Privacy Policy

1. Who we are

RetailPilot is a SaaS platform for retail businesses that connects WooCommerce webshops with physical stores. The service operates from Greece under the trade name “RetailPilot”.

This policy explains what personal data we process when you use retailpilot.io and app.retailpilot.io, for what purposes, and on what legal basis, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). For any question, contact support@retailpilot.io.

2. Data we collect

We collect only the data needed to run the service:

• Account data: your name, email address, password (always stored hashed), business name, and your account subdomain.
• Business data: whatever you enter or sync into the platform — products, orders, returns, tickets, tasks, employee records. This data belongs to you.
• Technical data: IP address, browser type, and timestamps in server logs, kept strictly for security and troubleshooting.
• Billing details: payments are processed by Stripe. RetailPilot never stores card numbers.

For data about your own customers (for example, details on return orders), see our GDPR page for merchants.

3. Cookies

We use only strictly necessary cookies: session cookies to keep you signed in and functional cookies (such as your language preference). We do not use advertising cookies, tracking cookies, or third-party marketing cookies.

4. Purposes and legal bases

• Providing the service (account creation, module functionality, support) — performance of a contract, Article 6(1)(b) GDPR.
• Invoicing and keeping tax records — legal obligation, Article 6(1)(c) GDPR.
• Security, abuse prevention, and service improvement — legitimate interests, Article 6(1)(f) GDPR.
• Optional product updates — consent, Article 6(1)(a) GDPR, which you can withdraw at any time.

5. Processors we work with

We work with a small number of processors, strictly to operate the service:

• Stripe — payment processing and subscription management.
• Resend — transactional email delivery (confirmations, notifications).
• Hetzner — infrastructure hosting in EU data centers (Germany).
• Cloudflare — CDN and DNS management.

We never sell or rent personal data to third parties.

6. Data retention

• Account and business data: kept while your account is active and deleted within a reasonable period after termination.
• Invoices and billing records: kept for as long as tax law requires.
• Technical logs: kept for a limited period and then deleted.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you,
• have inaccurate data rectified,
• have your data erased (“right to be forgotten”),
• receive your data in a portable, machine-readable format,
• restrict processing,
• object to processing based on legitimate interests.

To exercise any of these rights, email support@retailpilot.io. We respond within the deadlines set by the GDPR.

8. Complaints to the supervisory authority

If you believe the processing of your data violates the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA / ΑΠΔΠΧ) — www.dpa.gr.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with its last-updated date. We will communicate material changes through appropriate means.

10. Contact

For anything related to your personal data: support@retailpilot.io.