Privacy Policy
Last updated: October 30, 2026
SUL AI ("SUL", "we", "us") is operated by Pilotnavia LLC, with its principal office at 8000 NW 25th Street, Suite 300, Doral, FL 33122, United States. Pilotnavia LLC is responsible for the information described in this policy. SUL provides an AI marketing workspace that helps businesses create ads, social posts, videos, emails and campaigns. This policy explains what information we collect when you use SUL, how we use it, and the choices you have.
1. Information we collect
- Account information: when you sign in with Google we receive your name, email address and profile picture. We store a hashed version of your verified email to grant the free trial only once.
- Content you provide: brand details, product information, website links, images and files you upload, prompts, scripts and any content you create or edit in SUL.
- Generated content: images, videos, audio, text and other results created for you.
- Connected accounts: if you connect third-party services (Google services such as YouTube, Google Ads and Search Console; Meta services such as Facebook, Instagram, Threads and Meta Ads; TikTok; Pinterest; LinkedIn; X; Reddit; email and store platforms such as Klaviyo, Mailchimp and Shopify; or your website), we receive access tokens and the data those services share with your permission, such as your account name and ID, pages, channels, boards, ad accounts, publishing status and performance metrics. Section 3 explains what we use from each one.
- Billing information: payments are processed by Stripe. We receive your subscription status and purchase history; we never see or store your card number.
- Usage and technical data: credits used, request logs, IP address, browser type and security events, used to run the service, prevent abuse and fix problems.
2. How we use your information
- To provide the service: create, store, sync, schedule and publish your content.
- To process payments, grant and charge credits, and issue refunds.
- To keep SUL secure, prevent fraud and abuse, and enforce our Terms of Service.
- To communicate with you about your account, billing and important changes.
- To improve SUL's reliability and features using aggregated usage information.
We do not sell your personal information, and we do not use your content to train our own AI models.
3. Connected platforms
Connecting an account never publishes anything by itself: you approve every post, campaign and email. For every platform, we only access what you authorize, only to perform the actions you request in SUL, we do not use that data for advertising, we do not share it with other users and we do not sell it. Access tokens are encrypted, and when you disconnect a platform we delete its stored token.
- YouTube (Google): we use the YouTube API Services to upload the videos you choose to your channel and to show your channel name and the performance of videos published through SUL. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
- Google Ads: we create the campaigns you review and approve (they start paused) and read their performance so you can see results in SUL.
- Google Search Console: we read the search queries, clicks, impressions and positions of the verified sites you choose, only to suggest articles to write.
- Meta (Facebook, Instagram, Threads and Meta Ads): we read the pages, Instagram and Threads accounts and ad accounts you select, publish the posts you approve, launch the ad campaigns you approve (they start paused) and read their insights so you can see results.
- TikTok: we read your basic profile (nickname, avatar and the posting options TikTok allows for your account) and publish the videos and photos you approve with the privacy and interaction settings you choose on the publish screen. We then check the publishing status to show you the result.
- Pinterest: we read your own boards and pins only to show them inside SUL so you can choose them as creative references. When you select a pin, SUL stores a copy of that image in your workspace. If you choose to publish, SUL creates Pins on the board you select.
- Other platforms (LinkedIn, X, Reddit, Klaviyo, Mailchimp, Shopify, WordPress and webhooks) follow the same rules: only the account data needed to show the account and perform the actions you request.
Google user data. SUL AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data from Google APIs to develop, improve or train AI models, and no person reads it except with your permission, for security reasons or when required by law. You can revoke SUL's access to your Google account at any time from your Google Account permissions.
4. AI and service providers
To deliver the service we share the minimum necessary data with providers that process it on our behalf:
- AI model providers (such as OpenAI, fal.ai and xAI) receive your prompts, reference images and scripts to generate text, images, voice and video.
- Hosting and storage: Vercel (application hosting), Neon (database, United States) and Cloudflare R2 (media storage).
- Authentication: Google sign-in through Neon Auth.
- Payments: Stripe.
- Email delivery: Amazon Web Services (Amazon SES) sends account emails and the email campaigns you approve.
These providers may only use the data to provide their services to us and are subject to their own privacy and security commitments. We may also disclose information if required by law or to protect the rights, safety and property of SUL, our users or others.
5. Data retention
We keep your account and content while your account is active. Sessions, rate-limit records and webhook logs are deleted automatically after short periods (from 1 to 30 days), and security audit logs after 180 days. Temporary files used to produce videos are removed within about 48 hours. Billing records may be kept longer when required by law. When you ask us to delete your account, we delete or anonymize your data within 30 days, except where we must keep it for legal, tax or fraud-prevention reasons.
6. Security
Data is encrypted in transit (HTTPS). Access tokens for connected platforms are encrypted at rest. Access to production systems is restricted. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you as required by law if a breach affects you.
7. Your rights and choices
You can access, update or delete your content inside SUL, disconnect connected accounts at any time, and cancel your subscription from Settings. You can also ask us for a copy of your data, to correct it, or to delete your account by emailing us. Depending on where you live (for example California under the CCPA/CPRA, or the European Economic Area under the GDPR), you may have additional rights; we will honor them as required by law and will not discriminate against you for exercising them.
8. How to delete your data
- Disconnect a platform: in SUL, go to Connections and choose Disconnect. We delete that platform's stored access token right away.
- Remove SUL from the platform: if you remove SUL AI from your Facebook, Instagram or Threads settings (Apps and Websites), Meta notifies us and we delete your connection and its tokens automatically. If you send a data deletion request from those settings, we also delete the data we obtained from that account and give you a confirmation code and a page where you can check the status. For Google, revoke access from your Google Account permissions; for TikTok, from the apps and permissions section of your TikTok settings.
- Delete your account or any data: request it from Settings in SUL or email [email protected] from the email address of your account. We delete or anonymize your data within 30 days, except what we must keep for legal, tax or fraud-prevention reasons.
9. Children
SUL is a business tool and is not directed to children under 13 (or under 16 where local law requires). We do not knowingly collect information from children.
10. International users
SUL is operated from the United States, and your information is processed and stored in the United States.
11. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect. The "Last updated" date shows when it last changed.
12. Contact
Questions or requests about privacy: [email protected]
Pilotnavia LLC, 8000 NW 25th Street, Suite 300, Doral, FL 33122, United States