On this page
Who we are
RadiusPilot is published by the legal name of the business, its postal address. The person in charge of the protection of personal information is name and title, reachable at email address.
What this policy covers
This website, the account you can create on it, the web app, and the RadiusPilot app for Windows. It doesn’t cover the websites and services the app connects to, which have their own policies.
This website
- It sets no cookies of its own and runs no analytics or advertising scripts.
- It’s hosted on Vercel, which may record technical information about visits, such as IP addresses, for security and to run the service, under the Vercel privacy policy. The old address, docodo10.github.io, is on GitHub Pages and only sends visitors here; GitHub may log those visits under the GitHub privacy statement.
- The email check runs in your browser. To read a domain’s public DNS records, your browser sends the domain you type to Cloudflare’s public DNS, or to Google Public DNS if Cloudflare doesn’t answer, with your IP address, as any request does; see Cloudflare’s resolver policy and Google Public DNS privacy. We don’t receive the domain or the result.
- The live demo holds no personal information about you, and starts fresh each time it opens.
- The web app keeps your account and your workspaces in your browser’s storage for radiuspilot.com, on your device: your name, your email address, a salted hash of your password (and your authenticator key, if you turn on two-step verification), and the businesses, contacts and messages you work with. None of it is sent to us. See The app.
- Clear your browser’s data for radiuspilot.com to remove what the web app keeps there.
- When you sign in, your session is kept in your browser’s storage until you sign out or it expires.
- Two features send what you type to our server: Ask RadiusPilot, the site’s assistant, and beta requests.
Your account on this website
An account is optional. You need one to follow support tickets and manage your sign-in on this website. It’s separate from the account in the Windows app.
What we keep
| What | Details |
|---|---|
| Your sign-in | Your email address and a one-way hash of your password (never the password itself); if you sign in with Google, the ID of that Google account and the name and profile picture link Google shares at each sign-in; the secret your authenticator app shares with us, if you turn on two-step verification |
| Your profile | Your name, your company, and whether you agreed to receive news by email |
| Support | Your tickets, and the messages in them from you and from us |
| Account activity | Security events, each with its time and the description your browser gives of itself (its user agent): sign-ins, two-step changes, signing out other devices, data exports and profile changes |
| Sign-in records | Your active sessions and a log of sign-in events, kept by our sign-in service with the IP address and browser of each |
| Rate limits | Counts of recent requests, keyed by your account or by a salted hash of your IP address, never the address itself |
| API keys | If you create any: each key’s name, its first 12 characters and a SHA-256 hash of it (never the key itself), when it was created, last used and revoked |
| API use | Your API credits and what spent them, and a log of each request: the key, the endpoint, the time, the credits used and whether it worked |
Why
- To sign you in and keep your account secure
- To answer your support tickets
- To limit abuse, such as too many sign-in attempts, new accounts or messages in a short time
- To send you news by email, only if you said yes. Change that in Settings at any time
Where
With Supabase, our database and sign-in provider, on servers in Canada.
Your password
When you create an account, your email address and password go to our server, which asks our sign-in service to create the account. The password is kept only as a one-way hash (bcrypt): nobody at RadiusPilot can read it, and it is never written to a log. Your email address isn’t checked with a confirmation email, so never use an address that isn’t yours.
Signing in with Google
When Google sign-in is offered and you choose Continue with Google, Google asks you to confirm, then shares your name, email address and profile picture with us: its basic profile, nothing more. We never see your Google password, and we get no access to your email, contacts, files or anything else in your Google account. Google handles that step under the Google Privacy Policy.
You can remove RadiusPilot from your Google account at any time, in its security settings under third-party connections. That doesn’t delete your RadiusPilot account: use Delete my account for that.
How long
- Your sign-in, profile, tickets, messages and account activity: until you delete your account. Copies can remain in our host’s backups until they’re replaced
- Sign-in records: how long sign-in records are kept
- Rate-limit counts: deleted after 3 days
- API request logs: deleted after 30 days. API keys and credits: until you delete your account
Who can see it
- You, once signed in. Row-level security on our database keeps other accounts out of your data
- RadiusPilot staff, to answer support tickets
- Our service providers, only to run the service: Supabase and, when the bot check is on, Cloudflare. Google knows when you use it to sign in to RadiusPilot
We don’t sell personal information, and we don’t share it for advertising.
The public key in our pages
Our pages include the server’s public “anon” key. That’s by design: it only lets the page reach our server. Row-level security on the server decides what each signed-in person can read and change, and no table can be read without signing in.
The bot check
Public forms, such as sign-in and contact, can use Cloudflare Turnstile to tell people from scripts. It’s off until we turn it on. When it’s on, Cloudflare receives your IP address and technical details about your browser for that check, under Cloudflare’s privacy policy.
The contact form
The contact form on the Support page asks for your name, your email, a topic and your message. We keep them with the time you sent them and a salted hash of your IP address, never the address itself. The hash only lets us limit how often one connection can write, and it’s removed after 30 days.
RadiusPilot staff read contact requests to answer them. They’re deleted 12 months after they’re sent.
Ask RadiusPilot, the site’s assistant
The Ask RadiusPilot button on this website opens an assistant that answers questions about RadiusPilot from the site’s own pages.
- What it sends. Your question, the conversation so far in that tab (its last 12 messages at most), the address of the page you’re on and your browser’s language go to our server, which asks Claude, an AI model by Anthropic (United States), to write the answer. Anthropic receives them only for that, under Anthropic’s privacy policy.
- What we keep. Not your questions, and not the answers: only how many questions were asked each day and what they cost.
- The daily allowance. To share the assistant fairly, our server counts the questions from each connection, keyed by a hash of your IP address, never the address itself.
- In your browser. The conversation stays in that tab’s storage, so it follows you from page to page. It’s gone when you close the tab or start a new conversation.
- Don’t type personal information into it, about you or about anyone else.
Beta requests
The beta page asks for your name, your email address, your agency or company and its website (optional), your role, your team’s size, how many clients you work with, where you work, how you heard about RadiusPilot and what you’d use it for, and for your consent. We keep them with the time you sent them, your browser’s language, and a keyed hash of your IP address that limits repeated requests, never the address itself.
An automated review
When your request arrives, an assistant, Claude by Anthropic (United States), reads it and gives it a score, a decision between access now and the waitlist, its reasons and a short note to you. We keep these with your request. It uses only what the form asks: your role, team size, clients, region, how you heard about RadiusPilot, what you’d use it for and your agency’s website. Access is given at once only when the assistant recommends it, the score is high enough, nothing looks like spam or abuse and a seat is still open. Otherwise the request joins the waitlist, ordered by score, then by date. If the assistant can’t answer, a person reviews the request.
You can ask what information was used and the main reasons for the decision, ask for a person to review it, and correct your information, from the contact form. Say “beta request” in your message.
Who sees it, and for how long
- RadiusPilot staff, to run the beta. Requests are stored with Supabase in Canada (Montréal). Anthropic receives a request only to review it, under Anthropic’s privacy policy
- Anyone who has the private link the beta page gives you can see where your request stands and, once it’s accepted, your beta code, so keep it to yourself
- We keep a request until 12 months after the beta ends, or until you ask us to delete it
The RadiusPilot API
The API is for accepted beta testers. Requests your code sends with an API key go to our server, which answers them the way the app’s features do: a business search asks the public listing services named in The app, a site check reads the website you send, and the RadiusPilot AI requests go to Claude, an AI model by Anthropic (United States), under Anthropic’s privacy policy. We don’t keep what you send to RadiusPilot AI or what it writes: only the request log in What we keep, for 30 days.
Don’t send personal information about people in the facts or notes of a request. The API never returns email addresses.
The app
The app stores your account, your workspaces and your settings on your computer, and doesn’t send them to us. Your account password is kept as a salted hash. Your mailbox password, and your ChatGPT sign-in or OpenAI API key if you set up AI, are encrypted by Windows for your Windows account.
The web app stores the same account, workspaces and settings in your browser’s storage for radiuspilot.com, on your device, and doesn’t send them to us either. It can’t connect a mailbox or your own AI account, so it keeps no mailbox password or AI sign-in. Anyone who can use your browser profile can open them: clearing the browser’s data for radiuspilot.com deletes them.
To do its work, the app sends some information to third-party services, only when you use the feature that needs it:
| Service | What it receives, and when |
|---|---|
| Photon (OpenStreetMap search) | What you type in the place search of a new scan |
| Each business’s website | One ordinary page request during a scan, and when you run a tool or a website audit on it. Published contacts reads up to five more pages of the same site. The website audit also reads the homepage’s stylesheets, robots.txt, the sitemap, the plain-HTTP address and up to two contact or about pages. Site technology and the Brand kit tool read the homepage’s stylesheets too. In the web app, these reads go through our server, which reads the page and sends it back; it keeps only a count per connection, keyed by a hash of its IP address |
| Google Places, through our server | The area and the kinds of businesses of each scan, and a business’s name, address and location when you check it with Google. The businesses Google returns (name, address, phone, website, rating, review count, hours, categories, Google Maps link) are saved in your workspace, on your device, like any scan result. Our server keeps only a count per connection |
| Google Maps street map, through our server | The map tiles of the area you look at, when the street map is on. Our server keeps only a count per connection |
| Google PageSpeed | The address you check with Site speed or a website audit |
| Cloudflare DNS, with Google DNS as a backup | The domain you check with Email health or a website audit |
| Internet Archive | The domain you check with Site history or a website audit |
| Google Fonts | A font request, when a site in the website editor uses a font the app doesn’t include |
| Your mail provider | Your email, once you connect your mailbox |
| RadiusPilot AI: our server, then Anthropic (Claude) | What you ask it to write, with the facts it needs about that business, offer or market, when no AI of your own is set up. Our server keeps only how much each connection used each day, keyed by a hash of its IP address |
| The RadiusPilot API, only if you use it | What your own code sends with an API key, to our server at radiuspilot.com/api/v1/. Our server answers it the way the app’s features do: the listing services for a business search, the website for a site check, RadiusPilot AI for drafts and reports. It keeps a hash of each key, when it was last used, and a log of each request for 30 days, never what you asked RadiusPilot AI to write |
| OpenAI, only if you set up your own AI | Through your own Codex, ChatGPT or API account: what you ask it to write, with the facts it needs about that business, offer or market, and, unless you switch background analysis off, real businesses’ facts up to your daily cap |
RadiusPilot AI is included in the web app and the Windows app. When you ask it to write, what you asked and the facts it needs go to our server, which asks Claude, an AI model by Anthropic (United States), to write the answer, under Anthropic’s privacy policy. We don’t keep what you asked or the answer: only how much each connection used each day, keyed by a hash of its IP address, never the address itself, so the daily allowance is shared fairly.
Scans and listing checks go through our server, which asks Google Places, under Google’s privacy policy: the area and kinds of businesses of a scan, or a business’s name, address and location. What Google returns about businesses is saved in your workspace, on your device, like any scan result. Our server doesn’t keep it: only a count per connection.
Your own AI is optional. If you set it up in the Windows app, requests go to OpenAI, outside Québec, under your own OpenAI or ChatGPT account and OpenAI’s policies, not through us.
The app has no analytics, no tracking and no crash reporting.
Information about businesses and the people who run them
Real scans list businesses from Google Places, through our server, as described above. The Published contacts tool shows only what a business publishes on its own website, one business at a time and at your request, with the page each item comes from. It doesn’t guess addresses or decode hidden ones. It keeps only an address you choose to use as a business’s email, with the page it came from.
Businesses, prospects and clients you import from your own CSV file stay on your device. You confirm that you’re allowed to email the addresses in it, or leave them out.
You decide what you do with that information, and you’re responsible for following the law when you contact anyone, including Canada’s anti-spam law (CASL) and private-sector privacy laws.
When you connect your mailbox in the app, your email travels between the app and your mail provider. We don’t see it. Every outreach email carries your mailing address and a way to opt out, and the addresses on your opt-out list are blocked.
Workspace sync, later
Syncing the app’s workspaces with your account is planned. Before any workspace data is stored on our servers, this policy will say what is stored, why, for how long and who can see it, and you’ll be asked to agree.
Your rights
You can ask to access the personal information we hold about you, to correct it, to withdraw your consent, to have it deleted, or to receive it in a structured, commonly used format.
Signed in, you can do most of this yourself: correct your profile in Settings, download your data with Export my data, and remove everything with Delete my account.
For anything else, send a privacy request from the Support page, or write to email address. We’ll answer within 30 days.
When a decision about you is made only by automated means, such as the review of a beta request, you can ask what personal information was used, the reasons and main factors behind the decision, and for a person to review it.
You can also complain to the Commission d’accès à l’information du Québec or to the Office of the Privacy Commissioner of Canada.
Children
RadiusPilot is a tool for businesses and isn’t meant for children.
Changes to this policy
We’ll post any change on this page with its date, and say so in the changelog when it matters.