Privacy Policy

Who we are

Delivery Pilot AI is operated by Kapstone Communications Ltd, the controller of your personal data, at 6 Hockley Hill, Hockley, Birmingham, B18 5AA. Contact us through our contact form.

Kapstone Communications Ltd is registered in England and Wales, company number 11202662. Registered office: 6 Hockley Hill, Hockley, Birmingham, B18 5AA.

What we collect and why

We collect your account email and sign-in information, and the project details, meeting notes, delivery updates and generated reports, risks, actions and RAID logs you enter or create. Notes may include information about colleagues or other people.

We use this information to create and secure your account, save and reopen projects, generate reports, track delivery history, provide exports and enforce the free service's fair-use allowance. We process account and project data to provide the service you request under our contract with you. Security and abuse prevention are based on our legitimate interests in protecting the service and its users. Only enter personal information you are entitled to share.

Our team can view your account email, projects, generated reports and logs to support you and provide our client service. We are notified, by email and in our admin inbox, when you create an account, create a project, generate a report or submit a change request; these notifications include your email address and project name. Messages we send you through the client portal, and change requests you send us, are stored with your account.

AI processing and cloud storage

When you request a report, your pasted notes and relevant project context are sent to a third-party AI model provider to generate the report and logs. Reports are generated by an OpenAI model accessed through Lovable's AI service. Your notes and project context are sent to these providers only to generate your report, under their data processing terms. Do not paste confidential or sensitive personal information unless you have permission and an appropriate basis to do so. Review all generated output.

Your account and project data are stored in a Supabase database provided through Lovable Cloud. Service providers process data to operate the service; we do not sell your content. Google Fonts is loaded from Google, which receives connection information such as your IP address when your browser requests fonts.

These providers may process data outside the UK, including in the United States.

Retention and deletion

We keep your project details, notes and generated content until you delete them or delete your account. You can delete individual projects and items in the workspace. Deleting your account through the Account page removes your account and its associated project data. After deletion, data may remain in our providers' encrypted backups for a limited period before it is overwritten.

Your UK data protection rights

Under the UK GDPR and Data Protection Act 2018, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it. These rights are subject to applicable legal conditions.

You can correct project information in the workspace, export reports and logs using the existing PDF/CSV export, and delete your account on the Account page. Contact us through our contact form for an account-data access request or rights not available in the app; PDF/CSV report export is not a complete account-data access response.

You may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

Sign-in storage and cookies

We use essential browser storage only for sign-in, session security and account recovery. We do not use advertising or analytics cookies. See our Cookie Policy for details. Google Fonts is loaded from Google as described above.

Contact and changes

For privacy questions, write to Kapstone Communications Ltd at 6 Hockley Hill, Hockley, Birmingham, B18 5AA, or use our contact form. We may update this policy and will show its latest revision date above.