Privacy Policy
Last updated: 18 October 2026
SupportPilot is a product of New Empire AI (registration number A2026/37303, Maseru, Lesotho) (“we”, “us”). This policy explains what personal information SupportPilot handles, why, who we share it with, and the rights you have, including under the Data Protection Act, 2011 of the Kingdom of Lesotho.
1. Our role
For your own account (your login email, billing details and settings) we are the data controller. For the support emails your customers send to the inbox you connect, you are the data controller and we act as your data processor: we process those emails only to provide SupportPilot to you, on your instructions.
2. What we collect
- Account information: your email address and workspace name.
- Gmail connection: the address of the inbox you connect, and access granted through Composio. We never see your Google password.
- Support email: incoming emails in the connected inbox (subject, body, sender name and address, time), the replies we draft, and the replies you or Autopilot send.
- Your documents: files and text you upload (FAQs, policies, product docs) and the search vectors made from them.
- Settings: tone, signature, custom instructions, Autopilot threshold and blocked categories.
- Billing: your subscription status and Stripe customer reference. Card details are held by Stripe, not by us.
- Activity logs: records of actions such as approvals, sends and connection changes, used for security and support.
3. How we use it
- To sort incoming email, find the relevant passages in your documents and draft replies.
- To send replies you approve, or that Autopilot sends within the rules you set.
- To sign you in, bill your subscription and provide support.
- To keep the service secure, prevent abuse and fix problems.
We do not sell personal information, and we do not use your email or documents to train AI models. Our AI providers' API terms state that they do not use API data to train their models by default.
4. Google user data
SupportPilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide the drafting and sending features you see in the app, we don't use it for advertising, and people at New Empire AI read it only with your permission, for security, or where the law requires.
5. Who we share it with
We use these service providers to run SupportPilot:
| Provider | Purpose | Information |
|---|---|---|
| Google (Gmail) | Reading incoming support email and sending the replies you approve, from the inbox you connect | Email content, sender and recipient addresses |
| Composio | Securely connecting your Gmail account and relaying email events to us | Gmail connection tokens, email content in transit |
| Anthropic | Sorting incoming email and drafting replies with AI | Email subjects and bodies, relevant passages from your documents, your tone and signature settings |
| OpenAI | Turning your documents and incoming emails into search vectors so drafts can cite the right passages | Document text, email subjects and bodies |
| MongoDB Atlas | Database hosting | All stored workspace data listed in this policy |
| Stripe | Payments and subscription billing | Billing name, email and card details (we never see or store full card numbers) |
| Resend | Sending sign-in links | Your login email address |
| Vercel | Hosting the SupportPilot website and app | Requests to the app, including your session cookie |
| Fly.io | Hosting the SupportPilot backend | All data processed by the backend |
We may also disclose information where the law requires it.
6. Cross-border transfers
Our providers store and process information outside Lesotho, including in the United States and the European Union. We use providers bound by contracts or laws that give information a level of protection comparable to Lesotho's Data Protection Act.
7. How long we keep it
- Support emails, drafts, documents and settings: until you delete them or your workspace is deleted.
- Activity logs: 180 days.
- Payment event records: 30 days. Stripe keeps billing records under its own legal obligations.
When your workspace is deleted, we delete its data from our database, and from backups as they expire.
8. Security
Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Access to the backend requires a secret key, every request is limited to your own workspace, and Gmail access runs through Composio's managed connection rather than us holding your Google password.
9. Your rights
You can ask us to:
- confirm whether we hold your personal information and give you a copy;
- correct or delete it;
- stop or limit processing, or object to it.
Email support@newempireai.online. You can also request deletion of your workspace with the Delete workspace button in Settings → Account. If you're a customer of a business that uses SupportPilot, contact that business first, since it controls your emails; we'll help it respond. If you're not satisfied with our response, you may complain to the data protection authority in Lesotho, or in the country where you live.
10. Cookies
We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies.
11. Children
SupportPilot is a business tool and isn't meant for anyone under 18.
12. Changes
If we make material changes, we'll update the date above and tell account holders by email before they take effect.
13. Contact
Privacy contact: Founder, New Empire AI, support@newempireai.online, Maseru, Lesotho. See also our Terms of Service.