Privacy Policy

ImportPilot respects your privacy and is committed to protecting personal data in accordance with applicable data protection law, including Regulation (EU) 2016/679 (GDPR).

1. Who we are

Controller: IMRE LIVIU CRISTIAN
Registered address: Gheorghe Doja nr. 6, Tileagd, Bihor, Romania
Registration / tax number: Not applicable
Email: hello@importpilot.ai

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us by email, request information about ImportPilot, join our waitlist or ask for early access, or otherwise communicate with us in relation to our services.

3. What personal data we may collect

• Identification data, such as your name
• Contact data, such as your email address
• Message content and business context you include in your communications
• Technical data, such as IP address, browser type, device information, page access time, and basic server log information
• Any other information you voluntarily send to us

4. How we collect personal data

• Directly from you, when you email us or otherwise contact us
• Automatically, to the limited extent necessary for website hosting, security, and technical operation
• From service providers that help us operate the website and email infrastructure

5. Why we process personal data

• To respond to inquiries and requests
• To communicate about ImportPilot, including early access or waitlist interest
• To operate, secure, maintain, and improve the website
• To diagnose technical issues and prevent abuse or misuse
• To comply with legal obligations
• To establish, exercise, or defend legal claims where necessary

6. Legal bases for processing

We rely on one or more of the following legal bases under the GDPR:

• Legitimate interests, such as operating the website, responding to business inquiries, improving our services, and maintaining security
• Steps prior to entering into a contract, where you contact us about potential use of our services
• Legal obligation, where processing is necessary to comply with applicable law
• Consent, where legally required and specifically obtained

7. Recipients and service providers

We may share personal data with trusted service providers only where reasonably necessary to operate the website and communications. These may include website hosting and deployment providers, DNS and infrastructure providers, email and productivity providers, and security, analytics, or support providers if and when used.

At this stage, our core infrastructure may include Vercel for hosting and deployment, Cloudflare for DNS and related infrastructure services, and Google Workspace for business email and communication.

We do not sell personal data.

8. International data transfers

Some of our service providers may process personal data outside the European Economic Area. Where this happens, we take steps intended to ensure that appropriate safeguards are used in accordance with applicable law.

9. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including responding to your inquiry, maintaining business communications, complying with legal, accounting, or security requirements, and resolving disputes or enforcing rights.

10. Your rights

Subject to applicable law, you may have the right to request access to your personal data, request rectification of inaccurate or incomplete data, request erasure of your data, request restriction of processing, object to certain processing, request data portability where applicable, withdraw consent at any time where processing is based on consent, and lodge a complaint with a competent supervisory authority.

If you wish to exercise any of these rights, contact us at hello@importpilot.ai.

11. Complaints

If you believe your personal data has been processed unlawfully, you may lodge a complaint with your local data protection authority. In Romania, this may include the National Supervisory Authority for Personal Data Processing (ANSPDCP).

12. Cookies and analytics

At this stage, the website is intended to remain technically minimal. If we later enable non-essential cookies, analytics, tracking technologies, or similar tools, we will update this Privacy Policy and, where required, implement an appropriate cookie notice or consent mechanism.

13. Security

We take reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is completely secure.

14. Third-party links

This website may contain links to third-party services or websites. We are not responsible for the privacy practices of third parties.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any updated version will be posted on this page with a revised “Last updated” date.