1. What we collect
- Account details: your email address and the login details you create. For staff and client accounts, the email and permissions you set.
- Site connection details: the addresses of your WordPress or Ghost sites and the credentials or tokens needed to publish to them.
- API keys: the AI and search provider keys you add. They are encrypted at rest.
- Usage logs: run history, errors, skips, quality scores and actions taken in the app, so that we can show you what happened and fix problems.
- Content: topics, drafts and settings you create in the app.
- Payment references: the bKash transaction ID or bank transfer reference you send us so that we can confirm a payment. We do not collect card numbers.
- Messages: what you send to support by email, phone or WhatsApp.
2. Why we collect it
- To run the service for your sites: planning, research, writing, quality checks, publishing, link maintenance and monitoring.
- To manage accounts, trials and payments, and to activate plans.
- To keep the service secure, find faults and give support.
When a feature runs, the content it needs (for example a topic, a draft or search text) is sent to the AI or search provider whose key you connected. That provider's own privacy terms apply to what it receives.
3. We do not sell your data
We do not sell your data or use it for advertising. We share information only where it is needed to run the service (such as the providers you connect and our hosting), where the law requires it, or where you ask us to.
4. API keys and security
Your API keys are stored encrypted and are used only to run features for your own sites. We limit access to our systems. No system is perfectly secure, so please use provider keys with spending limits where the provider allows it.
5. Cookies and local storage
The app uses a login session cookie, which keeps you signed in. We do not use advertising or tracking cookies. This marketing site stores your light or dark theme choice and your BDT or USD choice in your browser's local storage, and nowhere else. The site loads fonts from Google Fonts, so Google receives your IP address when the page loads.
6. How long we keep data
We keep your data while your account is active. When a trial or paid year ends, we keep it for a reasonable period in case you come back, and then delete it. Payment references may be kept longer where we need them for our records.
7. Access and deletion
You can ask us to show you the data we hold about you, correct it, or delete your account and its data. Email support@nichepilot.net from the address on your account. Deleting an account does not remove content that has already been published to your own websites.
8. Changes
We may update this policy. The date at the top shows the latest version.
9. Contact
NichePilot, Dhaka, Bangladesh. Email support@nichepilot.net. Phone and WhatsApp: +880 1674-531682. Support hours: Sat–Thu, 10:00–20:00 (GMT+6). See also our terms of service.