Privacy Policy

Who we are

EarnedPilot ("we", "us") provides software for digital PR and link building at earnedpilot.com. We are the data controller for account information, and the data processor for the contact and campaign data our customers store in the product.

What we collect

Account data: your name, email address, organisation name and hashed password. Billing data: handled by Stripe — we never see or store card numbers. Product data: the contacts, campaigns, links, coverage and reports you create; email credentials you connect are encrypted at rest (AES-256-GCM). Usage data: essential logs needed to run and secure the service.

Cookies

We use a single strictly-necessary session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies, so no cookie banner is required under PECR.

How we use data

To provide the service, to send transactional emails (password resets, invitations, digests you've asked for), to process payments through Stripe, and to keep the service secure. We do not sell personal data, and we do not use your product data to train AI models.

Journalist contact data

Customers store professional contact details of journalists and publishers in EarnedPilot. Our customers are the controllers of that data; we process it on their instructions. If you are a journalist and want to know which of our customers holds your details, contact us and we will help route your request.

Where data lives

Data is hosted with our infrastructure providers (application hosting and PostgreSQL database) with encryption in transit and at rest. Backups are retained for disaster recovery.

Your rights

Under UK GDPR you may access, correct, export or delete your data. Organisation owners can export all organisation data and delete the organisation from Settings at any time — deletion is permanent and immediate. For anything else, email privacy@earnedpilot.com.

Sub-processors

We use a small number of sub-processors to run the service: hosting and database infrastructure, Stripe (payments), and — where you enable them — transactional email delivery and email-finding providers. A current list is available on request.

Contact

privacy@earnedpilot.com — we respond to all requests within 30 days.