Privacy

Updated: November 3, 2026

Operator: STF

Preferences, drafts and local routes are stored in this browser. Export a JSON backup or type “clear local data” to remove local records. There is no advertising tracking. Clearing browser data also removes local records.

When you start Pro checkout, your account email is shared with Dodo Payments. Dodo processes card and payment details; NexaPilot does not store full card data. Subscription identifiers, status, period dates and AI usage counts are stored to provide the service. End an ongoing subscription before deleting the account. Payment-provider transaction records follow its retention rules.

When Anthropic (Claude) interpretation is enabled, your request and the necessary current plan context (place, time, preferences, stop names and up to four recent planning requests) are sent to Anthropic (Claude) to interpret your request. Account IDs, session tokens and API keys are not automatically added to model context. The model does not verify venues or prices.

When accounts are enabled, email and sessions use Supabase Auth; cloud routes, memberships, comments and votes use Supabase. You can export your account data and delete your account. Content contributed to someone else's route may remain there. Clear local records separately.

The map provider receives your IP address and viewed area. When live search is enabled, queries and areas go to Photon, Overpass and FOSSGIS. Optional photos use Wikimedia Commons; weather, if enabled, uses MET Norway. Your email is not sent to map providers.

Location is optional and requires browser permission. Following runs only while this page is open and can be stopped. Saved start and end coordinates may be included in a route. Check private addresses before sharing.

Share-link holders can see stops and notes. Links expire and can be revoked. Editing invitations create memberships; removing an existing member is a separate action.

Technical reporting is off by default and requires user opt-in. When enabled, error text and account ID may be stored. Maintenance is prepared to remove error records after 30 days and quota counters after 8 days; the operator must ensure it runs.

Contact: [email protected]