Privacy Policy

Last updated: July 6, 2026

This policy describes how Portfolio Leverage Co. ("PortLev", "we") handles personal data in connection with AI HR Pilot (aihrpilot.com). For customer organizations, we act primarily as a processor of the data your organization submits; your employer's own policies govern how it uses the Service.

What we collect

• Account data: name, work email and role, via our authentication provider (Clerk).
• Customer content: documents your organization uploads (e.g. employee handbooks) and the questions and answers exchanged with the assistant.
• Usage and log data: feature usage, timestamps and technical logs needed to operate and secure the Service.
• Billing data: processed by Stripe. We never store full card numbers.

How we use it

• To provide the Service: answering questions from your uploaded documents, routing escalations, maintaining audit logs your organization can review.
• To operate, secure and improve the platform.
• To communicate with you about the Service (transactional and, with consent, product emails; unsubscribe any time).
• Never to train AI models. Your content is sent to AI providers solely to generate your organization's answers.

Subprocessors

We use the following infrastructure providers to run the Service:

• Vercel (hosting, file storage, AI gateway) — United States
• Neon (Postgres database) — United States
• Clerk (authentication) — United States
• Anthropic and OpenAI via Vercel AI Gateway (AI answer generation and document embeddings)
• Stripe (payments)
• Resend (transactional email)

Security

Data is encrypted in transit (TLS) and at rest through our infrastructure providers. Access is scoped per organization: every database query is filtered by your organization's identifier, derived from your authenticated session. See our Security page for a plain-language description of our current posture, including what certifications we do and do not hold yet.

Retention and deletion

Customer content is retained while the subscription is active. On written request after termination, we delete customer content within 30 days, except where law requires retention. Individual employees should direct access or deletion requests to their employer, who controls the workspace; we support employers in fulfilling them.

Your rights

Depending on your location, you may have rights to access, correct, delete or export personal data (including under GDPR and CCPA/CPRA). Contact us at the address below and we will respond within the legally required period. We do not sell personal data.

Contact

Privacy questions and requests: support@aihrpilot.com