Back to home
Privacy Policy
Last updated: 19 July 2026
This page is maintained by the AI BA Co-Pilot team to explain, in plain language, what data we handle when you use bacopilot.app ("the Service"). It is not a legal contract or independent certification. If you have questions, contact us at privacy@bacopilot.app.
1. Who we are
AI BA Co-Pilot is an AI-assisted requirements-engineering workspace operated by the app owner. We act as the data controller for account information and as a processor for the content you upload, record or generate inside the Service.
2. Information we collect
- Account data — email address and authentication identifiers (including Google sign-in when used), managed by our authentication provider.
- Workspace content — projects, requirements, user stories, RAID logs, process models, saved views and column preferences you create.
- Evidence you upload — documents, spreadsheets, PDFs, images and meeting audio you submit for analysis.
- Operational data — basic logs (timestamps, request paths, error traces) used to keep the Service running securely.
3. How we use your data
- Provide the Service and features you explicitly invoke.
- Run AI extraction, transcription and quality-scoring on content you submit — only when you trigger it.
- Sync your saved filter views, column preferences and other settings to your account so they stay consistent across devices.
- Protect the Service against abuse and troubleshoot errors.
We do not sell your data, and we do not use your uploaded content or meeting recordings to train third-party AI models.
4. AI processing & subprocessors
When you invoke AI features, the minimum content needed to answer your request is sent to model providers via the Lovable AI Gateway (currently including Google Gemini). Providers are contractually restricted from using your content to train their models. Hosting, authentication, database and email delivery are provided by Lovable Cloud and its underlying infrastructure partners.
5. Storage, security & retention
- Data is encrypted in transit (TLS) and at rest.
- Row-level security policies restrict database access so each user can only reach their own rows.
- Uploaded files in private storage buckets are scoped to the uploading account.
- Workspace content is retained while your account is active and deleted within 30 days of account deletion, except where we must retain records to comply with law.
6. Your rights
You can request access to, correction of, export of, or deletion of your personal data at any time by emailing privacy@bacopilot.app. You can also unsubscribe from non-essential email at any time via the link in those messages.
7. Cookies & analytics
We use only the cookies and local storage needed to keep you signed in, remember your preferences, and operate core features. We do not run third-party advertising trackers.
8. Children
The Service is intended for professional use by adults and is not directed to children under 16.
9. Changes to this policy
We may update this policy as the Service evolves. Material changes will be surfaced in-app or by email. The "Last updated" date at the top of the page always reflects the current version.
10. Contact
Questions, requests or complaints: privacy@bacopilot.app, or use our privacy contact form.
This document describes the app owner's practices for AI BA Co-Pilot. Platform capabilities described here are enabled features of the underlying Lovable Cloud infrastructure and are not a Lovable-issued certification.