store (encrypted at rest). We access only the scopes you authorize and only to perform actions you initiate within the platform. You can disconnect integrations at any time from the Settings page.

5. Data storage and security

All data is stored on AWS infrastructure in the US East region. Data is encrypted in transit (TLS) and at rest. Access is restricted to authenticated users via AWS Cognito.

6. Data retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data by emailing hello@ctrlaishift.com.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond within 30 days.

8. Changes to this policy

We may update this policy periodically. We will notify active users of material changes by email.