Privacy Policy
Last updated: June 23, 2026
1. Company
Sitepilot is operated by Aayla Secura LLC, doing business as Sarvixo (sarvixo.co). References to “we”, “us”, or “our” in this Policy refer to Aayla Secura LLC dba Sarvixo.
Registered address: 1500 N Grant St Ste N, Denver, CO 80203
Contact: ryan@sarvixo.co
2. Data We Collect
We collect the following categories of data:
- Account data: Your email address and password (stored as a hashed credential) when you create an account.
- Training content: Website URLs and the textual content crawled from those URLs that you submit to train your chatbot.
- Embeddings: Vector representations (embeddings) of your training content, stored in our database to power semantic search and chatbot responses. Embeddings are derived from your content but are not human-readable text.
- End-user chat messages: Messages sent by your website visitors to your embedded chatbot widget, along with any lead emails they choose to share with the chatbot.
- Usage analytics: Information about how you and your visitors interact with the Service, such as query volume, response times, and feature usage, used to operate and improve the Service.
- Payment data: Payment is processed by Stripe. We do not store full credit card numbers; Stripe provides us a token and summary billing information (last 4 digits, expiry, billing name).
3. How We Use Your Data
- To create and maintain your account and authenticate you.
- To crawl, chunk, embed, and index your submitted content to power your chatbot.
- To generate AI responses to your visitors’ questions using retrieval-augmented generation (RAG).
- To capture and surface lead emails to you through the dashboard.
- To process payments and send billing receipts.
- To send transactional emails (account confirmation, password reset, billing notices).
- To monitor and improve the reliability, performance, and security of the Service.
We do not sell your data to third parties. We do not use your content or your visitors’ conversations to train general-purpose AI models.
4. Sub-processors
We rely on the following third-party sub-processors to operate the Service. By using Sitepilot you acknowledge that your data may be processed by these providers under their respective privacy policies:
| Provider | Purpose | Data transferred |
|---|---|---|
| Azure OpenAI (Microsoft Azure) | Generating text embeddings and AI chat completions | Your training content text and end-user chat messages are sent to Azure OpenAI to generate embeddings and responses. Content is processed under Microsoft's data processing agreement. |
| Supabase | Database and storage | Account data, training content, embeddings, chat logs, and lead emails. |
| Vercel | Application hosting and CDN | All network traffic passing through the Service; server logs. |
| Stripe | Payment processing | Billing name, email, and payment card details (handled directly by Stripe). |
5. Cookies
Sitepilot uses cookies and similar browser storage mechanisms for the following purposes:
- Authentication: A session cookie keeps you logged in to your account.
- Preferences: We may store UI preferences (e.g., theme) in local storage.
- Analytics: We may use privacy-respecting analytics (no advertising cookies) to understand aggregate usage patterns.
We do not use third-party advertising cookies. You can disable cookies in your browser settings, but this may prevent you from logging in.
6. Your Data Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and associated data. Training content, embeddings, chat logs, and lead data for your account will be deleted within 30 days of a verified deletion request.
- Export: Request an export of your training content and conversation history in a machine-readable format.
- Objection / Restriction: Object to or request restriction of certain processing activities.
To exercise any of these rights, email ryan@sarvixo.co with the subject line “Data Request”. We will respond within 30 days.
7. Data Retention
We retain account data for as long as your account is active. If you cancel your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it longer for legal, tax, or fraud-prevention purposes (e.g., billing records may be retained for up to 7 years). Conversation logs are retained for up to 12 months to allow you to review them in your dashboard; you may delete them earlier via the dashboard.
8. Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for stored data, hashed password storage, and role-based access controls. However, no system is perfectly secure. If you believe your account has been compromised, contact us immediately at ryan@sarvixo.co.
9. Children’s Privacy
Sitepilot is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice in the Service before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
11. Contact
Questions or concerns about this Privacy Policy? Contact us at: ryan@sarvixo.co
Aayla Secura LLC dba Sarvixo
1500 N Grant St Ste N, Denver, CO 80203