Privacy Policy

Who is responsible

The Autopilot Gap, based in Dublin, Ireland, is responsible for the information described here. Privacy questions and requests can be sent to hello@autopilotgap.com.

Information we collect

When you send an enquiry, we receive your full name, work email, selected area of interest, message, and the page used to submit it. If online saving is enabled and you choose to save a Quick Check, we receive your full name, email, the nine answers, the check version, the Quick Check source label, and your explicit sharing acknowledgement.

You can complete the Quick Check and view its summary without providing a name or email. Its draft answers are kept only in session storage in that browser tab where storage is available. They are not sent to us unless you choose the separate save action.

When a leader creates an Autopilot Mirror, we receive their full name, email, the Mirror source label and sharing acknowledgement. We store the name used in the questions, three predictions, the Mirror status and creation time in the Mirror service. Participants are not asked for a name or email. We store their nine selected answers against that Mirror and the submission time so a combined result can be produced.

How and why we use it

We use enquiry details to respond to the request you made. We use saved Quick Check details and answers to retain the result you explicitly chose to share and to support a relevant follow-up. These forms do not subscribe you to marketing email, and the website does not claim marketing consent from either action.

When you create an Autopilot Mirror, we may send one transactional email to the address you provide with your private Mirror link. Mirror information is otherwise used only to operate the invitation, count responses, enforce the minimum group size and show the leader one combined result. The leader interface does not display an individual participant response.

HubSpot and hosting

Submitted enquiry, Quick Check save and Mirror lead forms are sent securely to HubSpot, our customer relationship management provider. When available, the server includes the request IP address and the optional HubSpot browser identifier with the submission to support attribution and form analytics. The website is hosted using Vercel. Autopilot Mirror records are stored in a dedicated MariaDB database hosted by Hostinger. These providers may process technical request information needed to operate and secure their services. Mirror predictions and participant answers are not sent to HubSpot.

Private and invitation links

The Mirror uses two long, unguessable links instead of user accounts. The team invitation link accepts participant answers. The separate private link can view the combined result, close collection or delete the Mirror. Anyone who receives the private link can use those controls, so the leader must keep it private. We store only a one-way hash of the private access token; the invitation token is encrypted at rest so the leader can retrieve the team link from the private workspace.

Website activity and cookies

The website does not use advertising or behavioural-profiling trackers. If you choose to allow analytics cookies, the HubSpot tracking script records visits and uses a browser identifier to connect a form submission with activity from the same browser. You can decline or later withdraw this optional consent without losing access to the forms. Essential storage may be used to operate the website. The Quick Check uses session storage for an unfinished draft. The Mirror uses session storage for an unfinished participant draft and local storage for a random response key and a submitted marker, which help avoid accidental repeat submissions from the same browser. See the cookie information for details.

Retention and sharing

Information is not sold. It is shared only with service providers needed to run the website and manage the submission, or where disclosure is required by law. An unfinished Mirror and its responses are deleted after 90 days. A closed Mirror and its combined and underlying responses are deleted after one year. A leader can delete a Mirror and all its responses earlier using the private link.

Your choices and rights

Depending on applicable law, you may ask for access, correction, deletion, restriction, or a copy of your personal information, and may object to or withdraw consent-based processing. Contact us using the email above. You may also complain to your local data protection authority; in Ireland, this is the Data Protection Commission.

Limits of anonymity

The Mirror does not request a participant’s name or email and does not show individual answers to the leader. Hosting and security providers may still process ordinary technical request data such as an IP address or user agent to deliver and protect the service. The minimum group size reduces, but cannot remove, every risk that a leader infers who responded or what a person selected.