PilotixPrivacy Policy
This policy explains what Pilotix processes, why it is needed for remote access, what is retained, and how you can exercise your privacy rights.
Effective July 12, 2026
1. Who operates Pilotix
Pilotix is operated by Digiport OÜ (registry code 14584252), Viru väljak 2, Kesklinna linnaosa, Tallinn, Harju maakond 10111, Estonia. Questions and privacy requests can be sent to [email protected].
2. Data we process
Account and authorization data
We process your name, email address, Pilotix user and account identifiers, roles, device identifiers, authentication tokens and authorization records. Passwords are verified using salted password hashes; Pilotix does not store your password as readable text.
Device and session data
We process enrolled-device names, platform and agent version, online or busy state, readiness, selected display, session start and stop times, quality preferences, codec and transport choices, viewer and agent connection events, and commands needed to operate a session.
Diagnostics and product interaction
To operate and troubleshoot the service, Pilotix records session and connection measurements such as frame and byte counts, FPS, bitrate, latency, queue pressure, reconnects, errors, and input-delivery outcomes. These records may be associated with your account, device and session.
Device thumbnails
If thumbnails are enabled, the Agent sends periodic device-screen thumbnails for display in the device dashboard. Pilotix retains a bounded history of up to the latest 24 thumbnails per device. Thumbnails can contain visible desktop content, so use a suitable desktop state on enrolled devices.
Network and coarse location data
Network requests expose an IP address as part of normal internet operation. Pilotix may derive coarse country, city, approximate coordinates and network/ASN information to select and operate routers, monitor capacity, investigate abuse and plan network coverage. Pilotix does not request iPad precise-location permission for this purpose.
3. Remote desktop content
Remote video frames, remote audio, keyboard and pointer commands, and clipboard text are relayed to provide the active session. Pilotix does not intentionally retain them as session recordings. Device thumbnails are the specific stored-image exception described above. Operational metadata and error outcomes may be retained without storing the typed text or clipboard payload.
4. Why we use data
- Authenticate users and authorize access to enrolled devices.
- Establish, relay, recover and stop remote sessions.
- Apply device and connection-quality preferences.
- Protect accounts, devices, infrastructure and the service from misuse.
- Diagnose failures, improve reliability and plan router capacity.
- Provide support, comply with law and enforce our terms.
Pilotix does not sell personal data and does not use it for cross-company advertising tracking.
5. Service providers and transfers
We use infrastructure, routing, monitoring, email-delivery and backup providers to operate Pilotix. MaxMind is used for IP-derived GeoIP information on cache misses. Backblaze B2 is used for encrypted or access-controlled offsite database and audit backups. Providers process data under their own security and privacy obligations and may operate in different countries.
6. Retention
Account and device records are generally retained while the account or device remains active and as needed for security, support, legal obligations and dispute resolution. GeoIP cache entries are normally retained for up to 7 days, while aggregated connection and region records are normally retained for up to 30 days. Device thumbnails are bounded to the latest 24 per device. Operational, diagnostic, audit and backup records use separate rotation and deletion schedules; we do not promise a fixed deletion period where production automation does not enforce one.
7. Security
Pilotix uses HTTPS/WSS transport, scoped credentials and tokens, access controls, Keychain storage in supported Viewer builds, restricted infrastructure access, monitoring and backups. No internet service can guarantee absolute security; report a suspected security issue through the support page without sending passwords or active tokens.
8. Your choices and rights
You may request access, correction, deletion, restriction or objection where applicable. You can also revoke or uninstall enrolled devices from the Pilotix dashboard. See Privacy Choices for request instructions. We may need to verify your identity and retain limited records where required by law or security obligations.
9. Children
Pilotix is a professional remote-access service and is not directed to children. Do not create an account for a person who cannot legally agree to these terms without the required parent or guardian authorization.
10. Changes
We may update this policy as Pilotix changes. The effective date above identifies the current version. Material changes will be communicated through an appropriate product or account channel.