Privacy Policy
Last Updated: October 25, 2026
Studio processes the prompts and files you provide and stores saved inputs and results so you can return to them. A dedicated workspace has separate compute and storage controls. This policy explains those differences.
1. Introduction
This Privacy Policy explains how ModelPilot, operated by Northvale LLC ("we", "us"), collects, uses, and protects your information when you use our Service.
2. Information We Collect
Account Information
- Email address
- Name (optional)
- Password (hashed, never stored in plain text)
- OAuth profile data (if you sign in with Google/GitHub)
Billing Information
- Credit balance and transaction history
- Payment processed by Stripe (we never see your card details)
- Stripe Customer ID for linking your payments
Deployment and Usage Data
- Deployment IDs, names, and configurations
- Model type and instance type selected
- Start/stop timestamps
- Pod status (running, stopped, failed)
- Compute costs and metered usage
- IP address and user agent (for fraud prevention)
Studio Files and Workspace Storage
- Studio stores uploaded references, selected video clips, preparation files and saved outputs in ModelPilot-managed object storage, with records in your account.
- Prompts and workflow instructions are saved to prepare and run your requested job.
- Workers receive the inputs needed to perform that job; results return to saved storage.
- Saved Studio files are retrieved through authenticated account routes. They are not stored in a bucket you own.
- Dedicated workspaces may use provider disks and configured persistent storage. Stopping compute does not by itself delete retained storage.
Cookies and Analytics
- Essential cookies: Session cookies for authentication (required to use the Service)
- Analytics cookies: We use Google Analytics 4 to understand how visitors use our site (optional - you can opt out)
- No advertising or marketing cookies
For detailed information about cookies we use, see our Cookie Policy.
3. How Creative Content Is Processed
- Studio inputs and outputs are processed by our application, storage and compute services to deliver the feature you request.
- ModelPilot can store workflow definitions, model references, prompts, job status and saved results. Do not assume creative content is inaccessible to the services processing it.
- Tools and integrations you run inside a workspace may send data to additional services. Review their settings before use.
- Browsing history or behavior outside ModelPilot
4. How We Use Your Information
To Provide the Service:
- Create and manage your account
- Process deployments and billing
- Prepare inputs, execute requested workflows, save results and communicate about your account (service emails, billing alerts)
To Improve and Protect:
- Analyze usage patterns (anonymized) to improve features
- Detect and prevent fraud or abuse
- Provide customer support
We DO NOT:
- Sell your personal data
- Use your data for advertising
- Train AI models on your data
5. Who We Share Data With
Third-Party Service Providers
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | View Policy |
| RunPod | Compute infrastructure; job inputs and outputs processed by workers | View Policy |
| Google Cloud | Application hosting and managed object storage, including Studio inputs and saved results | View Policy |
| Hugging Face | Model downloads (indirect) | View Policy |
| Google Analytics | Website analytics (optional) | View Policy |
Legal Requirements: We may disclose information if required by law, subpoena, or to protect our rights.
We do NOT sell your data to third parties.
6. Data Retention and Deletion
- Account Data: Retained while your account is active
- Accounting Records: Credit/debit transactions and deployment history are retained after account deletion so charges and refunds can be explained. The deletion process removes your name and email from the retained account record.
- Saved Files: Review and delete files in Files & storage. Active or saved uses can protect a file from deletion. Automatic cleanup only operates when the product explicitly shows it is available and enabled; preferred periods alone are not a deletion guarantee.
- Workspace Storage: Check retained disks in Deployments separately from Studio files. Download anything you need before confirming removal.
Deleting Your Account
Start account deletion in Settings, or email support@modelpilot.ai for help with a deletion request. The product reports whether deletion completed:
- Running resources and subscriptions must be resolved before deletion can finish.
- Owned saved files must be removed first. A failure to check or remove them is not reported as successful deletion.
- Completed deletion removes sign-in access and anonymizes the account while retaining accounting and deployment history.
- Unfinished deletion can lock the account while reconciliation continues. Follow the status shown in Settings or contact support.
7. Data Security
We protect your data with:
- Encryption in transit (HTTPS)
- Encrypted password storage (bcrypt)
- Secure session management
- Regular security updates
Your Responsibility:
- Keep your password secure
- Don't share API keys or tokens
- Secure your RunPod API key (if you provide one)
No system is 100% secure. We cannot guarantee absolute security.
8. International Users and GDPR
Data Location: Processing and storage locations depend on the services and compute region used. A provider's headquarters is not a guarantee that your data stays in one country. Contact us before using the service if you require a particular processing location.
Legal Basis for Processing (GDPR):
- Contract: To provide the Service you requested
- Legitimate Interest: To improve and secure the Service
- Consent: For optional features
Your Rights (EEA/UK Users):
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Delete your account (subject to legal retention)
- Portability: Export your data
- Object: Object to certain processing
- Withdraw Consent: For optional features
To exercise these rights, email support@modelpilot.ai
9. Children's Privacy
We do not knowingly collect data from anyone under 18. If we discover we have, we'll delete it immediately.
10. California Privacy Rights (CCPA)
California residents have additional rights:
- Know: What personal information we collect and how we use it
- Delete: Request deletion of your personal information
- Opt-Out: We don't sell data, so nothing to opt out of
- Non-Discrimination: We won't discriminate for exercising your rights
To exercise rights: support@modelpilot.ai
11. Changes to This Policy
We may update this Privacy Policy. We'll notify you of material changes via email or a notice on the Service. Continued use after changes = acceptance.
12. Contact Us
Privacy Questions: support@modelpilot.ai