1. About ZocoPilot
ZocoPilot is an independent product founded and operated by Sumit Kumar Mallik. For privacy questions or requests, contact hello@zocopilot.com.
2. Information you provide
Depending on the features you use, we process:
- Your email address and information needed to create an account.
- Authentication information submitted through the sign-in service.
- Website domains submitted for scanning.
- Domains associated with your account.
- Messages and attachments sent to us.
- Information associated with an enabled subscription or selected plan.
3. Account registration and sign-in
We use Supabase to support account authentication.
Where email-and-password registration is enabled, credentials are processed through the authentication service.
Where Google sign-in is enabled and you choose to use it, Google and Supabase process information needed to authenticate you. Depending on the permissions configured and granted, this can include an account identifier, email address and basic profile information.
We do not receive your Google account password through Google sign-in.
Authentication services may also process request and security information to support sign-in and protect accounts.
4. Website scans and retrieved information
When you request a scan, our server retrieves selected publicly accessible resources from the submitted website.
These may include:
- Public homepage content.
- The website’s robots.txt file.
- The website’s llms.txt file.
- Structured data and other information contained in those resources.
We process this material to perform technical checks and generate results.
A website domain or retrieved page may contain personal information, including where a website identifies a person or sole trader.
When you are signed in, scan information may be stored in association with your account.
The target website may receive technical information associated with our server’s request. Its handling of that request is governed by its own practices.
Submitting a website for scanning does not authorize access to restricted resources or give ZocoPilot ownership of the website’s content.
5. Technical information
We process technical information needed to deliver and protect the service, which can include:
- IP addresses.
- Request timestamps.
- Browser or user-agent information.
- Session and authentication information.
- Scan usage counts.
- Operational errors and security records.
For example, IP-based usage information is used to apply scan limits and help investigate abuse.
Hosting, database and authentication providers may also process technical information as part of delivering their services.
6. Payments and subscriptions
When paid checkout is enabled, we use Dodo Payments to support the checkout and subscription process.
Information sent to initiate checkout may include your account email, an internal account identifier and the selected plan.
Payment details are collected through the hosted checkout process. We receive information needed to administer the subscription, such as a payment-provider customer identifier, plan, payment status and subscription status.
Dodo Payments may collect additional billing, payment, identity or tax information under its applicable terms and privacy notice.
Cancelling a subscription does not necessarily delete the account, billing records, or information held independently by the payment provider.
7. Communications
If you contact us, we process the information you send so we can review and respond to the request.
This may include your name, email address, message and attachments.
Please do not email passwords, payment-card details, access tokens, or unnecessary sensitive information.
We do not treat a support enquiry or a scan request as automatic permission to send unrelated marketing.
8. Why we use personal information
We use information to:
- Provide requested scans.
- Display and save results where supported.
- Create and maintain accounts.
- Authenticate users.
- Administer enabled subscriptions.
- Respond to enquiries and privacy requests.
- Apply usage limits.
- Investigate errors, misuse and security issues.
- Maintain and troubleshoot the service.
- Meet applicable legal requirements.
- Establish, exercise or defend legal claims where necessary.
Providing some information is necessary for a requested feature. For example, a scan requires a target domain and an account requires authentication information.
If required information is not provided, that feature may not be available.
9. Legal grounds where applicable
Where applicable law requires a lawful basis, we use the basis appropriate to the particular activity.
Our intended processing framework is:
| Activity | Applicable basis, where supported |
|---|---|
| Delivering a scan or account service you request | Performance of a contract or requested pre-contractual steps |
| Managing an enabled paid subscription | Performance of a contract |
| Preventing misuse and maintaining security | Legitimate interests, subject to the required assessment |
| Responding to general enquiries | Legitimate interests or requested pre-contractual steps, depending on the request |
| Meeting legal requirements | Compliance with an applicable legal obligation |
| Optional processing requiring consent | Consent, obtained separately where required |
Relevant legitimate interests include operating the service, protecting it from misuse and responding to communications.
This policy is not itself a request for blanket consent.
Where processing relies on consent, we will provide the relevant choice and explain how consent can be withdrawn.
10. Automated checks and planned AI features
ZocoPilot provides automated technical checks that analyze public website resources to evaluate crawler access, metadata formatting, and protocol compatibility.
These automated checks inspect publicly accessible web pages and domain configurations. The findings reflect technical structure and do not establish, promise, or guarantee that a website will rank, appear in an AI answer, or receive citations from any AI platform.
ZocoPilot does not submit your submitted scan queries or website data to external artificial intelligence providers for model training.
We do not use automated scanning to make profiling decisions about individuals that produce legal or similarly significant effects.
11. Service providers and other disclosures
We work with trusted third-party service providers who assist us in operating our application and delivering our services:
| Provider | Purpose |
|---|---|
| Vercel | Website and application edge hosting |
| Supabase | Database infrastructure and user authentication |
| Google OAuth authentication (when chosen by user) | |
| Dodo Payments | Checkout processing and subscription billing management |
These service providers process personal data solely to perform their services for us or comply with applicable legal requirements. We do not sell personal data to third parties.
We may also disclose personal information if required to:
- Comply with a legal obligation, court order, or valid government request.
- Enforce our terms of service or investigate potential security breaches or abuse.
- Protect the rights, property, or safety of ZocoPilot, our users, or the public.
- Complete a merger, acquisition, or sale of assets with appropriate confidentiality safeguards.
14. International processing
ZocoPilot is operated from India, and our service providers host application servers and databases in regions including the United States.
If you use our services from outside these countries, your information may be transferred to, stored, and processed in jurisdictions where our technical providers maintain server facilities.
We seek to ensure that our service providers apply appropriate administrative, organizational, and technical safeguards to protect your personal data in accordance with applicable laws.
15. Retention and deletion
We retain personal information for as long as your account remains active or as necessary to provide you with the services.
We also retain limited operational, transaction, and security logs as necessary to comply with applicable tax and legal obligations, resolve disputes, prevent security incidents, and maintain standard backup cycles.
You can request the deletion of your account and personal information at any time by contacting hello@zocopilot.com. Upon receipt of a verified request, we will delete or anonymize your personal data, subject to records that must be retained for legal compliance or dispute resolution.
16. Security
We use safeguards appropriate to the information processed and the risks involved. These safeguards must be verified against the actual implementation.
No website, transmission method or storage system can be guaranteed completely secure. This policy does not claim a security certification, independent audit, specific encryption standard, or regional-isolation guarantee.
If you believe your account or information has been compromised, contact hello@zocopilot.com.
17. Your privacy rights
Depending on applicable law and the circumstances, you may have rights to:
- Access personal information.
- Request correction.
- Request deletion.
- Request restriction of processing.
- Object to certain processing.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
- Complain to a competent privacy authority.
Rights may be subject to legal conditions and exceptions.
Withdrawing consent does not invalidate processing carried out lawfully before withdrawal.
To make a request, email hello@zocopilot.com and describe the information or account concerned.
We may request proportionate information needed to verify identity or authority. Do not send identity documents unless requested through an appropriate process.
Requests will be handled within the time limits required by applicable law.
You do not need to create a new account solely to send a privacy request.
18. Children's privacy
ZocoPilot is a business and developer tool intended for commercial, professional, and business use. We do not knowingly collect personal information from individuals under 16 years of age.
If you believe an individual under the age of 16 has provided personal information to us, please contact hello@zocopilot.com so we can promptly delete the information.
19. Third-party websites
Our website and reports may link to third-party websites.
Those websites operate under their own policies. This policy describes ZocoPilot’s processing and does not govern unrelated third-party services.
20. Changes to this policy
We may update this Privacy Policy from time to time to reflect improvements to our service, changes in technology, or legal requirements.
When revisions are made, we will update the “Last updated” date at the top of this policy. For significant changes, we will provide additional notice or obtain consent where required by law.
21. Contact
For privacy questions or requests: