Pilot Protocol is operated by Vulture Labs. This Privacy Policy explains what data we collect, why we collect it, and what rights you have. It covers the Pilot Protocol daemon, the pilotprotocol.network website, the rendezvous service, and any Pilot-operated specialist agents (together, the "Services").
@@ -63,31 +63,43 @@ const canonicalUrl = "https://pilotprotocol.network/privacy";If you provide a mobile phone number — for example, to verify your identity, secure your account, or receive service notifications — we collect and process the following:
+Providing a phone number is optional. SMS messages from Pilot Protocol are transactional only — we do not send marketing or promotional text messages. Message frequency varies, and message and data rates may apply. You may opt out at any time by replying STOP to any message; reply HELP for assistance. See our Terms of Service for the full SMS program disclosures.
+We do not sell your phone number, and we do not share mobile information or SMS opt-in and consent data with third parties or affiliates for their own marketing or promotional purposes. Phone numbers are disclosed only to our SMS delivery provider, and solely to transmit the messages you requested.
+ +We process data under Article 6 of the UK and EU GDPR:
pilot_consent localStorage entry.pilot_consent localStorage entry; for SMS, by replying STOP to any message.We use the following third-party service providers to operate the Services:
us-central1.All sub-processors are bound by data processing agreements (DPAs) compliant with GDPR Article 28.
-Data may be transferred to and processed in the United States (GCP us-central1, Cloudflare global edge, Google Analytics). For transfers from the EEA, UK, or Switzerland, we rely on:
For jurisdictions without an adequacy decision, we implement supplementary measures including encryption at rest (AES-256) and in transit (TLS 1.3).
-Depending on your jurisdiction, you may have the following rights:
To exercise any of these rights, email founders@pilotprotocol.network. We will respond within 30 days (GDPR) or 45 days (CCPA). Verification of identity may be required for certain requests.
-Given the limited scope and nature of data processing (no large-scale processing of special categories of data, no systematic monitoring of data subjects on a large scale), Vulture Labs is exempt from the obligation to appoint a Data Protection Officer under GDPR Article 37 and from the obligation to designate an EU Representative under GDPR Article 27. If this assessment changes as the Services grow, we will update this policy and make the necessary appointments.
-The Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
-We do not use any form of automated decision-making or profiling that produces legal effects or similarly significant effects on individuals (GDPR Article 22). The rendezvous service uses automated matching of tags and hostnames, but this is purely operational and has no effect on individual rights.
-We implement appropriate technical and organizational measures to protect data: TLS 1.3 for all transit, AES-256-GCM for encrypted tunnels, access controls on infrastructure, and regular security reviews. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.
-We will post changes to this page and update the "Last updated" date. For material changes, we will provide additional notice (website banner, daemon notification, or email where available). Continued use after changes constitutes acceptance.
-For privacy-related inquiries or to exercise your rights:
Email: founders@pilotprotocol.network
We aim to acknowledge all privacy requests within 5 business days.
diff --git a/src/pages/terms.astro b/src/pages/terms.astro index e7ba613..2aaf44a 100644 --- a/src/pages/terms.astro +++ b/src/pages/terms.astro @@ -22,7 +22,7 @@ const canonicalUrl = "https://pilotprotocol.network/terms";These Terms of Service ("Terms") are a binding agreement between Vulture Labs ("Pilot Protocol," "we," "us," "our") and you ("you," "User") governing your use of pilotprotocol.network, the Pilot rendezvous service, any Pilot-operated specialist agents, and related documentation and APIs (together, the "Services").
@@ -101,10 +101,23 @@ const canonicalUrl = "https://pilotprotocol.network/terms";Before initiating formal proceedings, you agree to contact us at founders@pilotprotocol.network and attempt to resolve the dispute informally for a period of at least thirty (30) days.
-Pilot Protocol offers an optional SMS text-messaging program. If you provide a mobile phone number and opt in, you agree to the following in addition to the rest of these Terms.
+STOP, we will send a one-time confirmation that you have been unsubscribed and will stop sending you SMS messages. To rejoin, opt in again as you did originally.How we collect and handle the phone number and consent data you provide is described in our Privacy Policy. We do not sell your phone number or share SMS opt-in or consent data with third parties for their own marketing purposes.
+ +We will post changes to this page and update the "Last updated" date. For material changes, we will provide additional notice (website banner, email where available, or daemon notification). Continued use after the effective date of changes constitutes acceptance of the revised Terms.
-Questions about these Terms?