Back to home

Privacy Policy

Last updated: July 24, 2026

Agent Autopilot ("Agent Autopilot," "we," "us," "our") is operated by J&N Peak LLC, with a business address at 759 Hunter Trace Lane, Lavon, TX 75166. This policy explains what personal information we collect, how we use and share it, and the choices and rights you have.

1. What we collect

  • Account information: name, agency name, email, hashed password, and any profile fields you fill in.
  • Billing information: handled by Stripe. We store the subscription status, plan, and last-four card metadata Stripe returns. We do not receive or store full card numbers.
  • Product usage: pages viewed, lessons completed, prompts copied, drafts saved, and messages sent to Ace, used to improve the product and enforce plan limits.
  • Ace conversations and drafts: the content you send to Ace and the responses it generates, stored so you can revisit them.
  • Optional AI keys: if you bring your own Claude API key, it is encrypted at rest with AES-256 and used only to route your own messages.
  • Support communications: anything you send us through the contact form or by email.
  • Device and log data: IP address, browser, and timestamps captured by our hosting provider for security and diagnostics.

2. How we use it

  • Deliver, secure, and improve the service.
  • Route messages to third-party AI providers so Ace can respond.
  • Send transactional emails (welcome, receipts, cancellation, security notices).
  • Send product and marketing emails when you have opted in, with unsubscribe in every message.
  • Respond to support requests.
  • Enforce plan limits and detect abuse.
  • Comply with legal obligations.

3. AI processing

Messages you send to Ace are transmitted to third-party AI providers so they can be processed and a response returned. By default, we route requests through OpenRouter to Anthropic (Claude). If you supply your own Claude API key, your messages are sent directly to Anthropic under your own account. These providers may retain messages for a limited period for abuse prevention under their own terms.

Do not paste client PII, Social Security numbers, full account numbers, medical details, or other confidential information into Ace. You remain responsible for your own client-confidentiality, HIPAA, GLBA, state privacy, and carrier obligations. Ace is a drafting assistant, not a compliant system of record.

4. Sub-processors

We use the following sub-processors to operate the service. Each operates under its own privacy terms.

  • Supabase: database, authentication, and file storage.
  • Stripe: subscription billing and payment processing.
  • Lovable: hosting and application infrastructure.
  • Anthropic: Claude AI model that powers Ace responses.
  • OpenRouter: AI request routing to the model provider.
  • Resend: transactional and marketing email delivery (once connected).
  • Google Cloud Speech: when you use voice dictation in Chrome, the browser transmits audio to Google's speech-recognition servers for transcription. See section 5.

The current list may be updated as the service evolves. A full, versioned list is available on request: contact us.

5. Voice dictation

Ace includes an optional voice-dictation button that uses the Web Speech API built into your browser. In Google Chrome and most Chromium browsers, audio is transmitted to Google's speech-recognition servers for transcription and is not processed on your device. In Safari and some other browsers, audio may be processed on-device. Behavior can change with browser updates.

If you do not want your voice to leave your device, do not use the dictation button. You can always type instead. We do not record or retain the audio; only the transcribed text you choose to send appears in your Ace conversation.

6. Cookies and similar technologies

We use cookies and local storage strictly to keep you signed in, remember your session, and remember interface preferences (for example, your dictation language). These are strictly necessary and do not require consent.

We do not currently run analytics cookies, advertising pixels, or third-party tracking. If we add any of these in the future, we will publish a cookie consent banner for visitors in the EU, UK, and California, and update this policy before activation.

7. Analytics and tracking

The app includes an internal track() module that captures product events such as page views on the Starter Kit, newsletter signups, and checkout steps. Today it runs as a no-op and no data is sent to any third party. When we activate a provider (for example, a privacy-respecting analytics tool or a conversion pixel), we will name it in this policy and, where required, gate it behind a consent banner.

8. How we share your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with the sub-processors listed above to operate the service, with law-enforcement or regulators when legally required, and in connection with a business transfer (merger, acquisition, or asset sale), where the successor is bound by this policy.

9. Data retention and deletion

  • Account records: retained for the life of your account.
  • Ace conversations and drafts: retained while your account is active so you can revisit them; you can delete individual conversations and drafts at any time from HQ.
  • Billing records: retained for at least seven years to meet tax and accounting obligations.
  • Marketing leads (Starter Kit and newsletter): retained until you unsubscribe, then removed from active sending lists.
  • After cancellation: account and conversation data is retained for up to 90 days to support reactivation and support requests, then deleted or anonymized, except for records we are legally required to retain (for example, invoices).
  • On request: you may request deletion of your account at any time; see section 10.

10. Your rights

California residents (CCPA / CPRA). You have the right to know what personal information we collect and how we use it, to request a copy, to request correction or deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information and we do not share it for cross-context behavioral advertising. You will not be discriminated against for exercising these rights.

EEA, UK, and Switzerland residents (GDPR / UK GDPR). You have the right to access, rectify, erase, restrict, port, and object to processing of your personal information, and the right to lodge a complaint with a supervisory authority. Where required, our data-protection contact is Jay Peak, jayjppeak@gmail.com.

To exercise any of these rights, contact us. We will respond within the timeframes required by applicable law.

11. Children

Agent Autopilot is a professional tool for licensed insurance agents. It is not directed at children, and we do not knowingly collect personal information from anyone under 18 in the United States or under 16 in the European Economic Area. If you believe a minor has provided us information, contact us and we will delete it.

12. Security

We use industry-standard controls: TLS in transit, encryption at rest for sensitive fields, role-based database access with row-level security, and infrastructure hosted on ISO 27001-certified providers. No system is perfectly secure. If you suspect an incident, contact us immediately.

13. International transfers

Our infrastructure and sub-processors may process your data in the United States and other countries. Where required, transfers of personal information out of the EEA, UK, or Switzerland are made under Standard Contractual Clauses or an equivalent lawful mechanism.

14. Changes to this policy

We will update the "Last updated" date at the top of this page whenever we make material changes. For significant changes, we will also notify active members by email or by an in-product notice before the change takes effect. Continued use of the service after the effective date means you accept the updated policy.

15. Contact

Questions or privacy requests? Contact us.

This policy is provided for informational purposes and is not legal advice. Please review with your own counsel for your specific situation.