Privacy Policy

1. Introduction

ImportPilot, Inc. ("ImportPilot," "we," "us," or "our") operates the ImportPilot platform (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored as a one-way cryptographic hash). If you subscribe to a paid plan, Stripe collects and processes your payment information; we store only a Stripe customer ID and subscription status.

Product Data

You provide product information including names, descriptions, materials, countries of origin, customs values, and related attributes. We store this data to generate and save classifications.

Classification Data

The Service generates HTS classification candidates, duty estimates, rationale, confidence scores, and related outputs. These are stored with your product records.

Usage and Analytics Data

We collect information about how you interact with the Service, including pages visited, features used, classification volume, timestamps, IP addresses, browser type, device type, and referring URLs. We use cookies and similar technologies for analytics, session management, and attribution tracking (see Section 6).

Attribution Data

When you arrive at our website, we may capture UTM parameters, landing page URL, and referrer information in a first-party cookie to understand how visitors find us. This data is associated with your account if you subsequently register.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Generate HTS classification candidates and duty estimates for your products
• Monitor tariff data sources and deliver alerts about changes that may affect your saved products
• Process payments and manage subscriptions
• Send transactional emails (account verification, billing confirmations, classification results, monitoring alerts)
• Analyze usage patterns to improve our classification engine and user experience
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Comply with legal obligations

4. Third-Party Service Providers

We share data with the following categories of service providers, as necessary to operate the Service:

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

We retain your account information and product data for as long as your account is active or as needed to provide the Service. If you cancel your account, we will delete or anonymize your personal data within ninety (90) days, except where retention is required by law or necessary for legitimate business purposes (e.g., resolving disputes, enforcing our Terms).

Classification history and audit trail data may be retained in anonymized form for service improvement purposes.

6. Cookies and Tracking Technologies

We use the following cookies:

• Session cookies: Required for authentication and maintaining your logged-in state.
• Attribution cookie (ip_attribution): First-party cookie that stores UTM parameters and landing page information for up to 30 days, used to understand how visitors find our Service.
• Analytics cookies: Google Tag Manager and Google Analytics cookies for understanding aggregate usage patterns.

You may disable cookies in your browser settings, but this may impair functionality of the Service.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS), encrypted password storage (bcrypt), and access controls. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated personal data.
• Export: Request your product and classification data in a portable format.

California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at privacy@importpilot.co. We will not discriminate against you for exercising your rights.

European Economic Area (GDPR)

If you are located in the EEA, our legal basis for processing your data is: (a) performance of a contract (providing the Service); (b) legitimate interests (analytics, fraud prevention, service improvement); and (c) your consent (marketing communications, if any). You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. You also have the right to lodge a complaint with a supervisory authority. Contact us at privacy@importpilot.co to exercise any right.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@importpilot.co.

ImportPilot, Inc.
Registered in Delaware, United States