◆ TRUST CENTER

Trust at Optimize Pilot.

Optimize Pilot processes site analytics and competitor data on behalf of growth teams. We take that responsibility seriously. Below is exactly what we do, where data lives, and what protections are in place — including what we're still building.

01Current status

Where we are right now.

Optimize Pilot is a young company. We are not going to claim certifications we do not hold. Below is what is actually operational today. If a control is not listed here, assume we do not have it yet.

◉ CURRENTLY OPERATIONAL

▸Magic-link and OAuth 2.1 authentication
▸Role-based access controls
▸TLS encryption for all data in transit
▸AWS-hosted infrastructure (us-east-1)
▸MFA enforced on all admin systems
▸Internal network restriction for server access
▸Full audit log of platform activity
▸Full data export available at any time
▸GDPR-aligned data handling
▸Founder/CEO only access to production customer data

If a control isn't on this page, assume we don't have it yet. Ask us anyway — we'd rather have the conversation than have you find out post-purchase.

02Data handling

What we collect. What we don't. Where it lives.

◆ WHAT WE COLLECT

▸Site analytics events (page views, click events, funnel conversions)
▸Page-level metadata (URL structure, element selectors for A/B variants)
▸Competitor public web data (crawled from publicly accessible pages)

◆ WHAT WE DO NOT COLLECT

▸Personally identifiable information (PII)
▸Payment card data
▸Authenticated user content or session recordings
▸Health or sensitive personal data

◆ WHERE DATA IS STORED

▸US-based AWS datacenters (us-east-1 primary)
▸Encryption in transit: TLS
▸Your analytics data stays in your Matomo instance
▸Full data export available at any time

◆ ACCESS CONTROLS

▸Customer data protected internally — Founder/CEO only has full production access
▸Role-based access controls for your team
▸MFA enforced on all systems with servers accessible only through internal network
▸Full audit log of platform activity

03Sub-processors

The full list.

Every third party that touches customer data, why they touch it, and where they operate. Changes are posted 30 days before taking effect.

PROVIDER

PURPOSE

REGION

Amazon Web Services

Cloud infrastructure, storage, compute

US (us-east-1)

Cloudflare

CDN, DDoS protection, WAF

Global edge

Anthropic

AI inference (Claude models)

Stripe

Payment processing

US / EU

Matomo Cloud

Analytics backbone (customer-elected)

Postmark

Transactional email delivery

Vercel

Marketing site hosting

Global edge

04Incident response

What happens when something goes wrong.

If we confirm a security incident affecting your data, we will notify you directly and keep you updated as we investigate and resolve it. We post operational status and maintenance notices to our status page below.

Status page: optimizepilot1.statuspage.io

05FAQ

Questions we answer weekly.

Where is our data stored?

All data is hosted and stored in US-based AWS datacenters (us-east-1 primary).

Who has access to our data?

Outside of your team, only Optimize Pilot's Founder/CEO has access to customer data. Engineering works from and tests against sample data sets.

What happens to our data if Optimize Pilot shuts down?

In the event that Optimize Pilot ceases operations, you will be able to download your data during our wind-down period. Upon ceasing operations, all customer data will be permanently deleted.

Can we export our data?

Yes. Full data export is available at any time from the Flight Deck under Settings → Data.

Do you sell or share customer data?

No. We never sell customer data. We aggregate anonymized patterns to improve recommendations across the platform, but we do not share account-specific data with third parties.

Can you complete our security questionnaire (SIG, CAIQ, etc.)?

Yes. Email security@optimizepilot.com with your questionnaire and we'll typically return it within 5 business days.

Do you publish a status page?

Yes — optimizepilot1.statuspage.io. Subscribe to incident and maintenance notifications via email or RSS.

SECURITY QUESTIONS

security@optimizepilot.com

VULNERABILITY DISCLOSURE

vulnerabilities@optimizepilot.com

◉ SECURITY QUESTIONS

Have a security questionnaire? We'll return it in 5 days.

Email security@optimizepilot.com. We'd rather answer your questions before purchase than have you find out post-purchase.

Book a 15-min stack audit →

◆ Loading…