PilotBull|
TermsPrivacyRefundsDisclaimerAbout
Privacy Policy
Effective: 1 April 2026 · Version 2.0
1. Data Controller
PilotBull is operated by Nkul Nexus (FZE), United Arab Emirates.
•Privacy enquiries — admin@nkulnexus.com or the Contact form (subject: Privacy enquiry)
•Legal / DMCA notices — admin@nkulnexus.com
•Data deletion requests — admin@nkulnexus.com — subject: Data deletion request
•Response time — We respond to all data requests within 30 days as required by GDPR and UAE PDPL.
2. Data We Collect
•Geo-location — Approximate country detected via IP on first visit. Used for localised pricing, measurement system, and classifieds feed. We store only the country code — not your IP address.
•Session identifier — Anonymous session ID generated per browser tab. Used for geo analytics, referral tracking, and email-detect logging. Not linked to your identity.
•Form inputs — Inputs entered into service forms are used to generate your output. Anonymised after 90 days. Never used for advertising.
•Amazon email text — Analysed locally in your browser via pattern matching. Full text is not transmitted unless unidentified (see Section 5). Discarded after detection.
•Transaction data — Stripe processes payment data. PilotBull receives only payment status, amount, and anonymised transaction reference. We never store card details.
•Referral data — Name, phone, and optional email stored to identify your referral link. Used only for reward issuance and referral tracking.
•Contact form — Name, email, phone (optional), and message retained for up to 24 months for support purposes.
•Classified listings — Listing data stored for the listing's lifetime plus 30 days after expiry.
3. How We Use Your Data
•Displaying prices, measurements, and classifieds relevant to your region.
•Generating your requested output.
•Processing payments via Stripe.
•Issuing referral rewards and discount codes.
•Responding to support enquiries.
•Improving service quality using anonymised, aggregated signals only.
•Notifying our team of unidentified Amazon issue types for future card creation.
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except Stripe and our hosting infrastructure provider.
4. Geo-Location Data
PilotBull uses IP-based geo-detection to determine your approximate country. This:
•Runs once per browser session.
•Stores only the country code (e.g. AE, GB, NG) — not your IP address.
•Can be overridden using the region selector in the footer.
•Is used solely for currency, measurement system, and classifieds feed.
Geo session records are deleted after 12 months.
5. Amazon Email Analysis
When you use the Email Auto-Detection feature:
•Email text is analysed locally in your browser using pattern matching.
•If a match is found, only the detected issue type and confidence score are returned — the full text is not transmitted.
•If no match is found, a truncated version (max 3,000 characters) and session ID are sent to our backend so our team can study and create a new issue card. You see: 'Issue Unidentified — studying. Check back in 24 hours.'
•Unidentified issue logs are reviewed and deleted within 90 days.
6. Cookies & Local Storage
•Session storage — Session ID, detected geo-location, and form state. Cleared when you close your tab.
•Local storage — Cookie consent preference only. Retained across sessions.
•No advertising cookies — No third-party tracking cookies, advertising pixels, or cross-site analytics.
7. Data Retention
•Form inputs & outputs: anonymised after 90 days.
•Geo session records: deleted after 12 months.
•Referral data: retained while referral code is active (up to 3 years).
•Classified listings: deleted 30 days after expiry or deletion.
•Amazon email signals (unidentified): deleted after 90 days.
•Transaction records: retained for 7 years for financial compliance.
•Contact form messages: deleted after 24 months.
8. Your Rights (GDPR / CCPA / PDPL)
Depending on your jurisdiction, you have the following rights over your personal data:
•Right of Access (GDPR Art. 15 / CCPA) — You may request a copy of all personal data we hold about you. We will respond within 30 days.
•Right to Rectification (GDPR Art. 16) — You may request correction of inaccurate or incomplete data we hold.
•Right to Erasure / Right to be Forgotten (GDPR Art. 17) — You may request deletion of your personal data. We will erase it within 30 days unless retention is required by law (e.g. financial records).
•Right to Data Portability (GDPR Art. 20) — You may request your data in a machine-readable format (JSON or CSV).
•Right to Restrict Processing (GDPR Art. 18) — You may request that we limit how we use your data while a dispute is being resolved.
•Right to Object (GDPR Art. 21) — You may object to processing of your data for legitimate interests or direct marketing.
•Right to Opt-Out of Sale (CCPA — California) — PilotBull does not sell personal data to third parties. California residents have no sale to opt out of.
•Right to Non-Discrimination (CCPA) — Exercising your privacy rights will never result in denial of service or different pricing.
•Automated Decision-Making — No decisions with significant legal effect are made about you automatically without human review.
To exercise any right: use the Contact form with subject "Data request" or email admin@nkulnexus.com. We respond within 30 days. Applicable frameworks: UAE PDPL, EU GDPR, UK GDPR, Nigeria NDPR, Kenya DPA 2019, California CCPA/CPRA.
9. California Residents — CCPA / CPRA
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:
•Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
•Right to Delete — You may request deletion of personal information we have collected, subject to certain exceptions.
•Right to Correct — You may request correction of inaccurate personal information.
•Right to Opt-Out of Sale or Sharing — PilotBull does NOT sell or share personal data with third parties for advertising or commercial purposes.
•Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.
•Sensitive Personal Information — We do not collect or process sensitive personal information as defined by CPRA.
•Shine the Light — California Civil Code § 1798.83: PilotBull does not disclose personal information to third parties for direct marketing purposes.
To exercise California rights: email admin@nkulnexus.com with subject "CCPA Request". We respond within 45 days. Authorised agents may submit requests with written permission.
10. Security
All data transmitted using TLS 1.3. Data at rest encrypted using AES-256. Stripe handles all payment card data under PCI DSS Level 1 — PilotBull never stores card details.