Local-first shop workflow
Day-to-day shop work is designed to happen locally on the shop computer. Internet features support tablet install, updates, forms, cloud backup, and hosted pages.
Draft preview ยท Not yet effective
Shop data safety matters more than flashy features.
ShopPilot Pro is local-first. This privacy draft was last reviewed October 22, 2026 while production data flows and retention rules receive final review. Keep sensitive customer, payment, license, and account details out of public forms.
Plain-language privacy summary
How the current system handles shop and account data.
This summary is not yet the effective privacy policy. Final provider, retention, deletion, security, and incident-response details must be approved before public launch.
Website forms
Demo and support forms collect what the visitor enters: name, shop, contact, shop type, feedback type, and notes. Do not submit card numbers, passwords, or private customer records.
PayPal membership billing
PayPal processes recurring membership payments. ShopPilot stores the subscriber name and email, PayPal payer and subscription identifiers, membership status, renewal timing, and license status. ShopPilot does not receive or store the full card or bank-account number.
Firebase / Google
Remote Owner authentication and approved shop snapshots use the configured ShopPilot Firebase project. Access is limited by owner identity, shop ID, and security rules.
Hostinger
Hostinger provides the ShopPilot website, licensing service, guarded shadow synchronization, and related production database hosting. Private signing keys and database credentials are not delivered with the customer program.
Browser backup
The site stores demo/support entries in the visitor's browser as a backup until they are exported or cleared.
Backups
Confirm the backup folder, back up before updating, and know where restore/import tools live.
Tablet and Hub sync
The hosted tablet page can open from the website, but live board sync depends on the local shop Hub. Tablet entries should merge with Hub entries, not wipe them.
Beta caution
Use fake data first. Test real customer, payment, or accounting workflows only after backups and restore steps are understood.
Cancellation and shop records
Canceling a membership stops future program access after the paid period or stated grace period. It does not erase the shop's local records or backups.
Questions and requests
Send privacy questions to support@tryshoppilotpro.com. Never email passwords, full card numbers, card security codes, license keys, activation tokens, or another customer's private records.