Privacy Policy
Last updated: September 2026
This Privacy Policy explains how ProgramPilot LLC ("ProgramPilot") collects, uses, and protects information when you use the Platform. It reflects how the product actually works today.
Information we collect
- Account information you provide (name, work email, organization, role).
- Program and financial data your organization enters or uploads (contracts, invoices, CLINs, indirect rates, documents). This is your data.
- Usage information for security and product analytics (pages viewed, actions taken, timestamps). Public marketing-site analytics contain no personal identifiers.
How we use it
To provide and secure the Platform, deliver the features you use, communicate with you about your account, and improve the product. We do not sell your data, and we do not use your organization's data to train third-party AI models.
Tenant isolation
Each organization's data is isolated at the database layer with row-level security so one customer cannot access another customer's records. Access to your data is scoped to your organization and your role-based permissions.
Artificial intelligence processing
Some features send relevant portions of your content to commercial AI providers (for example, Anthropic and OpenAI) to generate an analysis or answer. Those providers process the request to return a result and do not use it to train their models under our agreements. For organizations handling Controlled Unclassified Information (CUI), CMMC Boundary Mode blocks AI features that would send data to commercial AI. See our AI Disclosure.
Data location and security
Platform data is hosted in the United States on commercial cloud infrastructure. We apply encryption in transit, tenant isolation, role-based access control, and audit logging. No system is perfectly secure; we work to protect your data using industry-standard measures.
Retention and deletion
We retain your data for as long as your account is active or as needed to provide the service. You may request export or deletion of your organization's data at any time. See Delete My Data. Some records may be retained where required for legal, tax, or audit obligations.
Your choices
You may access, correct, export, or request deletion of your information by contacting us. Depending on your jurisdiction, you may have additional rights over your personal information.
Contact
Privacy and data requests: legal@programpilothq.com · Support: support@programpilothq.com
ProgramPilot LLC · Governed by the laws of the State of Alabama, USA · legal@programpilothq.com
