Privacy Policy
Last updated 27 October 2026
Who we are
DecoPilot provides automation software and services for garment decoration businesses that use DecoNetwork. DecoPilot is operated by Kevin Jarvis, based in Hinckley, Leicestershire, United Kingdom. For anything in this policy, contact info@decopilot.ai or call 0333 242 7337.
We are the data controller for personal data we collect through this website. When we process data inside a client's own systems on their behalf (for example their DecoNetwork or Amazon seller account), the client is the controller and we act as their processor.
What we collect
- Enquiry and form details: name, business name, email, phone, website and your message, when you use our contact, pricing, plugin picks or website audit forms.
- Chat messages: what you type into the Otto chat assistant on this site.
- Plugin usage: the store address of DecoNetwork sites that install our free plugins, so we can support them.
- Connected account data (clients only): order, product and artwork data from a client's DecoNetwork account, email inbox or Amazon seller account, where the client has authorised us to automate work for them.
We do not sell personal data, and we do not use it for advertising profiles.
Amazon seller data
When an Amazon seller connects DecoPilot through Amazon's Selling Partner API, we access only what is needed to turn their Amazon Custom orders into production orders in their own DecoNetwork account:
- order and order item details (product, size, quantity and Amazon order number);
- the buyer's customisation file for that item (the logo, name or text the buyer chose).
We do not request or store Amazon buyers' names, postal addresses, emails or phone numbers. Sellers continue to buy postage and confirm shipment in Amazon Seller Central.
We use Amazon data only to provide this service to the seller who authorised it. We never share it with other sellers, never use it for marketing, and never disclose it to third parties except the seller's own DecoNetwork account and the processors listed below. Customisation files are deleted from our storage once the DecoNetwork order has been created. Order references are kept only as long as needed to support the seller, and all Amazon data is deleted within 30 days of a seller disconnecting DecoPilot or asking us to delete it. We handle Amazon data in line with Amazon's Data Protection Policy and Acceptable Use Policy.
How we use data and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to enquiries and providing quotes | Legitimate interests, or steps before a contract |
| Delivering services and automations to clients | Contract |
| Supporting plugin installs | Legitimate interests |
| Keeping records for tax and accounting | Legal obligation |
Who processes data for us
We use a small number of trusted providers to run the service: Netlify (website hosting and forms), Supabase (database), Cloudflare (chat assistant hosting), Google (calendar bookings and email) and Microsoft (email). Data may be processed outside the UK by these providers under appropriate safeguards such as the UK International Data Transfer Addendum.
How we protect it
Data is encrypted in transit (HTTPS) and at rest. Access is limited to named people with multi-factor authentication. Account keys and tokens for connected services are stored encrypted and never shared. If a security incident affects your data we will tell you without undue delay, and notify Amazon within 24 hours where Amazon data is involved.
How long we keep it
Enquiries are kept for up to 2 years after our last contact. Client records are kept for the length of the contract plus 6 years for accounting purposes. Amazon data follows the shorter limits above.
Your rights
You can ask to see, correct, delete or move your data, or object to how we use it. Email info@decopilot.ai and we will reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
We will update this page if our practices change, and show the date at the top.