Privacy Policy
Last updated: 2026-07-05
This Privacy Policy explains how ShipPilot ("ShipPilot", "we", "us", or "our") collects, uses, and protects information when you use our service. ShipPilot provides autonomous AI coding agents that run in isolated cloud sandboxes, commanded from chat platforms (Slack, Telegram, Discord) and a web dashboard.
1. Information We Collect
Account information
When you sign up, we collect your email address and name provided through your OAuth sign-in provider.
Agent and run data
We collect metadata about the agents and runs you create — including run identifiers, timestamps, status, repository/context references, and conversation transcripts of the instructions you send to agents and the responses they produce.
Your API keys (BYOK)
ShipPilot is bring-your-own-key (BYOK). You provide your own Anthropic and/or OpenAI API keys. These keys are stored encrypted at rest and are used only inside your isolated sandboxes to run your agents. We do not use your keys for any other purpose.
Usage and billing data
We collect usage information (such as run counts and feature usage) to operate the service, and billing information processed through our payment provider, Stripe. We do not store full payment card numbers on our servers.
Chat platform identifiers
When you connect Slack, Telegram, or Discord, we store the identifiers needed to route messages between you and your agents (for example, workspace, channel, and user IDs).
2. How We Use Information
- To provide, maintain, and improve the ShipPilot service.
- To run your agents in isolated sandboxes on your instruction.
- To process subscriptions and billing through Stripe.
- To provide customer support and respond to your requests.
- To detect, prevent, and address abuse, security incidents, and technical issues.
3. Model Provider Data
When an agent runs, the relevant code and context are sent to your chosen model provider (Anthropic or OpenAI) using your own API key. This means your data goes to Anthropic and/or OpenAI under your own account and your agreement with that provider. Your use of those providers is governed by their respective terms and privacy policies. ShipPilot does not control how those providers process data sent under your account.
4. Subprocessors
We use the following third-party subprocessors to operate ShipPilot:
| Subprocessor | Purpose |
|---|---|
| Anthropic / OpenAI | AI model inference (using your own BYOK key) |
| e2b | Isolated cloud sandboxes for agent runs |
| Neon | Managed Postgres database |
| Vercel | Web application hosting |
| Fly.io | Background worker infrastructure |
| Resend | Transactional email delivery |
| Stripe | Subscription billing and payments |
5. Data Retention and Deletion
We retain your data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data at any time by contacting support@shippilot.co. Some information may be retained where required for legal, accounting, or fraud-prevention purposes.
6. Security
We take reasonable measures to protect your information. Your BYOK API keys are encrypted at rest. Each agent run executes in an isolated, per-run sandbox to limit exposure between runs and between customers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Cookies and Sessions
We use cookies and similar technologies to keep you signed in, maintain your session, and operate the dashboard. These are necessary for the service to function. We do not use them to sell your personal information.
8. Children's Privacy
ShipPilot is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.
9. International Users and Your Rights
Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact support@shippilot.co. Your information may be processed in countries other than your own, including the United States.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.
11. Contact
Questions about this Privacy Policy? Email us at support@shippilot.co.