Privacy Policy

This Privacy Policy explains how PILOT ("we", "us") collects, uses and protects your personal data when you use the PILOT website, PILOT Academy and PILOT Elite (the "Service"). We are the data controller for the personal data described here.

We aim to collect only what we need to run the Service, keep it secure, and be transparent about how it is used. We do not sell your personal data.

We collect:

• Account details — your name, email address, password (stored only as a secure hash), preferred currency, timezone and trading-experience level;
• Membership & billing data — your subscription status and history. Card payments are handled by Stripe; we receive limited billing metadata (such as status and period dates) but not your full card number;
• Learning activity — lessons, courses, quiz attempts, practice and replay history, streaks, downloads, certificates, trading plans and preferences you create in the Academy;
• Technical data — log data, device/browser information and security events (for example login attempts) needed to operate and protect the Service.

We use your data to:

• provide the Service, your account and your learning progress;
• process subscriptions and manage renewals, cancellations and access entitlements;
• secure the Service, prevent abuse and detect fraudulent or unauthorised access;
• respond to support requests and send essential service communications;
• improve the Academy content and experience.

Our legal bases include performing our contract with you (providing the Service), our legitimate interests (security and improvement), your consent where required (for example certain communications), and compliance with legal obligations.

Subscription payments are processed by Stripe. When you subscribe, your payment details are provided directly to Stripe and handled under Stripe's own privacy terms. We store only the billing information necessary to manage your membership and entitlement. We never store your full card details.

To operate the Service we rely on trusted third parties, which may process limited data on our behalf, including:

• Stripe — payment and subscription processing;
• Communication and messaging tools (for example Telegram) used to deliver community updates where you choose to connect;
• Market-data and practice/broker connectivity providers used for educational charting and replay features.

These providers process data under their own terms; we share only what is necessary for the relevant feature.

We use essential cookies and local storage to keep you signed in, remember preferences and secure your session. These are necessary for the Service to function. We do not use invasive advertising trackers as part of the core Academy experience.

We keep your account and learning data for as long as your account exists so you can resume your progress, including after cancellation, unless you ask us to delete it. We retain certain records (for example billing and security logs) for as long as needed to meet legal, accounting and fraud-prevention obligations, then delete or anonymise them.

Depending on your location (including under UK/EU GDPR), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You can exercise these rights, or delete your account, by contacting us.

You also have the right to complain to your local data-protection authority (in the UK, the Information Commissioner's Office).

We use appropriate technical and organisational measures to protect your data, including hashed passwords, access controls and monitoring of security events. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond to incidents responsibly.

We may update this Privacy Policy from time to time; the "last updated" date shows the current version. For any privacy question, or to exercise your rights, contact us at privacy@pilot.trade.