Legal
Last updated: June 2026
We collect information you provide directly when you register, request a demo, or contact us. This includes your name, business email address, company name, and role. When you use the ObsolPilot platform, we collect usage data such as login timestamps, page interactions, and feature usage metrics. We do not collect personal data beyond what is necessary to provide the service.
We use collected data to provide and improve the ObsolPilot platform, authenticate users, process support requests, and communicate product updates or service notices. We do not sell, rent, or share your personal data with third parties for marketing purposes.
All data is stored on secure cloud infrastructure with encryption at rest and in transit. Access to customer data is restricted to authorised ObsolPilot personnel on a need-to-know basis. We implement industry-standard security practices including access logging and multi-layer authentication for internal systems.
Each customer organisation operates within an isolated tenant workspace. Your BOM data, component risk records, supplier information, inbox items, and decisions are never accessible to other tenants. Tenant isolation is enforced at the data layer, not just at the application layer.
We retain customer account data for the duration of the active subscription plus 90 days after termination, unless you request earlier deletion. Audit logs are retained for a minimum of 12 months to support regulatory and governance requirements. You may request data export or deletion by using our contact form at /contact.
ObsolPilot uses strictly necessary session cookies to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You may disable cookies in your browser, but this will prevent you from accessing the authenticated platform.
ObsolPilot uses selected third-party infrastructure providers for hosting, authentication, and transactional email. These providers are contractually bound to process data only on our behalf and in accordance with applicable data protection laws.
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. To exercise these rights, use our contact form at /contact. We will respond within 30 days.
We may update this Privacy Policy periodically. Material changes will be communicated via email or a notice within the platform. Continued use of the platform after a change constitutes acceptance of the updated policy.
For privacy-related questions, please use our contact form at /contact. We will respond to the email address you provide.