Your information, explained clearly.

Last updated: September 20, 2026

1. Information We Collect

When you create or use an account, we may collect your email address, authentication and session information, and information needed to operate your account and provide the service.

When you use the AI generation features, we process the text you submit, selected generation options, and files you upload, such as screenshots, images, PDFs, DOCX files, or supported text files.

2. Uploaded Files and AI Processing

Uploaded files and submitted content are processed to provide the requested AI functionality. Depending on the feature and file type, the service may extract text from documents or send supplied content to our AI provider for generation or quality analysis.

Do not upload confidential, highly sensitive, regulated, or personal information unless you have the right to do so and understand the risks associated with processing that information.

3. Generated Content and History

AI-generated results may be stored in your CriteriaPilot generation history so that you can review, reuse, favorite, share, or manage previous results. History is associated with your account and, where applicable, a workspace.

When you delete a history item through the service, we request deletion of that stored history record from our application database. Certain technical backups, logs, or records maintained for security, legal, or operational purposes may persist for a limited period where applicable.

4. How We Use Information

• To create and authenticate accounts.
• To provide AI generation, quality analysis, history, workspace, and sharing features.
• To send account, verification, and password-reset communications when applicable.
• To prevent abuse, fraud, unauthorized access, and service disruption.
• To maintain, secure, troubleshoot, and improve the service.

5. Data Storage

Application account and generation-history data is stored using our application infrastructure and database services. CriteriaPilot uses MongoDB for application data storage. Uploaded files may be held temporarily in server memory while a request is processed rather than being retained as permanent file storage by the application.

Retention can vary by the type of information and operational requirements. We do not promise a particular deletion timeline for copies that may exist in security logs, backups, or third-party systems.

6. Third-Party Services

CriteriaPilot uses third-party infrastructure and service providers to operate the product. These may include Google Gemini for AI processing, MongoDB for application data storage, Railway or similar hosting infrastructure for running the application, and an email/SMTP provider for account emails when configured.

These providers may process information as necessary to provide their services. Their own terms and privacy policies may also apply.

7. Cookies and Sessions

CriteriaPilot uses a session cookie to keep you authenticated. The session is represented by a secure, server-managed token rather than storing your password in the browser. We may also use necessary browser storage or cookies required for core functionality.

8. Data Security

We use reasonable technical and organizational measures intended to protect account information and application data. No internet-based service can guarantee absolute security, and you should use appropriate care when deciding what information to upload.

9. Your Choices and Deletion Requests

You can manage your data yourself from the Account & data option in CriteriaPilot. From there you can download a copy of your account details and generated history as a JSON file, and permanently delete your account. Inside the app you can also delete individual history items and turn off the share link for any shared result.

Deleting your account removes your login and active sessions and deletes all history you created, including results in team workspaces, and any share links to them stop working. Team workspaces you own that still have other members are handed to the longest-standing member; workspaces with no other members are deleted along with their results.

For privacy questions, or a request to delete information that is not available through the product, contact us using the address below. We may need to verify the request and may retain information where required for security, fraud prevention, legal obligations, or legitimate operational purposes.

10. Contact

Privacy and data-deletion requests can be sent to support@criteriapilot.com.

11. Changes to This Policy

We may update this Privacy Policy as the service changes. The revised version will be posted at this URL with an updated date.