Legal

Privacy Policy

Effective September 25, 2026

This Privacy Policy explains how Autopilot Ventures LLC, doing business as ChatPacks ("ChatPacks," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit chatpacks.co, create an account, make a purchase, download a ChatPack, or contact us.

Scope and an important distinction

This policy covers the ChatPacks website, customer accounts, purchases, downloads, and support. A ChatPack is a downloadable file that you choose to upload to ChatGPT. ChatGPT, OpenAI, Meta, and any plugins, connectors, or other services you use with a ChatPack are separate services with their own privacy practices.

We do not receive the prompts, campaign data, files, conversations, or other information you submit to ChatGPT merely because you use a ChatPack. We receive that information only if you separately choose to send it to us, such as in a support request. Review the privacy settings and policies of ChatGPT and any connected service before giving them personal or confidential information.

Information we collect

Account and identity information

When you create or use an account, we collect your email address, account identifier, authentication details, and any display name you provide. Passwords are handled by our authentication provider and are not visible to us in readable form.

If you use Google sign-in, Google provides the basic profile information needed to authenticate you, such as your name, email address, profile image, and Google account identifier. We do not receive your Google password, contacts, Drive files, email, or other private Google content through sign-in.

Purchase and entitlement information

We keep records needed to complete and support purchases, including your customer email, purchased ChatPacks, price, discounts, currency, order status, refund status, and identifiers supplied by Stripe. Stripe processes your payment method and billing details. ChatPacks does not receive or store your full card number or card security code.

Messages and requests

We collect the email address, topic, message, and other information you choose to include when you contact support, request a refund, or ask us to notify you about a ChatPack. Please do not put sensitive personal information, payment-card numbers, passwords, or confidential campaign data in these forms.

Device, log, and security information

Our systems and service providers may automatically process your IP address, browser and device type, operating system, referring page, requested pages, timestamps, authentication events, error information, and similar technical data. We use Cloudflare Turnstile on selected forms to distinguish people from automated traffic. Turnstile evaluates limited browser and interaction signals for this security purpose; it does not receive the contents you type into the form from us.

Cookies and browser storage

We use cookies required for account authentication and security. We also use your browser's local storage to remember the ChatPacks in your cart, including when you are signed out. Cart storage stays on your device until you clear the cart, clear browser data, or your browser removes it. We do not currently use advertising cookies or cross-site behavioral advertising trackers.

Where information comes from

We receive information directly from you, automatically from your browser or device, from Google when you choose Google sign-in, and from Stripe when you begin or complete a payment or receive a refund.

How and why we use information

• Provide accounts, customer libraries, downloads, checkout, refunds, support, and other requested services.
• Authenticate users, protect forms, prevent fraud and abuse, troubleshoot problems, and maintain service security.
• Keep transaction, entitlement, accounting, and tax records.
• Respond to messages and send transactional communications about accounts, purchases, security, or material service changes.
• Operate, maintain, and improve the reliability and usability of ChatPacks.
• Comply with law, enforce our agreements, and establish, exercise, or defend legal claims.

Where data-protection law requires a legal basis, we rely on performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating, securing, supporting, and improving the service. Where consent is required, we will request it, and you may withdraw it as permitted by law.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, use Google sign-in data for advertising, or use customer personal information to train our own artificial-intelligence models. We do not make decisions that produce legal or similarly significant effects based solely on automated processing.

How we disclose information

We disclose personal information only as reasonably needed for the purposes above:

• Supabase provides authentication, database, and account infrastructure.
• Stripe processes payments, billing information, refunds, and payment-related fraud checks.
• Vercel hosts and delivers the website and may process operational logs.
• Cloudflare provides network and bot-protection services, including Turnstile.
• Google authenticates you if you choose Google sign-in.

These providers may process information in the United States and other countries under their contracts and privacy terms. We may also disclose information when you direct us to, to professional advisers under duties of confidentiality, to comply with law or valid legal process, to protect rights and safety, or in connection with a merger, financing, reorganization, or sale of business assets. We do not give service providers permission to use customer personal information for their own advertising.

International transfers

ChatPacks and its providers may process information outside the country where you live. Where applicable law requires safeguards for an international transfer, we rely on recognized safeguards such as adequacy decisions, contractual protections, or other lawful transfer mechanisms.

How long we keep information

We keep personal information only as long as reasonably necessary for the purposes described here. The period depends on the type of record and why we hold it. Account and entitlement records are generally kept while the account remains active. Transaction and refund records may be kept longer to satisfy tax, accounting, chargeback, and legal obligations. Support, security, and technical records are kept for the time needed to resolve the request, investigate an incident, prevent abuse, or establish and defend legal claims. We may retain de-identified information that can no longer reasonably identify you.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted connections, protected authentication, signed payment webhooks, and bot protection. No system is perfectly secure, so we cannot guarantee absolute security. You are responsible for protecting your password and devices and should contact us promptly if you believe your account has been compromised.

Your choices and privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent; or to appeal a decision about a request. You may also have the right to complain to a local data-protection authority.

To make a request, use our support form and choose “Something else,” or email help@chatpacks.co. Describe the right you want to exercise and the account email involved. We may need to verify your identity and authority before acting. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.

California notice at collection

In the preceding 12 months, we may have collected the following categories of personal information: identifiers and account details; commercial information about purchases and refunds; internet or electronic-network activity; approximate location derived from IP address; and communications or other content you choose to provide. We collect and use these categories for the business and commercial purposes described in “How and why we use information,” and retain them using the criteria described in “How long we keep information.” We do not sell or share these categories for cross-context behavioral advertising. We do not knowingly sell or share the personal information of anyone under 16.

California residents may have rights to know, access, correct, delete, and receive a portable copy of covered information, and to limit or opt out of certain uses where applicable. Because we do not sell or share personal information for cross-context behavioral advertising, we do not offer a sale-or-sharing opt-out link.

Children

ChatPacks is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.

Changes to this policy

We may update this policy as ChatPacks, our providers, or applicable requirements change. We will post the revised policy here and update the effective date. If a change materially affects how we use personal information or your rights, we will provide additional notice when appropriate.

Contact us

Autopilot Ventures LLC is responsible for the personal information described in this policy. For privacy questions, account deletion, or data requests, use our support form or email help@chatpacks.co.