Privacy policy

What we store

Your account — email address, name, and the organisation and workspaces you belong to.

What you create — the text you write or paste, your knowledge base, personas, projects, and everything our simulations generate from them. Some of this may describe other people, for example named leads in research you upload. You are responsible for having a basis to give it to us; we treat it as yours and delete it with your account.

Billing records — if you pay us, the record that a payment happened and which plan it was for. Card details never reach our servers; Stripe handles them.

Waitlist and invitations — if you put your email on the waitlist, that address plus whatever role and company you typed; and, if we invite you, the same address on an access list that lets you in. You do not need an account for either, and you do not need one to get rid of them.

Operational logs — ordinary server logs from our hosting provider, which include request metadata and an identifier derived from the connection.

Why we are allowed to

Your account and content: to provide the service you asked for. Billing records: because tax and accounting law requires us to keep them. Security and abuse prevention, and keeping the product working: our legitimate interests. Where we ask for consent — a marketing email you opted into — you can withdraw it at any time.

How long we keep it

Your content and account data: while your account exists. When you delete your account, or ask us to, it goes. We do not keep a copy for ourselves.

Billing records: seven years from the transaction. This one is not our choice — US tax law sets the outer limit on how far back our records can be examined, and it is the reason erasure does not remove everything. It covers only records where money actually moved. Free usage creates no such record and is deleted with everything else.

Waitlist entries: until you ask us to drop you. We do not put a timer on this one, because we would rather state a period we keep than a tidy one we do not. One email to the address below removes it — no account needed, because you do not have one. If we invite you, your address is also copied to an access list so the invitation works; the same email removes both.

Operational logs: as long as our hosting provider keeps them. That period is theirs and depends on our plan with them; we do not copy the logs anywhere with a longer life.

Deleting your data

Email privacy@unpitch.ai and we will erase you. We answer within one month, which is the deadline the law sets, and usually much sooner. This works whether or not you ever made an account — a waitlist address is the commonest thing people ask us to drop, and it needs nothing but the email.

Three honest caveats about what “erased” means. Billing records survive for the period above, with your identity severed from them where we can do that irreversibly. Stripe keeps its own copies — it is a separate company with its own legal obligations, not merely our subcontractor, so its part of the deletion runs on its timetable rather than ours and can take longer than our month. And we keep a record that your account existed and was deleted — an internal identifier with nothing attached to it, no name, no email, no content. It is what stops the erasure from quietly undoing itself, so we keep it indefinitely and use it for nothing else.

Backups

We delete from live systems immediately. Backup copies are put beyond use — never read, never restored into anything, never used for any decision about you — and disappear when the backup cycle overwrites them, which is no more than 30 days after your request. We tell you this rather than let you assume “deleted” meant every copy everywhere the same afternoon.

Who else touches it

We use a small number of companies to run the product. Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (email delivery), and AI model providers reached through a gateway, which process the text you submit in order to produce a result. Inngest runs our background jobs. Firecrawl reads the website address you give us during setup and returns its contents. Cloudflare screens our sign-in, sign-up, invitation and waitlist forms for bots, so it sees your IP address and browser on the pages carrying those — not on this one. Upstash stores rate-limiting counters keyed to a one-way hash of your IP address. They act on our instructions and may not use your content for their own purposes. When you ask to be erased, we pass that on to each of them that holds anything about you.

Where this happens: we are a US company and every provider above is US-based, so your data is stored and processed in the United States wherever you are. If you are somewhere with rules about that, this is the sentence you were looking for.

We do not sell your data, and we do not use your content to train models — ours or anyone else’s — unless you explicitly opt in.

Cookies

We set no cookies on this site, and our analytics counts page views without them and without building a profile of you. Signing in to the app sets cookies that keep you signed in — strictly necessary for a service you asked for, so there is nothing to consent to. The bot check on our forms is Cloudflare’s and runs under its own domain; anything it stores is theirs, governed by their policy, and used to tell people from scripts rather than to follow you. That is why you are not reading this through a cookie banner.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to what we do with it, and take it elsewhere. Write to privacy@unpitch.ai. We offer these to everyone rather than only where a law compels them, because sorting people by passport to decide who may delete their own work is not a policy we want to write. Where you have a national data protection authority, you can complain to it without asking us first.

Changes

If we change something that matters — a retention period, a new processor, a new purpose — we will say so here and update the date at the top. We will not shorten a promise quietly.