Privacy policy

What we store

Your account — email address, name, and the organisation and workspaces you belong to.

What you create — the text you write or paste, your knowledge base, personas, projects, and everything our simulations generate from them. Some of this may describe other people, for example named leads in research you upload; you are responsible for having a basis to give it to us.

Billing records — if you pay us, the record that a payment happened and which plan it was for. Card details never reach our servers; Stripe handles them.

Waitlist and invitations — if you joined the waitlist or were invited, that email address plus whatever role and company you typed. No account is needed to have it removed.

Operational logs — ordinary server logs from our hosting provider, which include request metadata and your IP address.

Why we are allowed to

Your account and content: to provide the service you asked for. Billing records: because tax and accounting law requires us to keep them. Security and abuse prevention, and keeping the product working: our legitimate interests. Where we ask for consent — a marketing email you opted into — you can withdraw it at any time.

How long we keep it

Your content and account data: while your account exists. When you delete your account, or ask us to, it goes.

Billing records: seven years from the transaction, because US tax law requires it. This is the one thing erasure cannot remove.

Waitlist entries: until you ask us to drop you.

Operational logs: as long as our hosting provider keeps them. We do not copy them anywhere with a longer life.

Deleting your data

Email privacy@unpitch.ai and we will erase you. We answer within one month, which is the deadline the law sets, and usually much sooner.

Three things survive erasure. Billing records for the period above, with your identity severed from them where we can do that irreversibly. Stripe’s own copies — it is an independent controller for payment data and deletes on its own timetable. And an anonymous marker that an account was deleted, so the erasure cannot be undone; it holds no name, email or content.

Backups

We delete from live systems immediately. Backup copies are never read or restored for any decision about you, and expire within 30 days of your request.

Who else touches it

We use a small number of companies to run the product. Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (email delivery), and AI model providers reached through a gateway, which process the text you submit in order to produce a result. Cloudflare screens our sign-in and sign-up forms for bots and sees your IP address there. PostHog runs our product analytics: which pages you open, what you click and when the app breaks — never what you type, never your IP address. Behind these sit infrastructure providers that run our servers, background jobs and rate limiting. They all act on our instructions and may not use your content for their own purposes. When you ask to be erased, we pass that on to each of them that holds anything about you.

Where this happens: we are a US company and every provider above is US-based, so your data is stored and processed in the United States wherever you are.

We do not sell your data, and we do not use your content to train models — ours or anyone else’s — unless you explicitly opt in.

Cookies

We set no cookies on this site, and our analytics counts visits without them and without building a profile of you. Signing in to the app sets cookies that keep you signed in, which need no consent. Cloudflare’s bot check on our forms runs under its own domain and its own policy.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to what we do with it, and take it elsewhere. Write to privacy@unpitch.ai. We offer these to everyone, wherever you live. Where you have a national data protection authority, you can complain to it without asking us first.

Changes

If we change something that matters — a retention period, a new processor, a new purpose — we will say so here and update the date at the top.