This document is provided in English, which is the legally binding version.
This Privacy Policy explains how ChainPilot ("we", "us", or "our") collects, uses, stores and protects information about you when you use our supply chain management platform and related services.
ChainPilot is a supply chain management platform built for Amazon FBA and Shopify sellers. We provide inventory forecasting, automated reorder management, freight tracking, and cash flow planning tools.
For questions about this policy, contact us at: privacy@chainpilot.app
We collect the following types of information:
Account information
Amazon Selling Partner data (with your explicit authorization)
Shopify store data (with your explicit authorization)
Supply chain operational data
Usage data
We use the information we collect to:
We do not sell your data to third parties. We do not use your Amazon or Shopify data for advertising or marketing purposes.
We access your Amazon Selling Partner data solely to provide the inventory management and supply chain services described in this policy. Specifically:
Your data is stored on secure servers hosted on DigitalOcean infrastructure in the EU (Frankfurt, Germany). Files you upload, such as invoices and payment proofs, may be stored using Cloudflare's R2 storage service. We implement the following security measures:
We share personal data only with service providers that help us run ChainPilot, under contracts that let them use it only to provide their service to us:
The full list of these providers, with what each one does and where it processes data, is in the Subprocessors section of our Data Protection Policy. You can also ask us for it at the email in section 14.
Each provider has its own privacy policy and data handling practices.
You have the right to:
To exercise any of these rights, email us at privacy@chainpilot.app.
No fee in most cases
Exercising your rights, including getting a copy of your personal data, is free. If a request is clearly unfounded, repetitive or excessive, we may charge a reasonable fee based on what it costs us to handle it, or decline it. Either way, we will explain why.
Confirming your identity
Before we act on a request, we may ask for information that confirms who you are, usually by having you confirm the request from the email address on your account. This is a security step: it makes sure your personal data never goes to someone who has no right to it. We may also ask for more details about your request so we can answer it faster.
How long it takes
We aim to answer every valid request within one month. A particularly complex request, or several requests at once, can take longer; if so, we will let you know and keep you updated. Where the law in your region sets specific time limits, they are in sections 9 and 10.
If you live in the EEA, the UK, Switzerland or California, you have additional rights, described in sections 9 and 10.
If you are in the European Economic Area, the United Kingdom or Switzerland, the EU General Data Protection Regulation, the UK GDPR and the Swiss Federal Act on Data Protection apply to our processing of your personal data. This section adds to the rest of this policy.
Controller
The company operating ChainPilot — a Wyoming (USA) limited liability company, reachable at the email in section 14 — is the controller of personal data about account holders, website visitors and people who contact us. Where you enter information about other people into ChainPilot — for example your suppliers, freight forwarders or team members — we process it on your behalf and under your instructions, as your processor.
Legal bases
International transfers
Our application servers are located in Frankfurt, Germany. ChainPilot is operated by a United States company, and some of the service providers listed in section 7 process data in the United States or other countries. When personal data leaves the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss adaptations where applicable), or on the recipient's certification under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for more information about these safeguards.
Additional rights
In addition to the rights in section 8, you may ask us to restrict the processing of your personal data, and you may object at any time to processing based on legitimate interests or used for direct marketing. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. We respond to requests within one month; for complex requests we may extend this by up to two further months and will tell you if we do. If you are in Switzerland, we respond within 30 days; if we need longer, we will tell you within that time and give you a new date.
Complaints
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where you believe an infringement took place. In the UK this is the Information Commissioner's Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). We would appreciate the chance to address your concern first at privacy@chainpilot.app.
This section applies to residents of California and supplements the rest of this policy. It describes our practices under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), to the extent the CCPA applies to us.
Personal information we collect
In the past 12 months we have collected the following categories of personal information — from you directly, from your device when you use our website and platform, from Amazon and Shopify when you authorize a connection, and from colleagues who invite you to their account:
We use and disclose these categories only for the business purposes described in section 3, and we disclose them only to the service providers listed in section 7, who may use them solely to provide services to us. We keep personal information for the periods set out in section 6.
No sale or sharing
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done either in the past 12 months, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not use sensitive personal information to infer characteristics about you. Because we do neither, there is nothing to opt out of — but if your browser sends a Global Privacy Control signal, we treat it as an opt-out request all the same.
Your California rights
How to make a request
Email privacy@chainpilot.app with "California privacy request" in the subject line. To protect your account, we verify your identity by matching the details you give us with the information we hold — usually by confirming the request from the email address on your account. You may use an authorized agent; we will ask for your signed permission and may still need to verify your identity directly. We respond within 45 days, and may extend this by a further 45 days where reasonably necessary, in which case we will let you know.
California's "Shine the Light" law (Civil Code §1798.83) also lets you ask whether we have disclosed personal information to third parties for their own direct marketing purposes. We do not.
We use essential cookies only — strictly necessary to keep you logged in and maintain your session. We do not use advertising cookies, tracking cookies or analytics cookies that follow you across other websites.
Our service is designed for business use and is not directed at children under 18. We do not knowingly collect personal data from minors.
We may update this Privacy Policy from time to time. We will notify active users by email at least 14 days before material changes take effect. Continued use of the platform after changes constitutes acceptance of the updated policy.
For privacy-related questions or requests:
ChainPilot
Email: privacy@chainpilot.app
Related documents: Terms of Service · Privacy Policy · Data Protection Policy