PilotPost and the GDPR

Last updated: 18 October 2026

The EU General Data Protection Regulation (GDPR) gives people control over their personal data. This page explains how PilotPost handles it. For full details, read our Privacy Policy.

1. Our role

  • Controller: for your account data (name, email, billing status and settings), PilotPost decides how and why the data is used.
  • Processor: for the content you publish through PilotPost and any personal data inside it (for example people mentioned in a post, or WhatsApp recipients), we act on your instructions. You remain responsible for having the right to use that data.

2. Where your data is stored

Our servers and database are hosted by Hetzner Online GmbH in the EU (Germany and Finland). Some of our providers, such as our payment, posting and AI providers, may process data outside the EU. Where that happens, we rely on the safeguards those providers offer under the GDPR, such as the EU Standard Contractual Clauses. See the subprocessor list.

  • Contract: to run your account, publish your posts and manage your subscription.
  • Legitimate interests: to keep the Service secure, prevent abuse and fix problems.
  • Consent: for analytics and advertising cookies, which are only set if you click Accept. You can change your mind at any time with “Cookie settings” in the footer.
  • Legal obligation: for records the law requires us to keep, such as tax records.

4. Your rights

You can ask us to:

  • give you a copy of your personal data, or export it;
  • correct data that is wrong;
  • delete your data (see how);
  • restrict or object to how we use it;
  • withdraw consent you gave.

Email support@pilotpost.social from your account's email address. We reply within 30 days. You can also complain to your local data protection authority.

5. How we protect data

Social access tokens are encrypted, passwords are hashed, everything runs over HTTPS, and two-step verification is available on every account. Read more in Security practices.

6. Data processing agreement

Business customers who need a data processing agreement for the personal data in their content can request one at support@pilotpost.social.

PilotPost and the GDPR