MetaPilot · Legal

Privacy Policy

Last updated: August 9, 2026

This policy explains what information MetaPilot collects, how we use it, and the choices you have. We collect only what we need to run the service.

Information we collect

Account data — your name, email address, and organization details you provide when signing up.
Website content — the pages you submit for metadata generation, which we fetch and process to produce structured data.
Connected accounts — when you connect a third-party account (such as Cloudflare), we store the access tokens needed to act on your behalf. These are encrypted at rest.
Billing data — subscription and payment details, processed by our payment provider (we do not store full card numbers).
Usage data — logs and diagnostics needed to operate, secure, and improve the service.
Bot-protection signals — when you submit one of our public forms (such as the site checker or the site audit), Cloudflare Turnstile collects technical information from your browser — including your IP address and browser and device characteristics — to confirm the request comes from a person rather than an automated script. This check runs invisibly: nothing is displayed and no interaction is required from you.
Analytics data — how you interact with our public pages and the portal (pages viewed, clicks, scrolling, and session recordings), collected via Microsoft Clarity to help us understand usage and improve the experience. On our public pages this is anonymous; when you are signed in to the portal, we associate this activity with your account and organization so we can improve the product for our customers.

How we use your information

To provide the service — generating and publishing structured data and Open Graph metadata for pages you submit.
To manage your account, subscription, and billing.
To deploy and manage integrations you enable (for example, the Cloudflare Worker on your zone).
To communicate with you about your account, security, and service updates.
To secure the service and prevent abuse.

Third-party services

We share data with service providers only as needed to run MetaPilot:

Cloudflare — when you connect your account, to deploy and manage the metadata-injector Worker on your zone.
Cloudflare Turnstile — invisible bot protection on our public forms, covered by the Turnstile Privacy Addendum.
Stripe — to process subscriptions and payments.
Google (Vertex AI / Gemini) — page content is sent to generate structured data.
Microsoft Clarity — behavioral analytics (heatmaps and anonymized session recordings) across our public pages and the portal, to understand usage and improve the product.

We do not sell your personal data.

Cookies and analytics

We use cookies and similar technologies to keep you signed in and to run the service. We also use Microsoft Clarity to capture how visitors interact with our public pages and the MetaPilot portal — including page views, clicks, scrolling, and session recordings. When you are signed in to the portal, this activity may be associated with your account and organization; on our public pages it is anonymous. Clarity may set cookies and combine this behavioral data in accordance with Microsoft's Privacy Statement. You can limit this tracking through your browser settings or by using standard tracking-prevention tools.

Bot protection

Our public forms are protected by Cloudflare Turnstile, which we run in invisible mode: the check happens silently in the background, nothing is shown on screen, and you are never asked to solve a puzzle or tick a box. To perform it, Turnstile collects technical information from your browser — including your IP address, browser and device characteristics, and signals about how the page was loaded — and may set a token or cookie on our domain to remember that the check passed. Cloudflare processes this data on our behalf to detect and block automated abuse, and does not use it to build advertising profiles. This use is governed by the Cloudflare Turnstile Privacy Addendum and Cloudflare's Privacy Policy.

Data retention

We keep your data for as long as your account is active and as needed to provide the service. When you disconnect an integration or delete your account, we remove the associated credentials and data, except where we must retain records to meet legal or accounting obligations.

Security

We use industry-standard measures to protect your data, including encryption of access tokens at rest and encrypted transport (HTTPS). No system is perfectly secure, but we work to protect your information and limit access to it.

Your rights

You may access, correct, or delete your personal data, and you may disconnect integrations or close your account at any time. To make a request, contact us at the address below.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above, and where appropriate we will notify you.

Contact

Questions about privacy or your data: contact@metapilot.io