Privacy Policy

Last Updated: January 2025

1. Introduction

Grease Pilot ("we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when creating an account or using our Service:

  • Account Information: Name, email address, phone number, password
  • Billing Information: Billing address, payment card information (processed securely by Stripe)
  • Training Records: Work experience documentation, hours logged, skills, certifications, training activities
  • Profile Information: Any additional information you choose to provide

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

  • Usage Data: Pages visited, features used, time spent, actions taken
  • Device Information: IP address, browser type, operating system, device identifiers
  • Cookies: We use cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information

We use your information for the following purposes:

  • Service Provision: To provide, maintain, and improve our Service
  • Account Management: To create and manage your account
  • Payment Processing: To process subscription payments and manage billing
  • Communications: To send service-related notifications, updates, and support messages
  • Customer Support: To respond to your inquiries and provide assistance
  • Security: To protect against fraud, unauthorized access, and security threats
  • Analytics: To understand how users interact with our Service and improve user experience
  • Legal Compliance: To comply with applicable laws and regulations

4. How We Share Your Information

4.1 We DO NOT Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

  • Payment Processing: Stripe (for payment and subscription management)
  • Database Hosting: Supabase (for secure data storage)
  • Website Hosting: Vercel (for website hosting and delivery)

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders, subpoenas, or legal processes
  • Requests from law enforcement or government agencies
  • Protection of our legal rights and property
  • Investigation of fraud or security issues

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: All data transmitted is encrypted using SSL/TLS
  • Secure Storage: Data is stored in secure, encrypted databases
  • Payment Security: We never store complete credit card information; payment data is handled securely by Stripe (PCI-DSS compliant)
  • Access Controls: Strict access controls limit who can access your information
  • Password Protection: Passwords are hashed and salted

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you cancel your subscription:

  • Your training data is preserved and you can resubscribe to regain access
  • Account information is retained for legal and business purposes
  • You may request deletion of your account and data (see Section 10)

7. Your Rights and Choices

7.1 Access and Update

You can access and update your account information at any time through your profile settings.

7.2 Data Portability

You can request a copy of your training data in a portable format.

7.3 Account Deletion

You can request deletion of your account and personal information by contacting us at privacy@greasepilot.com. Please note:

  • Some information may be retained for legal compliance
  • Deletion is permanent and cannot be undone
  • Any active subscription will be cancelled

7.4 Marketing Communications

You can opt out of promotional emails by clicking "unsubscribe" in any marketing email. You cannot opt out of service-related communications.

8. Cookies and Tracking Technologies

8.1 What We Use

We use cookies and similar technologies for:

  • Authentication: To keep you logged in
  • Preferences: To remember your settings
  • Security: To detect and prevent fraud
  • Analytics: To understand how you use our Service

8.2 Your Control

Most browsers allow you to control cookies through settings. However, disabling cookies may limit your ability to use certain features.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to delete personal information
  • Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at privacy@greasepilot.com.

12. International Users

Our Service is operated in the United States. If you are located outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: privacy@greasepilot.com
Mail: [Your Business Address]

15. Data Protection Officer

For privacy-related inquiries, you may contact our Data Protection Officer at: dpo@greasepilot.com

By using our Service, you acknowledge that you have read and understood this Privacy Policy.