Privacy Policy

Your privacy and data protection are our top priority

Your Privacy Matters: Domain Pilot is committed to protecting your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your data.

Last Updated: 27 December 2025

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, encrypted password, account creation date, and subscription plan information. We use this to authenticate you and manage your account.

1.2 Domain Monitoring Data

We collect the domain names you choose to monitor, domain check history and status changes, group names and organisation preferences, and webhook URLs and notification settings. This data is necessary to provide monitoring services.

1.3 Usage Information

We automatically collect technical information including your IP address, browser type and version, device information, access times and dates, and pages viewed. This helps us improve the service and detect abuse.

1.4 Payment Information

For paid subscriptions, we collect payment transaction details and billing history via Stripe. We do not store credit card details—all payment processing is handled securely by Stripe.

2. How We Use Your Information

2.1 Service Delivery

  • To provide domain monitoring and checking services
  • To send alert notifications via email or webhook
  • To process your API requests and integrations
  • To store and retrieve your domain data

2.2 Account Management

  • To manage your account and process billing
  • To authenticate your access
  • To respond to your support requests
  • To send important account notifications

2.3 Service Improvement

  • To analyse usage patterns and service performance
  • To develop new features and improvements
  • To debug and resolve technical issues
  • To aggregate statistics (anonymised)

2.4 Legal Compliance

  • To comply with legal obligations
  • To enforce our Terms of Service
  • To detect and prevent fraud or abuse
  • To protect our legal rights and interests

3. Data Security

We employ industry-standard security measures to protect your information:

  • Encryption: All data transmitted via HTTPS/TLS encryption
  • Storage: Passwords encrypted with bcrypt hashing algorithm
  • Access Control: Limited employee access with authentication
  • Audits: Regular security audits and penetration testing
  • Backups: Encrypted backups for disaster recovery

Despite our security measures, no system is completely secure. We cannot guarantee absolute security of your data.

4. Data Sharing

We do not sell, trade, or share your personal information with third parties except:

  • Service Providers: Payment processors (Stripe), email providers, and infrastructure providers
  • Legal Requirements: When required by law or court orders
  • Business Transfers: In case of merger, acquisition, or asset sale
  • API Integration: If you authorise webhook delivery to third parties

We ensure all service providers sign data processing agreements and maintain appropriate security standards.

5. Your Privacy Rights

Under GDPR and similar privacy laws, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Request your data in a portable format
  • Withdrawal: Withdraw consent for data processing
  • Objection: Object to certain processing activities

To exercise any of these rights, contact us at support@finc.uk with your request.

6. Cookies and Tracking

We use cookies for:

  • Authentication: Session management and login
  • Analytics: Google Analytics for usage statistics
  • Functionality: Storing user preferences

You can disable cookies in your browser settings, but this may affect service functionality. We do not use tracking cookies for advertising.

7. Data Retention

We retain your data as follows:

  • Active Accounts: Data retained while your account is active
  • Deleted Accounts: Data deleted within 30 days of account deletion
  • Backups: Backups retained for up to 90 days for recovery purposes
  • Legal Hold: Data retained longer if required by law

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of third parties. Please review their privacy policies before providing personal information.

9. Children's Privacy

Domain Pilot is not intended for users under 13 years old. We do not knowingly collect information from children. If we become aware of information from a child, we will delete it promptly.

10. Policy Changes

We may update this Privacy Policy at any time. We will notify you of material changes via email or by posting a notice on our website. Your continued use of the service constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights:

Email: support@finc.uk
Website: www.domainpilot.co.uk

We will respond to privacy requests within 30 days as required by law.

Your Rights: Under GDPR and similar privacy laws, you have the right to access, correct, delete, and port your personal data. Contact us to exercise these rights at any time.