Privacy policy
Last updated: October 24, 2026. Contact: hello@genpilot.app.
Information we collect
GenPilot stores account details, search instructions, documents you choose to upload, lead results, drafts, and messages you approve for sending. We use product activity events to understand failures and improve the service. We do not include Gmail access tokens or email message bodies in analytics events. Payments are handled by Stripe.
Website attribution
Product analytics can include the page path, referring domain, campaign tags and an anonymous browser identifier so we can understand how people find and use GenPilot. We reuse a local first-visit attribution record for up to 90 days; clearing browser storage removes that local record. Signing in can associate the anonymous journey with your account. Arbitrary URL parameters, uploaded document contents and your search brief are not included in this attribution record. Server-side analytics disables location enrichment based on Cloudflare's server IP; older analytics records may still contain those inaccurate locations.
Google account access and use
Connecting Gmail is optional. Our current send-only integration requests gmail.send to send messages you explicitly approve, immediately or on your chosen schedule, and userinfo.email to identify the connected mailbox. We store the mailbox address, an encrypted OAuth refresh token, and the messages sent through GenPilot with their send status and Google message identifiers. GenPilot does not request inbox-reading permission or import new Gmail replies in this version. Existing conversation records from the earlier reply-sync feature may remain in your account until deleted.
Scheduled sending
A message is sent only after your approval. You can pause scheduled outreach or disconnect Gmail in Settings. There are no automatic follow-ups by default. Because this version does not check your inbox, you must check Gmail for replies, bounces, and opt-out requests before sending additional messages. A successful send status means Google accepted the message, not that the recipient opened or received it.
Sharing and service providers
Approved messages are sent to Google and their intended recipients. Cloudflare hosts GenPilot and its stored data. Stripe processes billing, and PostHog processes product activity events. GenPilot uses Cloudflare Workers AI for AI inference, including search planning, lead assessment, and draft generation. Guest previews and selected public-web business research also use OpenAI’s GPT-6 Luna through OpenRouter, with reviewed search criteria and public source material. Those research paths do not receive stored uploaded-document contents, seller profiles, or Google integration and conversation records. Cloudflare also converts documents you choose to upload into readable text. Our web-research providers include Exa, Tavily, and SerpAPI, and Monid as a gateway to TinyFish web search and page fetching. Search and AI services receive the search instructions, directly supplied context, and public source material needed for their tasks; Google API user data is excluded as described below. Other disclosures occur only with your authorization or where necessary for security or applicable legal obligations.
AI processing and Google-data separation
GenPilot enforces a permanent architectural boundary between its Google integration and its AI and web-search systems. Google API user data, including Google OAuth credentials, the mailbox identity returned by Google, Google message identifiers, stored sent-message history, historical imported replies, and information derived from these records, is not provided to any AI or web-search provider for inference, training, or other processing. This includes Cloudflare Workers AI. This separation does not depend on an AI provider being temporarily disabled or on the provider selected for non-Google research. Connecting Gmail or approving an email does not authorize AI processing of Google API user data. Cloudflare hosts the application and stores its protected Google integration records; that hosting and storage are separate from Workers AI inference. Search planning, lead assessment, and draft generation use GenPilot search instructions, directly supplied context, and public web sources, not Google integration or conversation records. Additional emails are composed and approved by you, without sending conversation history to an AI model. Cloudflare's Workers AI data-use policy states that it does not use customer content to train AI models; standard inference does not retain inputs or outputs beyond processing, subject to its documented exceptions. We do not enable inference-content logging or caching in AI Gateway. GenPilot does not access Google Drive or Google Photos through Google APIs. Documents you upload directly to GenPilot, such as a CV or requirements brief, are processed by Cloudflare for text conversion and by our AI service to refine your search; they are not automatically imported from your Google account. Avoid uploading unnecessary sensitive information.
Protection of information
Connections to Google use HTTPS. OAuth refresh tokens are encrypted by the application before storage. Access to application data is controlled by authenticated, user-scoped requests. No service can guarantee absolute security. Human access to Google user data is limited to your explicit permission, necessary security investigations, applicable legal requirements, or aggregated and anonymized internal operations as permitted by Google's policies.
Retention, disconnecting, and deletion
We retain account and conversation records to provide your saved searches and history. Disconnecting Gmail removes its stored credentials, pauses pending outreach, and attempts to revoke Google's authorization. It does not delete your previous sent-message history or messages in Gmail. You may also revoke access at Google Account permissions. To request deletion of account data, uploaded documents, or historical Google-derived records, email hello@genpilot.app from your registered address. Billing or security records may be retained when legally necessary.
Google Limited Use
GenPilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements. We do not use, transfer, or sell Google API user data, including raw, aggregated, anonymized, or derived data, to develop, train, or improve foundational or generalized AI or machine-learning models. This restriction applies to GenPilot and to transfers to third-party model providers. We do not sell Google user data or use it for advertising. Additional Google permissions are not part of this send-only integration. A change in Google data access would require advance disclosure, user authorization, and applicable Google approval; it would not authorize AI processing of Google API user data or relax the architectural boundary described above.
Your choices
You can use lead search without connecting Gmail, edit your search information, disconnect Gmail, and request access, correction, or deletion of your personal information by contacting hello@genpilot.app. We will publish changes to this policy here and explain material changes to Google data access before requesting additional permissions.