CommandPost AI · Legal

Privacy Policy

Effective and last updated October 28, 2026

1. Who operates this service

CommandPost AI, available at commandpostai.net, is operated by Brian Pitts (“we,” “us,” or “our”). This policy explains how we handle information when you visit the website or use our business automation tools. For privacy questions or requests, email Briancpitts39@gmail.com. When a business uses the service to handle information about its customers or staff, that business is responsible for its own notices, permissions, and instructions.

2. Information we receive

Account information includes the account identifier, name, and email address provided through Sign in with ChatGPT. Workspace information includes business profiles, brand guidance, worker instructions, assignments, permissions, approvals, prompts, captions, images, videos, and other files you supply or generate. Connected services may provide account identifiers, profile details, authorized social content and interactions, and mailbox messages, senders, recipients, and message content, according to the permissions you grant. If enabled and configured, phone features may process caller details, call events, transcripts, messages, and recordings. Billing information includes subscription status, payment references, purchases, and credit balances. Our hosting and service providers may also process technical information such as IP addresses, browser details, request logs, and security events.

3. How we use information

We use information to authenticate users, maintain workspaces, follow your worker instructions, generate content, prepare replies, schedule or publish authorized posts, support connected email and phone workflows, manage subscriptions and credits, resolve support requests, and detect misuse. AI providers receive prompts and the relevant business context, message content, media, or transcripts needed for the feature you request. Review the information you include and avoid supplying unnecessary personal information. AI responses can be inaccurate and require review.

4. Connected accounts and your controls

You choose which accounts to connect and which permissions to authorize. Access and refresh tokens are used to maintain those connections; server-side integration credentials are stored encrypted. You can disconnect a supported integration in the service and revoke access in the provider’s own settings. Revocation stops future authorized access but does not automatically remove previously saved records or content already delivered to a provider. Deleting a local record may not delete the original email, social post, or provider-held copy. Contact us if you need help with those distinctions.

5. Service providers and disclosures

OpenAI hosts the site through ChatGPT Sites and provides AI processing used by enabled features. Hosting infrastructure includes Cloudflare. Runway may process video generation requests; Stripe processes payments; Microsoft handles authorized Outlook connections; TikTok and other connected networks process content sent to them; and Twilio may process configured phone services. Only providers used for the relevant feature receive its associated information. These services also have their own privacy terms. Workspace owners and authorized members may access information according to their permissions. We may disclose information to meet legal obligations, protect users and the service, or support a business transfer subject to appropriate protections. We do not sell personal information or share it for cross-context behavioral advertising.

6. AI and third-party policies

Content submitted to an AI feature is processed under the applicable provider’s terms and our account configuration. Do not assume that every provider has the same retention or model-training practices. Your separate use of ChatGPT, Microsoft, social networks, payment services, or other third-party products is governed by their policies. This policy does not replace those notices.

7. Cookies, browser storage, and security

The service and its sign-in, hosting, payment, and connected-service providers use cookies or similar technologies for sessions, authentication, preferences, payments, and security. Browser settings can limit storage, although blocking it may prevent features from working. We use access controls and server-side credential protection to reduce risk, but no service can guarantee absolute security. Do not upload passwords, full payment-card information, protected health information, or other highly sensitive records into prompts or workspace content. Payment-card details should be entered only in the payment processor’s checkout.

8. Retention and deletion

We retain information as needed to provide your workspace and connected workflows, maintain accurate billing and credit records, investigate security incidents, resolve disputes, and meet applicable legal requirements. Retention depends on the type of information, account status, the purpose for which it was collected, and legal obligations. Deletion may be delayed where records must be retained or removed from backups through normal provider processes. Disconnecting a service or canceling billing does not itself delete your workspace. You may request deletion or export by contacting us; third-party copies remain subject to the relevant provider’s controls and obligations.

9. Privacy rights and requests

Depending on applicable law, you may have rights to access, correct, export, delete, restrict, or object to processing of your information, withdraw consent, appeal a decision on your request, or complain to a privacy regulator. Send requests to Briancpitts39@gmail.com and identify the account and request without including passwords or authentication codes. We may verify your identity and authority before acting. If a business controls the record you are asking about, contact that business; we will assist as appropriate. We will not discriminate against you for exercising applicable privacy rights.

10. Location, children, and updates

Providers may process information in countries other than your own. Available protections and provider arrangements depend on the service and applicable law; we do not promise a particular storage location. CommandPost AI is a business service intended for adults aged 18 or older and is not directed to children. Contact us if you believe a child has supplied personal information. We may update this policy as features and practices change, post the revised date here, and provide additional notice where required.