Privacy Policy
Effective July 26, 2026
This policy explains what StockPilot AI ("StockPilot", "we") collects, why, and who it is shared with. StockPilot AI is operated by Big Bad Agency. We keep data collection to what the product needs to work, and we do not sell your personal information or license your images to anyone.
What we collect
- Account details: the email address and password you register with (passwords are stored hashed by our auth provider, never in plain text).
- Photos you upload: the image files you drop into StockPilot for scoring and metadata, plus technical metadata read from them (dimensions, and EXIF fields such as camera and ISO where present).
- Generated results: the sellability scores, per-platform match scores, titles, descriptions and keywords StockPilot produces for your images.
- Billing information: if you subscribe, your plan and subscription status. Card payments are handled entirely by Stripe — we never see or store your full card number.
- Basic usage counts: how many scores/metadata generations you have used against your monthly plan cap.
How we use it
We do not use your uploaded images to train foundation models, and we do not sell, rent, or license your images or personal data to third parties.
- To provide the core service: score your photos, generate metadata, and export platform-ready CSV files.
- To enforce plan limits and process subscription billing.
- To secure your account and keep your library private to you.
- To operate and improve the reliability of the service.
Where your data lives
Your account, image records, and generated metadata are stored in Supabase (Postgres + Storage). Uploaded image files are kept in a private storage bucket scoped to your account — other users cannot read your files. The application is hosted on Cloudflare Pages.
Third parties that process data for us (subprocessors)
Each of these providers processes data only to deliver its part of the service, under its own security and privacy commitments.
- Supabase — database, authentication, and private file storage.
- Anthropic (Claude) — generates image titles, descriptions, and keywords. Image content is sent to Anthropic only to produce that metadata.
- Stripe — subscription billing and card processing.
- Cloudflare — application hosting and content delivery; if privacy-friendly, cookieless web analytics is enabled it counts page views without tracking individuals.
Cookies & tracking
We use a single essential cookie/token to keep you signed in. We do not use advertising cookies or cross-site trackers. Any analytics we run is aggregate and cookieless, so there is no cookie-consent banner to click through.
Data retention & deletion
Your images and generated metadata are kept while your account is active so your library stays available. You can delete individual images at any time from the app. To delete your account and associated data, contact us and we will remove it.
Your rights
You can access, export, correct, or delete your data. To make a request, email hello@bigbad.agency. StockPilot is available in the United States and Canada at launch.
Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected here with a new effective date.
Contact
Questions about privacy? Email hello@bigbad.agency.