pilotfish
Sign inGet started

Terms of service

Last updated 12 November 2026

These terms are a binding agreement between you and GAI Ventures Private Limited (“gAI Ventures”, “we”, “us”) for using pilotfish: the app, the managed MCP, and this website. Together with our privacy policy, they apply whenever you use pilotfish. You accept them by ticking the box when you sign in; if you don't agree, don't use pilotfish. If you use pilotfish for an organisation, you accept them for it. A signed order form or agreement with us takes precedence over these terms where they differ.

Access and your account

You create your account with Google and accept these terms when you do, or we set it up with you. Give us true, accurate and complete information. You sign in with Google and are responsible for what happens under your account and your API and MCP keys. Org admins may make API keys for the organisation's projects and keys of their own; keys act with the access of the project or person they belong to. Keep keys private, and revoke any you think has leaked.

How pilotfish acts for you

pilotfish is a tool that carries out your instructions. When you give it a task, from the app, the managed MCP or an agent you connect, it acts on your behalf and as you: it opens a browser, goes to the sites the task needs, and reads, clicks, types and signs in there the way you asked. It doesn't pick tasks, sites or accounts of its own. You're responsible for the tasks you give it, including those an agent you connect gives it in your name, and for what they do.

Payments, orders, messages, deletions and other steps that can't be undone wait for your approval, unless you approved that kind of step in advance. You're responsible for steps you approve or approve in advance. Review results before you rely on them: AI can be wrong, and sites change.

Your authority over sites and accounts

For every site and account you send pilotfish to, you confirm that:

  • the account is yours, or its owner has authorised you to use it and to let an automated tool use it for you;
  • your use of the site, and pilotfish's use of it on your behalf, is allowed by the site's terms and by the law that applies to you;
  • you have the right to any personal data or content a task reads, collects or submits.

You're responsible for checking each site's terms. We don't check them for you, and we don't promise that automating any site is allowed by its terms. If a site or an account holder objects, that is between you and them, and you'll stop sending pilotfish there.

Saved logins and your consent

pilotfish stores sign-in details only when you choose to: a login you save, one a task asks to save after it works, a site that stays signed in, or an inbox you connect. By saving them you consent to pilotfish keeping them and using them to sign in to that site for your tasks. They can include usernames and passwords, authenticator keys, recovery codes, passkeys, and the cookies that keep a site signed in; a connected inbox is read only for the one-time codes and sign-in links your tasks wait for. You may keep several accounts for one site; a task uses the one you name, your default for that site, or asks you which.

How we protect credentials

We keep every saved credential encrypted in our vault, sealed under a key of its own owner and a master key held apart from the data. We commit that:

  • a credential is used only to sign in to the site it was saved for, for the tasks of the person or identity it belongs to;
  • it is never sent to an AI model (the model sees only placeholders), never returned by our API, MCP, webhooks or logs, and never shown to anyone but its own person in the app, signed in;
  • we never sell, share or analyse credentials, or use them to train models;
  • deleting a login removes it at once, and deleting an identity destroys its key so nothing it kept can be opened again.

Save only credentials you're entitled to use, and delete those you no longer need: in Sites & logins for your own, and through identities for your end users'. Tell us at once at support@gai.ventures if you think a credential has been misused.

Projects, identities and your end users

Your own work is in your Personal project. Your organisation can also have shared projects, where it runs tasks for its own customers (“end users”), each as an identity that keeps that end user's logins, signed-in sessions, network region and browser identity, sealed in our vault. If you use identities, you agree that:

  • you have each end user's authority to let pilotfish act on their accounts for the tasks you run, and you tell them, in your own privacy notice, that a service provider does so for you;
  • you collect their logins only through a pilotfish login link they open themselves, or from your own systems with their permission, and never ask them to share a password with an AI or with your staff;
  • the tasks you run as an identity, and what they do, are yours, as with your own tasks; the rules in “Your authority over sites and accounts” and “What you may not do” apply to each identity's sites and accounts;
  • for your end users' data we act on your instructions as your service provider: we use it only to run your tasks, and pass on any request from an end user that we receive;
  • you delete an identity when you no longer serve that end user, or when they ask you to.

We never contact your end users, and we never give you or anyone else their passwords, cookies, IP addresses or device fingerprints: you receive an identity's id, its masked usernames, the ids of its saved logins and what its tasks cost.

Browser identity and bot checks

Many sites check whether a visitor is a person. So that your tasks can run on the sites you use, pilotfish:

  • presents a consistent browser identity, or fingerprint: a Windows or Mac browser kept the same for you on each site;
  • sends a task's traffic for its own sites through residential IP addresses in the site's country, and keeps the same address while you're signed in there;
  • handles bot checks such as CAPTCHAs: by waiting, by its own handling, or by sending the check to a solving service, and asks you when none of those works.

You can turn CAPTCHA solving off, or send a site direct, in that site's settings. These features help tasks run where you're entitled to be. They give you no permission to reach anything you couldn't reach yourself: don't use pilotfish to get around a block, ban, paywall, rate limit or other restriction a site has placed on you, or to reach accounts or data you aren't authorised to access.

What you may not do

  • Break the law, defraud anyone, or infringe others' rights.
  • Send spam, create accounts in bulk, or harass people.
  • Collect personal data you have no right to collect.
  • Buy tickets for resale, or automate sites we exclude. Ticket sellers and government identity portals are never automated.
  • Impersonate anyone, or misstate who you act for.
  • Attack, overload or probe sites or networks, including ours, or use pilotfish to spread malware.
  • Use pilotfish where the law forbids automated access, or to break a site's security.
  • Resell pilotfish or reverse-engineer it, except as the law allows.

We may stop a task, or suspend an account, that breaks these rules or puts others at risk.

Fees

You pay the fees agreed for your workspace, at the published rates unless your agreement says otherwise. On pay as you go, you buy credits in US dollars by card (you may pay in your own currency at checkout) and your tasks use them at those rates; free credits are used the same way. When your credits run out, new tasks don't start and a running task pauses. The app, the API and the MCP show what each task used, by kind (models, browser time, residential traffic, CAPTCHAs); identities have no fee of their own. Spending limits you or your admins set apply to new work; a task that reaches its own limit pauses until you continue it. If we don't deliver what we agreed, raise it within the time your agreement sets and we'll refund it.

Our content

pilotfish's software, design, text, logos and images belong to gAI Ventures or its suppliers. Using pilotfish gives you no rights in them beyond using the service, except for the open MCP below.

Your content

Your tasks, files, logins and results are yours. You let us process them to provide pilotfish, as described in our privacy policy. You can delete them at any time.

Other sites

pilotfish works on sites we don't control. They may change, block automated access, or refuse a task, and we aren't responsible for their content or terms.

The open MCP

The open MCP (@gaiventures/pilotfish-mcp) is free software under the MIT License, which governs its use. It runs on your own computer, and these terms apply to it only where it connects to our services.

Disclaimers

Except as agreed in writing with your workspace, pilotfish is provided “as is”, without warranties of any kind, to the extent the law allows. We don't promise it will be uninterrupted, error-free, or able to complete every task.

Limitation of liability

To the extent the law allows, we aren't liable for indirect, incidental or consequential losses, or lost profits or data. Our total liability for any claim is limited to the fees you paid us for pilotfish in the three months before it, or 100 US dollars if greater.

Indemnity

You'll defend and indemnify gAI Ventures, and hold it harmless, against claims, losses and costs (including reasonable legal fees) that arise from the tasks you give pilotfish, the sites and accounts you send it to, the credentials you save, your breach of these terms or of a site's terms, or your breach of the law or of anyone's rights.

Events beyond our control

We aren't liable for delays or failures caused by events beyond our reasonable control, such as natural disasters, pandemics, government action, or outages of networks and providers we rely on.

Ending

You can stop using pilotfish at any time and ask us to delete your account. We may end access with reasonable notice, or at once for a serious breach of these terms.

Governing law

The governing law and the courts for any dispute are those set out in gAI Ventures' Terms & Conditions.

Changes

We may update these terms. We'll change the date above, and tell account holders about changes that matter before they apply.

Contact

Questions about these terms: contact@gai.ventures or +1 415 707 0523.