Draft — pending legal review. This page describes, in plain language, what data BusinessPilot AI actually processes today. Operator identity below is real (Firmenkraft / Rashid Tabah, Hans-Koch-Ring 12, 21493 Schwarzenbek, Germany); it is still not a substitute for a lawyer-reviewed privacy policy and should be reviewed by counsel before being relied on for real users.

Privacy Policy

Last updated: 2026-09-19 · Operator: Firmenkraft – Rashid Tabah, Hans-Koch-Ring 12, 21493 Schwarzenbek, Germany

Account data

When you register an organization, we store your name, email address, and a hashed (never plain-text) password, along with your role within the organization.

Business lead data

Discovery campaigns collect publicly available business information (name, address, public phone/email, website, ratings) about third-party businesses from configured sources (e.g. Google Places). Website audits analyze the public content of a lead's website. Outreach communications and their status (sent, blocked, provider used) are recorded for compliance and audit purposes — see our Terms of Service for how these leads may be contacted.

Consent and do-not-contact

We record consent, contact-permission status, and do-not-contact requests per lead, and enforce them before any outreach is sent.

Data export and deletion

An organization admin can export all data held about a given lead, or anonymize that lead's personal contact fields, from the company detail page. [DESCRIBE ACCOUNT-LEVEL DELETION PROCESS AND RETENTION PERIOD ONCE DEFINED.]

Demo mode

When demo mode is enabled, no real email, SMS, WhatsApp, phone, or payment action is ever sent — all provider integrations are simulated and clearly marked as such in the product.

Contact

For privacy questions, contact: info@firmenkraft.de.