LEGAL
Privacy policy
This policy explains what personal data we collect, why, and the choices you have. It's written in plain English; where UK/EU data protection law (UK GDPR) gives you a right, we've named it.
Last updated: 1 March 2026
1. Who we are
PenguinPilot is a product of The Network Software. For the purposes of UK GDPR, we act as the data controller for account and billing data, and as a data processor for content our customers store in their own sites, CRM and social accounts.
2. What we collect
Account details (name, email, business name), billing information processed by Stripe, usage data (pages viewed, features used), and any content you add to a site, CRM record or social post. We collect cookies and similar technologies as described in our cookies policy.
3. Why we process it
To provide the service you've signed up for, to bill you, to respond to support requests, to improve the product, and — where you've agreed — to send product updates. Our legal bases are contract, legitimate interest and, for marketing email, consent.
4. Who we share it with
Sub-processors that help us run the service (hosting, email delivery, payments, analytics) — see our sub-processors list. We never sell personal data.
5. Your rights
Under UK GDPR you can ask to access, correct, delete or export your data, and object to or restrict certain processing. Email us and we'll respond within one month.
6. Data retention
We keep account data for as long as your account is active, plus a reasonable period afterwards for legal and accounting purposes, then delete or anonymise it.
7. International transfers
Some of our sub-processors operate outside the UK. Where they do, we rely on the UK International Data Transfer Addendum or an equivalent safeguard.
8. Contact
Questions about this policy: privacy@penguinpilot.ai. You can also complain to the UK Information Commissioner's Office (ico.org.uk).