LEGAL
Privacy Policy
Last updated October 26, 2026
The short version: we collect what it takes to run your account and make your content, and nothing for advertising. There are no ads, no cross-site tracking and no selling of data. Some of your content is processed by the AI and infrastructure providers listed below, only to do what you asked. Email us and we’ll delete everything.
1. Who we are
HandlePilot (“we”, “us”) runs handlepilot.com and app.handlepilot.com. For anything in this policy, write to support@handlepilot.com.
2. What we collect
Your account
- Your email address, which is also how you sign in.
- Sign-in records: one-time sign-in links and session identifiers. We store these only in hashed form.
- App-review accounts only: a few test accounts we create for app-store reviewers (such as OpenAI and Anthropic) sign in with a password instead of a link. We store only a salted hash of it. Ordinary accounts have no password.
- The Instagram handles you add to your workspace.
Instagram data
- Public data. For the accounts you add, and for creators in your niche that you research, we fetch publicly available profile information, posts, captions and engagement counts.
- Your connected account. If you choose to connect your Instagram account, we read its insights (such as views and reach). When you ask us to, we publish a reel to it. You can disconnect it anytime in the app.
What you upload and make
- Photos and videos you upload, recordings you dictate, and the text you write.
- What HandlePilot produces for you: transcripts, analyses, plans, scripts, captions, carousels and rendered reels.
AI apps you connect (ChatGPT, Claude and others)
- The connection. You can connect HandlePilot to an AI app, such as ChatGPT, Claude, Claude Code, Codex or Cursor, through our MCP server at app.handlepilot.com/mcp. You approve each connection on our Allow page, or create an access token in the app. We keep the app’s name and website, when you connected it, and access and refresh tokens, stored only in hashed form. Access tokens expire after an hour; a connection you stop using expires after 30 days. You can see and disconnect every connection, and revoke every token, on the Connect AI page.
- What the AI app receives. When the AI app calls a HandlePilot tool, it receives the answer it asked for: your workspaces, content plan, cards, carousels, assets and their links, your account’s Instagram numbers if you connected Instagram, and public Instagram data about the accounts and posts it looks up. The AI app is a recipient you choose. What it does with that data is governed by its provider’s terms and privacy policy (for example OpenAI’s or Anthropic’s), not by ours.
- What we receive from it. Only what the AI app sends in tool calls: the text it writes into your workspace (plans, scripts, captions, carousel text), the Instagram handles and links it asks about, the files it uploads, and its questions about a video. We never receive your chat with the AI app beyond what it puts in a tool call.
- Usage log. For each tool call we record which tool was called, when, by which connection, for which workspace, whether it worked, how long it took and what it cost us, plus a short summary of its inputs. We use it to run the free plan’s monthly limits, to fix problems and to understand costs. It is never sold or shared.
- Feedback. If you, or the AI app on your behalf, send us feedback through the send_feedback tool, we keep the message (and the AI app’s name, if it gives one) with your account and email it to our team.
Billing
- Payments are handled by Polar, our merchant of record. Your card and billing details go to Polar and its payment processors, never to us.
- We keep your subscription’s status, plan and renewal dates, and Polar’s customer and subscription identifiers. At checkout we pass your email and IP address to Polar, so it can calculate tax for the right country.
The request-access form
- If you ask for an invitation on handlepilot.com, the name, Instagram handle, email and message you enter are emailed to us.
The free tools
- The free tools on handlepilot.com need no account. What you enter goes to Scrape Creators, which fetches the public Instagram data the tool needs: a reel’s details and transcript, or an account’s public numbers. We don’t store the reel link you paste or its transcript. An account’s public numbers are kept for up to a day, so a repeat lookup doesn’t fetch them again; nothing about who asked is kept with them.
- To enforce the daily limits, we count your uses against a one-way hash of your IP address and the date. We never store the address itself, and the hashes are deleted after their day is over (UTC).
How you found us
- The first time you open handlepilot.com or app.handlepilot.com, we note the page you landed on, the website that sent you there (such as a search engine, without what you searched for) and any campaign tags in the link. If you then create an account, we keep that with it, so we know which pages bring people to HandlePilot. It stays on our own servers and is never shared.
Technical data
- Our hosting provider records requests (IP address, browser, the page or API called, and errors) in logs that we use to keep the Service secure and to fix problems. These logs are kept for a few days.
3. Cookies
We use a few cookies of our own. hp_session keeps you signed in for up to 14 days; it is strictly necessary for the app to work. While you connect an AI app, short-lived cookies (up to 15 minutes) remember the connection you were approving, so you come back to it after signing in; they are strictly necessary too. hp_src remembers, for 90 days, how you first found us (see “How you found us” above); only our servers read it. We use no advertising cookies and no third-party analytics or tracking cookies.
4. How we use it
- To provide the Service: analyze accounts, build plans, draft text, transcribe recordings, lay out carousels, render reels, and publish to Instagram when you ask.
- To run your subscription and the free plan’s monthly limits, together with Polar.
- To answer the AI apps you connect, and only with your data and public Instagram data.
- To send emails you need: sign-in links, and messages about your account or subscription.
- To answer you when you write to us.
- To keep the Service secure, prevent abuse, and fix problems.
We don’t sell your data or share it for advertising, and we don’t use your content to train AI models of our own. If you are in the EU or UK, our legal bases are: performing our contract with you, our legitimate interest in running a secure and working service, your consent where you give it (such as connecting Instagram), and our legal obligations.
5. Who processes your data
We use these providers to run HandlePilot. Each receives only what its part of the work needs.
- Cloudflare: hosting, database, file storage, request logs, sign-in emails, and speech-to-text transcription.
- Polar: payments, tax, receipts and invoices, and the customer billing portal, as merchant of record.
- Google (Gemini API): analysis of posts and media, transcription, planning and writing.
- Anthropic and OpenRouter: AI writing and layout for some features, such as carousel designs and reel graphics.
- Scrape Creators: fetching public Instagram data, including what the free tools look up.
- Composio: the connection to your Instagram account, used for insights and publishing.
- Instagram (Meta): when you connect your account or publish to it.
- The AI apps you connect (such as ChatGPT by OpenAI or Claude by Anthropic): they receive the answers to the tool calls they make for you, as described above. You choose them and can disconnect them anytime.
- Pexels: stock video search, which receives only search phrases.
- Google Fonts: the app loads its typefaces from Google’s servers, which therefore see your IP address.
We may also disclose data if the law requires it, or to protect the rights and safety of our users or others. If HandlePilot is ever sold or merged, your data would move with it under this policy, and we would tell you first.
6. Where your data is
Our database and files are hosted by Cloudflare, mainly in the United States, and several of the providers above are based in the United States. Where data leaves the EU or UK, we rely on our providers’ standard contractual clauses or equivalent safeguards.
7. How long we keep it
- Account data and your content: for as long as you have an account. You can delete uploads in the app at any time.
- When you ask us to delete your account, we delete its data within 30 days. The exception is records we must keep by law; Polar keeps its own billing and tax records as the merchant of record.
- Sign-in links expire after 15 minutes, and sessions after 14 days.
- AI app connections: until you disconnect them, or 30 days after their last use. The tool-call usage log and feedback messages: for as long as you have an account.
- Request-access emails: until the request is dealt with, and then as normal correspondence.
- Free tool limits: the hashes of IP addresses are deleted after their day is over (UTC). Free tool lookups of an account’s public numbers: up to a day.
8. Your rights
You can ask us to show you, correct, export or delete your personal data, and you can object to or restrict how we use it. Email support@handlepilot.com from your account’s address and we will answer within 30 days. If you are in the EU or UK, you can also complain to your data protection authority. If you are in California, you have the right to know about and delete your data and not to be treated differently for using those rights. We don’t sell or share personal information as defined by California law.
9. Security
All traffic is encrypted with HTTPS. Sign-in links, sessions, passwords, API tokens and AI app tokens are stored only as hashes, so a copy of our database could not be used to sign in. Uploaded files are private to your workspace. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
10. Children
HandlePilot is for adults (see our Terms). We don’t knowingly collect data from anyone under 16. If you believe a child has given us data, tell us and we will delete it.
11. Changes
If we change this policy in a way that matters, we will tell you by email or in the app before it takes effect. The date at the top always shows the latest version.