Privacy Policy

PilotLookup is a phone number validation and carrier lookup service operated by PILOTLAB LLC, a Wyoming limited liability company, doing business as PilotLookup (“PilotLookup”, “we”, “us”), 1309 Coffeen Ave Ste 1200, Sheridan, WY 82801, United States.

For privacy questions, data requests or complaints, contact privacy@pilotlookup.net. We respond within one month.

We handle two different kinds of data, and the law treats them differently.

We are the controller for your account, billing, website and security data — the email address you register with, what you bought, the cookies described in our Cookie Policy, and the security logs we keep to stop abuse. We decide why and how that data is used, and this policy governs it.

We are the processor for the phone numbers you submit for validation and the results we return. You decide why those numbers are looked up; we act on your instructions. That relationship is governed by our Data Processing Agreement, which applies automatically to every customer who submits personal data to the service.

One consequence worth stating plainly: if a number you submitted belongs to someone who then asks us about it, we will point them to you, because you — not us — decided to look it up.

What we never return. A carrier lookup describes a line, not a person. The service does not return a name, an address or subscriber identity, and we hold no such data about the numbers submitted to us.

We make no automated decisions that produce legal or similarly significant effects about you. A line type is a fact about a telephone line; any decision taken on the back of it is yours.

We do not sell personal data, and we do not share it with advertising networks. We use a small number of service providers to run the service. We describe them by category and country rather than by name:

Customers can request the list of our sub-processors by emailing privacy@pilotlookup.net.

We also disclose data where the law requires it — a valid court order, subpoena or regulatory demand — and to professional advisers under confidentiality. If we are ever involved in a merger or sale, data may transfer to the buyer under this policy.

PILOTLAB LLC is based in the United States. PilotLookup is hosted in the European Union. Some of the service providers we use are located in the United States. Our support and engineering staff, including team members in Pakistan, may access personal data remotely to run and support the service. When personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we use the European Commission’s Standard Contractual Clauses, with the UK Addendum and Swiss amendments where they apply. Where a US provider is certified under the EU-U.S. Data Privacy Framework, we may rely on that certification for transfers to that provider.

Worth being specific about one of these: the records that hold your account and lookup history sit in the European Union, but batch files you upload are stored with an object storage provider in the United States, along with the enriched files we generate from them. If that matters for your use case, the single-number API keeps everything within the EEA.

• Account data — for as long as your account is open, then up to 90 days after deletion.
• Batch upload files and results — until you delete the job. Deleting a job removes both files from storage.
• Usage logs — 24 months, so you can audit and reconcile your spend.
• Authentication records — 12 months.
• Billing records — 7 years, as required by US tax law. These survive account deletion.
• Sessions — expire 7 days after sign-in.

You do not have to wait for any of these. The Delete my data button in Settings erases your usage logs and batch files immediately while keeping your account and credits, and deleting your account removes your account data at once.

If you are in the EEA, the UK or Switzerland you have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent at any time without affecting what came before.

Much of this you can do yourself: export or erase your data and close your account from Settings. For anything else, write to privacy@pilotlookup.net. We respond within one month, and will tell you if a complex request needs longer.

If a business looked your number up. We were the processor, not the controller, so we cannot tell you why it happened — but we will forward your request to the customer who made the lookup, and you may object to our keeping the usage record of it.

Complaints.You can complain to a supervisory authority: in the EEA, the data protection authority where you live or work; in the UK, the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to put it right first.

If you live in California, Colorado, Connecticut, Virginia or another US state with a comprehensive privacy law, you have the right to know what personal information we hold about you, to delete it, to correct it, and to opt out of its sale or sharing for targeted advertising.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We run no advertising pixels. The only non-essential technology on this site is website analytics, which does not load unless you accept it and which you can turn off at any time through Cookie settings.

We will not discriminate against you for exercising these rights. Exercise them at privacy@pilotlookup.net; we may need to verify your identity against the account first.

Traffic is encrypted in transit with TLS. Passwords and API keys are stored only as salted one-way hashes, so neither we nor anyone reading the stored data can recover them. Session cookies are HTTP-only. Administrative access is separated from ordinary accounts and account events are logged. Rate limits apply per API key and per IP address.

We describe what we actually do rather than what sounds reassuring. We hold no SOC 2 or ISO 27001 certification and do not claim one. The security measures that apply to data you submit as a customer are set out in Annex II of the DPA.

PilotLookup is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, write to privacy@pilotlookup.net and we will delete it.

When this policy changes we update the date at the top of the page. If a change materially affects your rights — a new purpose, a new category of recipient, a shorter route to your data — we will email account holders before it takes effect.