Privacy Policy

Last updated October 25, 2026

SOPilot is a project built at HackTX 2026. This page explains what we collect when you use sopilot.tech, what we do with it, and who else sees it.

What we collect

  • Account details: your email address and name. If you sign up with a password, we store only a hash of it. If you sign in with Google, we receive your name, email address and Google account ID, and nothing else from your Google account.
  • What you put in: the SOPs you upload, the agent specs compiled from them, the inputs you give each run, and your approval decisions.
  • Run records: a log of every step a run takes, including tool calls, their results, timing and cost.
  • Cookies: a session cookie that keeps you signed in, and a short-lived cookie that protects the Google sign-in flow. We don't use advertising or analytics cookies.

How we use it

Only to run SOPilot for you: to sign you in, compile your SOPs, run agents, show you their results and route approvals. Your SOPs, runs and approvals are visible only to your account. We don't sell your data or use it for advertising.

Services that process your data

SOPilot relies on these providers to work:

  • Google Gemini reads your SOP text to compile it and processes run data to choose tools and write findings.
  • SerpApi receives the search queries a run makes (for example, a product or company name).
  • Capital One Nessie is a banking sandbox. Payments made in a run are simulated and move no real money.
  • SEC EDGAR receives the company lookups a run makes.
  • Tiger Data hosts our database, and Vultr hosts our server.

Each provider handles data under its own privacy policy.

Google user data

We use the basic profile information Google shares (name, email address, account ID) only to create your account and sign you in. We don't share it with anyone else or use it for any other purpose. SOPilot's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Keeping and deleting data

We keep your account and its data until you ask us to delete it. Deleting an account removes its SOPs, specs, runs and approvals. Since this is a hackathon project, please don't upload confidential, personal or regulated information.

Changes

If this policy changes, we'll update it here and change the date at the top.