Privacy Policy

1. Data we collect

• Account data: name, email address, and password (stored only as a cryptographic hash). Used for sign-in and transactional email.
• Pitch data: the content you submit (subject, details, your name and email) and its status (paid, responded, refunded, expired). Visible to you and to the Recipient you addressed it to.
• Payment data: payments are handled entirely by Stripe. We store only a payment reference, the amount, and the payment status — never card numbers.
• Profile data: members who receive pitches choose a public link slug and display name; these are published at your public pitch page.

2. How we use data

• Operate the deposit → read → refund flow.
• Send transactional email (payment confirmation, refund notices, response notifications, account security) through our email provider, Resend.
• Prevent abuse and enforce our Terms.

We do not sell your data, and we do not use pitch content for advertising or AI training.

3. Who we share data with

• Stripe — payment processing (they receive your payment details directly).
• Resend — transactional email delivery.
• Vercel — application hosting and infrastructure.
• The Recipient — receives the pitch content you submitted to them.

We disclose data only when required by law or to protect the rights and safety of the Service and its users.

4. Cookies

We use a single authentication session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

5. Retention

Account and pitch data are kept while your account is active. Expired and refunded pitches remain as part of your history and our audit trail. You can request deletion of your account and personal data at any time (Section 6); payment audit records may be retained where legally required.

6. Your rights

You can access, correct, or delete your personal data, or export the pitches you have submitted, by emailing hello@pitchdeposit.com from your account email. We respond within 30 days.

7. Security

Passwords are hashed, sessions are cookie-based and revocable, and payment data never touches our servers. No method of transmission or storage is perfectly secure, but we design to minimize what can be exposed.

8. Changes

If we change this policy materially, we will notify you by email or a notice on the Service before the change takes effect.

9. Contact

Privacy questions: hello@pitchdeposit.com.