1. Who we are
PensacolaCoPilot is operated by Well100.Health ("we", "us", "our"). We act as the data controller for personal data processed through this service. Contact: support@pensacolacopilot.com.
2. Personal data we collect
- Account data: email address, authentication identifiers, and password hash (or Google OAuth identifier).
- Usage data: questions you submit to the AI, timestamps, question counts, and anonymous usage counters stored in your browser.
- Subscription data: subscription status, plan, and billing lifecycle events received from Paddle. Card and payment details are collected and stored by Paddle, not by us.
- Technical data: IP address, device and browser identifiers, and log data for security and diagnostics.
- Support data: messages you send us.
3. Why we process it (purposes and legal bases)
- To create your account and provide the service — performance of a contract.
- To enforce free-tier limits, prevent abuse, and secure the service — legitimate interests.
- To process subscriptions, renewals, and refunds via Paddle — performance of a contract and legal obligation.
- To respond to support requests — legitimate interests.
- To send service and transactional emails — performance of a contract.
- To comply with applicable law — legal obligation.
4. Who we share data with
- Paddle.com Market Ltd. — our Merchant of Record for all orders. Paddle handles payments, subscription management, tax compliance, invoicing, and refund requests.
- Hosting and infrastructure providers that host the application and database.
- AI model providers that process your questions to generate responses.
- Email delivery providers for account and transactional emails.
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law.
5. Retention
We retain account data for as long as your account is active, plus a reasonable period for legal, tax, and dispute-resolution purposes. Usage logs are retained for up to 12 months. When data is no longer needed it is deleted or anonymized.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise these rights, email support@pensacolacopilot.com. We will respond within the timeframe required by applicable law (typically one month under GDPR).
7. International transfers
Your data may be processed in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
8. Security
We apply appropriate technical and organizational measures — including encryption in transit, access controls, and least-privilege administration — to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.
9. Cookies and local storage
We use strictly-necessary cookies and browser local storage to keep you signed in and to remember anonymous free-tier usage. We do not use advertising cookies.
10. Changes
We may update this notice from time to time. Material changes will be posted here with an updated "Last updated" date.