We built Data Pilots to help businesses be more transparent about data. We hold ourselves to the same standard. This policy tells you exactly what we collect, why, and what we do with it — in plain English.
Data Pilots is operated by Toni Dumas, trading as Data Pilots (datapilots.co). We are the data controller for any personal data we hold about you.
If you have any questions about this policy or want to exercise your rights, contact us at team@datapilots.tech.
You submit a website URL. That URL is passed to our scan engine, which analyses publicly visible content on that website.
We do not store your results on our servers after your session ends. Parsed scan results are temporarily stored in your own browser (localStorage) for up to 24 hours so you can return to them or attach them to a new account without re-scanning. This storage is local to your device — it is not accessible to us.
No personal data is collected from you in order to run a free scan. No account, no email, no name.
If you email us or book a call via Calendly, we receive your email address and the content of your message. We use this to respond to you. We do not add you to any mailing list without your explicit agreement.
We collect your email address and store your scan results so you can track progress over time. Paid scans retain their Papaya consent session so you can access the full audit detail. You can view, export, or delete your results at any time by contacting us at team@datapilots.tech.
If you save a free scan to your new account at sign-up, that result is stored under your account from that point forward and subject to the same retention terms as a paid scan.
We use no non-essential cookies. No analytics. No advertising. No tracking.
The only cookie that may be set is __cf_bm, placed by Cloudflare (our hosting provider) for bot protection. This is a strictly necessary technical cookie that does not track you or build any profile. Under UK PECR, strictly necessary cookies do not require your consent.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
__cf_bm |
Cloudflare | Bot management / security — distinguishes humans from automated traffic | 30 minutes |
We review our cookie use whenever we add new features. If we ever introduce non-essential cookies, we will update this policy and add a consent mechanism before doing so.
Papaya is the AI browser agent we use to run live consent audits. When you submit a URL, Papaya visits that URL and analyses what is publicly visible — the same way a real buyer or GDPR auditor would. It checks cookie banners, consent behaviour, and policy links.
| What Papaya does | What Papaya does not do |
|---|---|
| Visits the URL you submit | Collect personal data from the site being scanned |
| Analyses publicly visible content | Retain a copy of the scan after we have parsed the results |
| Returns findings to Data Pilots | Associate results with any personal identifier |
Deletion is automatic and immediate. As soon as Papaya returns results and we have parsed them, we send a deletion request to Papaya's API — their copy is removed without any action required from you. We do not wait for a timer or a user event. On a free scan, Data Pilots also discards the results when your session ends. On a paid account, results are saved to your account only, and you can delete them at any time.
| Service | Purpose | Their privacy policy |
|---|---|---|
| Cloudflare | Website hosting, CDN, security (HTTPS, DDoS protection) | cloudflare.com/privacypolicy |
| Papaya | AI consent audit — processes the URL you submit | Available on request |
| Calendly | Booking calls — only if you choose to book | calendly.com/privacy |
We process personal data under the following legal bases:
Under UK GDPR and the Data Protection Act 2018, you have the right to:
To exercise any of these rights, email team@datapilots.tech. We will respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk
If we make material changes — for example, if we introduce analytics or a new third-party tool — we will update this page and change the "Last updated" date at the top. We will not use your data in ways that contradict what was in place when you provided it without giving you the chance to opt out first.
Questions, requests, or concerns about this policy:
Data Pilots · datapilots.co · England & Wales