Privacy Policy

Last Updated: Nov 13, 2025

Company: StoragePilot Ltd (“StoragePilot”, “we”, “us”, or “our”)
Registered Office: Vancouver, British Columbia, Canada
Website: https://www.storagepilot.ai

1. Overview

This Privacy Policy explains how StoragePilot Ltd collects, uses, and protects personal information through our software, websites, and related services (the “Services”). StoragePilot is a business-to-business platform used by self-storage facilities.

We follow reasonable engineering and security practices and handle personal data in accordance with applicable privacy laws where required. By using our Services, you agree to this Policy.

2. Information We Collect

We collect only the information necessary to operate, support, and improve our Services.

Types of data collected include:

• Account Information: Name, company name, email, phone number, and login details.
• Billing Information: Processed securely through third-party payment processors.
• Usage Data: IP addresses, device/browser type, logs, analytics, and performance events.
• Customer Data: Data submitted by customers (e.g., tenant details, communication logs, reservation data, storage unit information, gate access events).
• Communications: Emails, support requests, and messages sent to us.

We do not intentionally collect sensitive categories of data.

3. How We Use Your Information

We use personal information to:

• Provide, operate, and improve the Services
• Authenticate accounts and maintain security
• Process subscriptions and billing
• Offer customer support and troubleshooting
• Analyze usage trends and enhance performance
• Send important service notifications or updates
• Meet legal or regulatory obligations when required

We do not sell personal data.

4. Legal Basis for Processing (EU/UK)

For EU/UK customers, StoragePilot generally processes data under:

• Performance of a contract (operating the platform)
• Legitimate interests (security, logging, improvement)
• Consent (for optional communications)

You may withdraw consent at any time.

5. Cookies and Analytics

We use cookies and analytics tools, including PostHog and Google Analytics, to understand usage and improve functionality. You may disable cookies in your browser, but doing so may affect certain features.

6. Data Storage and Retention

All customer data is stored in Canada (AWS ca-central-1).

• Data is retained for the duration of an active subscription.
• After cancellation, customer data may be retained for administrative, audit, or security purposes.
• As stated in our GDPR/Data Residency documentation, customer data is deleted within 12 months of contract termination unless otherwise required.

Customers may request data export at any time.

7. Security Measures

We use industry-standard security practices, including:

• HTTPS for all connections
• Encryption in transit (TLS 1.2+)
• Encryption at rest (AWS-managed)
• Backups stored securely in Canada
• Access controls and audit logging
• Regular internal reviews of security practices

While we take reasonable measures to safeguard information, no system is completely secure.

8. Data Sharing and Service Providers

We share limited personal data with trusted service providers who support our platform. These may include:

• Cloud hosting and infrastructure providers
• Communication services (voice, SMS, email)
• Payment processors
• Email and data ingestion services
• Analytics and logging tools
• AI model and processing providers

All processors are required to handle data securely and in accordance with applicable privacy obligations.

We do not share data with third parties for advertising purposes.

9. International Transfers

If you are located in the EU or UK, please note that personal data is processed in Canada, a region outside the EU. We rely on appropriate safeguards and contractual measures, as outlined in our GDPR & Data Residency Overview.

10. Your Privacy Rights

Depending on your region, you may have rights such as:

• Access to your data
• Correction or deletion
• Data portability
• Restriction of processing
• Objection to processing
• Withdrawal of consent

You may exercise these rights by contacting us. We respond within required timeframes.

For customer-submitted tenant data (“Customer Data”), requests must come from the customer (Data Controller).

11. Marketing and Communications

We may send product updates or service announcements.
Marketing communications are optional and may be sent manually or automatically.
You may unsubscribe at any time.

Essential service notifications cannot be opted out of.

12. Children’s Privacy

The Services are intended for businesses and are not directed toward individuals under 18. We do not knowingly collect personal information from minors.

13. Data Breach Notification

If we become aware of a data breach that may impact your information, we will notify affected customers as required by applicable laws and provide details on scope, impact, and recommended next steps.

14. Contact Information

For privacy inquiries or data requests, contact:

Email: info@storagepilot.ai
Mail: StoragePilot Ltd, Vancouver, BC, Canada

15. Changes to This Policy

We may update this Privacy Policy from time to time. Updates take effect when posted on our website. Continued use of the Services after changes constitutes acceptance of the updated Policy.