Your draft is yours.

What PolicyPilot processes

PolicyPilot processes the information you submit to generate a policy draft: organisation name, policy owner, selected template, language, review date and the practical notes you provide. Draft generation happens through our application so that it can return a structured document. We do not require an account.

Product analytics

We record a small set of product events—such as starting or completing a draft, opening checkout and completing an export—to understand where the product works or fails. These event records contain a timestamp, event name, page path and limited non-content detail such as the selected plan or document language. They do not contain your policy text, organisation name, email address, cookies or a persistent user identifier.

Saved links

If you use “Save link”, we store the generated policy document in a private server-side file for 30 days so the unique link can retrieve it. Anyone with that link can access the document, so do not use it for sensitive personal, medical, client or secret information. Saved drafts expire automatically after 30 days.

Payments

Payments are handled by PayPal. PolicyPilot receives payment status, order reference, product and amount necessary to unlock your purchase. We do not receive or store card or PayPal login details.

Security and retention

We use reasonable technical measures, including HTTPS and restricted server storage, to protect service data. No method of transmission or storage is completely secure. Payment records are retained only as necessary for financial administration and legal obligations; saved drafts follow the 30-day retention described above.

Your questions

For privacy questions or deletion requests, contact hello@opensled.com and include enough detail for us to locate the relevant saved link or payment reference.