Privacy Policy

Last updated: 4 November 2026 · AICustomerPilot is operated by One Level Up

This Privacy Policy explains what personal data AICustomerPilot collects, why, how we use and protect it, and how you can ask us to delete it. It applies to our website, our web app and the chat widget businesses put on their websites.

Who we are

AICustomerPilot is a customer messaging and CRM service operated by One Level Up, 27, Abulbarkat, 247554, Deoband, UP, India.. You can reach us at hello@aicustomerpilot.com.

Businesses and their customers

We serve two groups of people:

Our users: businesses and their team members who sign up for AICustomerPilot. For their account data we decide how it's used (we are the "data fiduciary" or "controller").
Their customers: people who message a business that uses AICustomerPilot, on WhatsApp, Instagram, email or web chat. We handle these messages on behalf of that business and only to provide our service to it (we are its "data processor"). The business decides why it collects your data; its own privacy policy also applies. If you messaged a business, you can contact it directly, or us, about your data.

What we collect

From our users:

Account details: name, business name, email address, phone number and password (stored encrypted).
Billing details: plan, invoices and payment status. Card and UPI details are handled by our payment provider (Razorpay); we don't store them.
Business content you add: store settings, knowledge base text, pages read from your website, files you upload, product catalogs, templates, campaigns and automations.
Connection details for the channels you connect, such as access tokens and account IDs. These are stored encrypted and used only to send and receive messages for you.

About the people who message a business (processed for that business):

Name or profile name, phone number, email address or Instagram username, as shared by the channel.
Message content and attachments descriptions, dates and times, and delivery and read status.
Details the business adds, such as notes, tags, orders, deals and tasks, and email subscriber lists a business imports with the people's consent.
For the website chat: the page the visitor was on, and any name or email they choose to give.

Collected automatically: IP address, browser and device type, pages visited, and server logs, used to keep the service secure and working. We also record whether a campaign email was opened or a link clicked, so the business can see results.

WhatsApp, Instagram and Meta data

When a business connects a WhatsApp Business number (WhatsApp Business Platform / Cloud API) or an Instagram professional account, we receive data from Meta Platforms through Meta's APIs, with the permissions the business grants. This includes the messages its customers send, their profile name and phone number or Instagram username, message status updates, and the business's message templates and account details.

We use this data only to provide the features the business turned on: showing chats in its inbox, sending its replies and approved templates, AI-suggested or automatic replies, contact records, tasks and reports.
We do not sell it, use it for advertising, build profiles for other purposes, or share it with data brokers.
We process it in line with the Meta Platform Terms and Developer Policies, the WhatsApp Business Terms and Policies, and Instagram's policies.
When a business disconnects a channel or deletes its account, we stop receiving data from Meta for it, and delete its access tokens immediately. See Deleting your data.

Gmail and Outlook

If a business connects a Gmail or Microsoft Outlook inbox, we read new emails and send replies on its behalf so they appear in its AICustomerPilot inbox. AICustomerPilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use email data for advertising, and people at AICustomerPilot don't read it except to give support the business asks for, for security, or where the law requires.

How we use data

To provide the service: receive and send messages, show chats, keep contact records, run automations and campaigns the business sets up.
To write AI replies and drafts, and suggest tasks and deals from chats (see below).
To bill, give support, and send account and service messages.
To keep the service secure, prevent abuse and spam, and fix problems.
To improve AICustomerPilot using usage statistics. Messages are not used to train AI models.
To send our users product news, which they can turn off at any time.
To meet legal obligations.

AI replies

When a business uses AI replies or drafts, the recent messages in a chat and relevant parts of the business's knowledge base are sent to our AI provider, Anthropic, to write the reply. Under Anthropic's commercial terms this data is not used to train its models. Businesses decide whether AI replies on its own, only suggests drafts, or is turned off, for each channel.

We share data only as needed to run the service, with providers bound by confidentiality and data protection terms:

Meta (WhatsApp and Instagram), to send and receive the business's messages.
Google and Microsoft, when a business connects Gmail or Outlook.
Anthropic, for AI replies.
Amazon Web Services (email sending), for campaign emails.
Razorpay, for payments.
Our hosting provider, where the service and its database run.
Authorities, where the law requires it, and a buyer if our business is ever sold, under this same policy.

We never sell personal data.

How long we keep data

Account and business data: while the account is active.
Chats and contacts: until the business deletes them, or deletes its account.
After an account is deleted, its data is erased within 30 days, and from backups within 90 days.
Billing records: as long as tax law requires.

Deleting your data

You can ask us to delete your data at any time:

Users can delete chats, contacts and channels in the app, or email hello@aicustomerpilot.com from the account's email address to delete the whole account.
People who messaged a business can ask that business, or email us with the phone number, email or Instagram username they used. We'll delete it, or pass the request to the business.
If you connected through Facebook or Instagram, you can also remove AICustomerPilot in your Facebook or Instagram settings under Apps and Websites.

Full steps are on our Data deletion page. We confirm deletion within 30 days.

Your rights

Depending on where you live (including under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR), you can ask to access, correct, update or delete your personal data, withdraw consent, object to some uses, or get a copy of it. Email hello@aicustomerpilot.com. We reply within 30 days. You can also complain to your data protection authority.

Security

Data is sent over HTTPS. Passwords are hashed, and channel tokens and passwords are encrypted at rest. Access inside One Level Up is limited to people who need it to run the service. Messages from Meta can be checked with a signature so we only accept genuine ones. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

Where data is stored

Our servers and some providers (such as Meta, Anthropic and Amazon Web Services) may process data outside your country, including in the United States and the European Union. We use providers with appropriate safeguards for these transfers.

Cookies

We use cookies needed to log you in and keep you secure, and to remember choices like the version of our site you prefer. The chat widget stores a small identifier in the visitor's browser so the conversation continues. We don't use advertising cookies.

Children

AICustomerPilot is for businesses and isn't meant for children. Users must be 18 or older. We don't knowingly collect children's data for our own purposes.

Changes to this policy

We'll update this page when our practices change, and change the date at the top. For significant changes we'll also tell our users by email or in the app.

Contact and grievances

One Level Up, 27, Abulbarkat, 247554, Deoband, UP, India.. Email: hello@aicustomerpilot.com.

Grievance Officer: Ushaib Usmani, grievance@aicustomerpilot.com. We acknowledge complaints within 48 hours and resolve them within 30 days.