At a Glance

When you use our website, we collect information you provide — such as your name, email, company, and assessment responses — along with limited technical data to keep the site functioning. We use this information to deliver your results, process purchases, and improve our services. Payment processing is handled by Stripe. We use Google Analytics to understand how visitors use our site. We do not sell or share your personal information. You may request access to, correction of, or deletion of your data at any time by contacting hello@pilottopayoff.com.

Information We Collect

Information You Provide

We collect information you submit directly through our website, including your name, email address, company name, and job title when you fill out our contact form. If you sign up for our newsletter, we collect your email address. When you complete an assessment — such as the AI Security Self-Test or Decision Architecture Profile — we collect your responses and the email address you provide to receive your results. If you purchase a report or assessment product, your payment information is submitted directly to Stripe; we do not receive or store your payment card numbers.

We do not collect sensitive personal data as defined under the Minnesota Consumer Data Privacy Act.

Information Collected Automatically

We use session storage to maintain your experience during a visit, such as preserving form state and remembering dismissed notifications. For our assessment tools, we record internal usage events — such as when an assessment is started, completed, or when results are viewed — to help us understand how our tools are used and where we can improve them. We also use Google Analytics to collect aggregate information about site traffic and usage patterns, as described in the Cookies and Tracking section below.

How We Use Your Information

We use the information we collect to respond to your inquiries and contact form submissions, deliver assessment results and purchased reports, process payments for digital products, and improve our website and services.

We do not use artificial intelligence to process your personal data or generate your assessment results.

How We Share Your Information

We do not sell or share your personal information as defined under applicable state privacy laws.

We share information with Stripe, our payment processor, to facilitate transactions you initiate. You can review Stripe's privacy policy at stripe.com/privacy. We use Google Analytics to analyze site traffic; Google's use of this data is governed by Google's Privacy Policy at policies.google.com/privacy. We use secure cloud infrastructure to host our website and a secure file delivery system to provide purchased reports. These service providers maintain their own security and privacy practices.

We may disclose your information if required to do so by law, or if we believe in good faith that disclosure is necessary to protect our rights, enforce our terms, or comply with a judicial proceeding or legal process.

Payment Processing

All payment transactions are processed by Stripe, a PCI-compliant payment processor. When you make a purchase, your payment card information is submitted directly to Stripe. We never receive, access, or store your payment card numbers. We receive confirmation of your payment, your email address, and purchase metadata from Stripe to fulfill your order. For details on how Stripe handles your data, see Stripe's Privacy Policy.

Assessment Data

When you complete an assessment on our website, your responses are stored securely and associated with your session. Your results are generated based on your responses. We do not use artificial intelligence to generate your assessment results.

If you purchase a report, we retain your assessment data to generate and deliver your report and to support any reassessment benefits described on the product page at the time of your purchase. Assessment data is treated as confidential and is not shared with other clients.

Cookies and Tracking

Our site uses the following cookies and tracking technologies:

Session storage

We use browser session storage to maintain your experience during a visit — for example, dismissing notifications, preserving form state, and storing assessment progress. Session storage is cleared when you close your browser.

Session cookie

Our site sets a session cookie to support assessment functionality. This cookie expires after 7 days and is used solely to associate your session with your assessment data.

Google Analytics

We use Google Analytics (GA4) to collect aggregate data about site traffic and usage patterns, such as pages visited, time on site, and referral sources. Google Analytics uses cookies to identify returning visitors. Google processes this data under its own privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On or by adjusting your browser's cookie settings.

Data Security

We implement industry-standard security measures to protect your information, including HTTPS encryption, security headers, input validation, and rate limiting. Your data is stored in a secure database within our hosting infrastructure.

No method of transmission or storage is completely secure. While we take reasonable steps to protect the information you share with us, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

Data Retention

We retain your information as long as reasonably necessary to fulfill the purposes described in this policy and in accordance with applicable legal and tax requirements. You may request deletion of your personal information at any time by contacting us at the address below. Deletion of assessment data associated with a paid purchase may affect your ability to use any reassessment benefits included with that purchase.

Your Privacy Rights

All users may request access to, correction of, or deletion of their personal information by contacting us. We will respond to verified requests within 45 days. If you have subscribed to communications from us, you may unsubscribe at any time by contacting us.

Residents of states with consumer privacy legislation — including Minnesota, California, Virginia, Colorado, Connecticut, Texas, and Montana — may have additional rights under applicable law. To exercise any rights, contact hello@pilottopayoff.com.

We do not sell or share your personal information as defined under applicable state privacy laws. If we are unable to fulfill a request, we will explain the reason and provide instructions for appealing our decision.

Children's Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

International Visitors

Our services are based in and operated from the United States. If you visit our website from outside the United States, your information will be transferred to and processed in the United States.

Website and Consulting Engagements

This privacy policy governs information collected through pilottopayoff.com. If you engage Pilot to Payoff for consulting services, data handling during that engagement is governed by your engagement agreement.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised "Last updated" date.

Contact

If you have questions about this privacy policy or wish to exercise any of your data rights, contact us at hello@pilottopayoff.com.