Privacy notice
How we handle your information
Draft of 30 September 2026, to be reviewed before the site goes live.
Who we are
Pilota Labs is a trade name of Unicorn Foundry B.V., registered with the Dutch Chamber of Commerce under number 95837876 and based in Eindhoven, the Netherlands. We are responsible for the personal data described here. You can reach us through the form on our home page or at the email address on the imprint page.
What we collect
- When you use the form: your name, company, work email, the type of bill, the invoice you upload, the contract, quote or rate card if you add one, and your message.
- When you book a call: the details you enter in the booking tool.
- When you visit the site: our hosting provider processes technical data such as your IP address to deliver the pages securely.
We do not use cookies, analytics or advertising trackers on this site at the moment. If that changes, we will ask for your consent first and update this notice.
Why we use it
- To answer your request and give you the first look at your invoice, as a step you ask for before any contract (article 6(1)(b) GDPR).
- To deliver the services you buy from us and to keep the records the law requires (article 6(1)(b) and (c) GDPR).
- To run and protect our business, for example to keep the site secure (article 6(1)(f) GDPR).
Invoices can contain names or addresses of other people, for example on shipping documents. We use those only to check the invoice and never for anything else.
Who receives it
Only the service providers we need: Google Cloud, which hosts this site and receives the form (uploaded files are stored in the Netherlands), Google Workspace for our email and, if you book a call, the booking tool. Each works under a data processing agreement. We do not sell your data. If a provider processes data outside the European Economic Area, we rely on an adequacy decision or the European Commission's standard contractual clauses.
How long we keep it
Form messages and uploaded files are deleted within 12 months of our last contact, unless you become a customer. For customers we keep what the contract needs for its duration, and financial records for the 7 years Dutch law requires. You can ask us to delete your data earlier at any time.
Your rights
You can ask to see, correct, delete or receive a copy of your data, to limit its use, or object to it. Contact us through the form or the email address on the imprint page. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.