1. Scope
This Privacy Policy applies to the Growth Pilot public website, the Complimentary Growth Brief request and delivery process, and the website’s sign-in features. It does not describe data practices for services that have not launched.
2. Information we collect
Information you provide
When you request a Complimentary Growth Brief, we collect:
- First and last name
- Business email address and business phone number
- Company name and website URL
- Amazon brand or store name, if you choose to provide it
We also keep records needed to manage the request, including submission and verification dates, email-verification status, duplicate indicators, fulfillment status, report links, and email delivery records.
Contact messages
If you use the public contact form, we collect your name, business email address, company name, optional phone number, message, submission date and time, and the inquiry’s review status. Contact inquiries are stored in the Growth Pilot database hosted by Neon. The Contact workflow does not currently send an internal email notification or a customer acknowledgement email.
Account and session information
If you sign in, our authentication provider processes your sign-in credentials. Growth Pilot receives and stores your account identifier, email, name, and profile image if available. The website sets a secure, HTTP-only session cookie so you can remain signed in. That cookie is currently set to expire after 30 days.
Technical and usage information
For Complimentary Growth Brief requests, we create and store a one-way hash of the submitting IP address and may store the browser user-agent string. We use this information for rate limiting, duplicate review, security, and abuse prevention. The Contact form also uses validation, a hidden honeypot field, message-length limits, and database-backed rate limiting to reduce spam and abuse. Hosting providers may also process request information such as IP address, device or browser details, requested URL, and timestamps in ordinary server and security logs.
The site uses Umami analytics to collect anonymous, aggregate usage information such as page views, referrer, browser, operating system, device type, and approximate country. The current analytics implementation does not use cookies, identify visitors by name or email, or track people across unrelated websites.
3. How we use information
We use information to:
- Save, verify, review, prepare, quality-check, and deliver Complimentary Growth Brief requests
- Send verification, status, delivery, and other service-related emails
- Notify the Growth Pilot team when a request has been verified
- Receive and respond to business inquiries, manage their review status, and protect the Contact form against spam or abuse
- Detect repeated requests, protect the service, and investigate failures or abuse
- Understand aggregate website usage and improve the visitor experience
- Maintain account sessions and restricted website areas when sign-in is used
Submitting the Complimentary Growth Brief form does not automatically generate a report. The launch process includes human review and uses public information about the requesting company, its products, marketplaces, competitors, reviews, pricing, and channel presence. We do not assume access to private company information unless it is separately and knowingly provided.
4. Email verification and communications
We send a secure verification link to confirm that the email address supplied with a Complimentary Growth Brief request can receive messages. The link expires after 24 hours. After verification, we may send service communications needed to prepare or deliver the requested brief and respond to related questions.
The current website does not operate a newsletter or automated promotional email program, and it does not send automated marketing text messages. Providing a phone number with a request does not by itself provide consent to automated promotional SMS.
5. Service providers
We use service providers to operate the website and process information on our behalf. Current providers include:
- Vercel for website hosting, delivery, and operational logs
- Neon for database hosting
- Resend for transactional email delivery and delivery records
- Manifest Auth for authentication when sign-in is used
- Manifest-hosted Umami for anonymous website analytics
- Manifest S3 storage when an authenticated user chooses to upload a supported file
These providers may process information only as needed to provide their services, maintain security, and meet their own legal obligations. We may also disclose information when required by law, to protect rights or safety, or in connection with a business reorganization or transfer.
6. Cookies and tracking
Growth Pilot currently uses one application session cookie when a user signs in. It is used for authentication, not advertising. The current Umami analytics script is cookieless. We did not identify advertising pixels, marketing cookies, or cross-site targeted-advertising trackers in the current website.
7. Selling and targeted advertising
Growth Pilot does not currently sell personal information or share personal information for cross-context behavioral or targeted advertising. Service providers that host the site, store records, authenticate users, or deliver emails process information to perform those operational services.
8. Retention
Growth Pilot has not yet adopted a fixed deletion schedule for Complimentary Growth Brief records or Contact inquiries stored in the database. We currently retain those records for as long as reasonably needed to fulfill and document requests, respond to inquiries, prevent abuse, resolve disputes, and meet legal or operational obligations. Verification tokens expire after 24 hours, but the request record and verification history may remain.
You may ask us to delete information that we are not required or reasonably permitted to keep. A formal retention schedule should be adopted before broader commercial launch.
9. Security
We use reasonable administrative and technical measures appropriate to the current service, including secure connections, restricted internal access, hashed verification tokens, a secure session cookie, and one-way hashing of IP addresses used for intake abuse controls. No online system can guarantee absolute security.
10. Your choices and privacy requests
Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain processing. We may need to verify your identity before completing a request, and legal exceptions may apply.
A monitored privacy mailbox has not yet been created. The public contact form stores submissions in the Growth Pilot database for staff review, but it does not currently send an email notification to a monitored inbox or send a customer acknowledgement. It should not be relied upon for time-sensitive privacy requests. Please do not send sensitive information through the form.
11. Children
The website and Complimentary Growth Brief are intended for business users, not children. We do not knowingly collect personal information from children under 13 through these services.
12. Changes to this policy
We may update this policy as the website or our practices change. We will post the revised policy here and update its effective date.