Your email and a password
Your password is kept only as a one-way hash, never written to a log. Two-step with an authenticator app adds a second lock.
Security
Built to be safe
Your workspaces stay on your computer. Your website account keeps only what support needs. Here is exactly what goes where.
The app
Your data stays on your device
In the Windows app, your work lives in one folder on your computer. In the web app, it stays in your browser. Password-protected backups, restore and delete are in Settings.
On your device
Workspaces, businesses, emails and settings stay on your PC, or in your browser with the web app. They never go to a RadiusPilot server.
Encrypted at rest
Your app password is a salted hash. In the Windows app, workspaces, your two-step key and your mailbox and AI sign-ins are encrypted by Windows for your account.
No tracking
No analytics, no tracking pixels and no crash reports, in the app or on this website.
Your account
Your website account
Sign in here to download the app, get help and follow your tickets. Built to keep as little as it can.
Only what support needs
Your email, your name and company, your tickets and your account activity. Export it or delete it any time.
Hosted in Canada
On Supabase, in the ca-central-1 region.
Your rows only
Row-level security on every table. You see only your own data; support staff see your tickets to answer them.
Guarded forms
Rate limits on public forms, keyed to a salted hash, never your IP address.
Network
What leaves your computer
Only what a feature needs, only when you use it.
| Service | What it receives, and when |
|---|---|
| Photon (OpenStreetMap search) | What you type in the place search of a new scan |
| Each business’s website | One ordinary page request during a scan, and when you run a tool or a website audit on it. Published contacts reads up to five more pages of the same site. The website audit also reads the homepage’s stylesheets, robots.txt, the sitemap, the plain-HTTP address and up to two contact or about pages. Site technology and the Brand kit tool read the homepage’s stylesheets too. In the web app, these reads go through our server, which reads the page and sends it back; it keeps only a count per connection, keyed by a hash of its IP address |
| Google Places, through our server | The area and the kinds of businesses of each scan, and a business’s name, address and location when you check it with Google. The businesses Google returns (name, address, phone, website, rating, review count, hours, categories, Google Maps link) are saved in your workspace, on your device, like any scan result. Our server keeps only a count per connection |
| Google Maps street map, through our server | The map tiles of the area you look at, when the street map is on. Our server keeps only a count per connection |
| Google PageSpeed | The address you check with Site speed or a website audit |
| Cloudflare DNS, with Google DNS as a backup | The domain you check with Email health or a website audit |
| Internet Archive | The domain you check with Site history or a website audit |
| Google Fonts | A font request, when a site in the website editor uses a font the app doesn’t include |
| Your mail provider | Your email, once you connect your mailbox |
| RadiusPilot AI: our server, then Anthropic (Claude) | What you ask it to write, with the facts it needs about that business, offer or market, when no AI of your own is set up. Our server keeps only how much each connection used each day, keyed by a hash of its IP address |
| The RadiusPilot API, only if you use it | What your own code sends with an API key, to our server at radiuspilot.com/api/v1/. Our server answers it the way the app’s features do: the listing services for a business search, the website for a site check, RadiusPilot AI for drafts and reports. It keeps a hash of each key, when it was last used, and a log of each request for 30 days, never what you asked RadiusPilot AI to write |
| OpenAI, only if you set up your own AI | Through your own Codex, ChatGPT or API account: what you ask it to write, with the facts it needs about that business, offer or market, and, unless you switch background analysis off, real businesses’ facts up to your daily cap |
Business websites are opened the way a visitor would: one page at a time, public addresses only, no forms, no sign-ins.
Protect the sign-in
Two-step with an authenticator app, ten backup codes, trusted devices for 30 days at most.
Turn on two-stepRespect every inbox
An unsubscribe line on every outreach email, a daily limit and an opt-out list. No guessed addresses.
The email rules
Good to know
The limits, plainly
Found a security issue?
Tell us privately before sharing it, with the steps to see it. Use the contact form on the support page.
Get started
Your next clients are a scan away
Get the Windows app, run your first real scan and see who needs you.