Privacy Policy
Effective Date: 14 March 2025
This Privacy Policy explains how PitchCrier ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our website and services. It applies to founders, creators, and visitors.
If you have questions, contact us at support@pitchcrier.com.
1. Data We Collect
We collect the following categories of personal data:
- Account data: email address, OAuth profile (if you sign in with Google)
- Billing data: subscription plan, billing history (payment card details are held by LemonSqueezy, not us)
- Campaign & project data: campaign names, descriptions, discount codes you upload
- Creator submissions: email address, social profile URL, pitch note, post URL, disclosure acknowledgement timestamp
- Usage data: pages visited, clicks, browser type, IP address (collected via analytics tools)
- Communications: emails we send you (transactional and support)
2. Lawful Basis (GDPR)
We process your data under the following GDPR lawful bases:
- Contract (Art. 6(1)(b)): to create and manage your account, process subscriptions, deliver campaign functionality
- Legitimate interests (Art. 6(1)(f)): fraud prevention, security, product analytics, improving our service
- Consent (Art. 6(1)(a)): non-essential analytics cookies (PostHog, Google Analytics); you can withdraw consent at any time via the cookie banner or by contacting us
- Legal obligation (Art. 6(1)(c)): retaining billing records for tax compliance
3. How We Use Your Data
- Operate, maintain, and improve the platform
- Send transactional emails (pitch notifications, approval/rejection, discount codes)
- Process payments and manage subscriptions
- Enforce our Terms of Service and prevent abuse
- Analyse product usage (with your consent for analytics cookies)
- Comply with legal obligations
4. Third-Party Processors
We share data with the following sub-processors as necessary to operate the service:
| Processor | Purpose | Data location |
|---|---|---|
| Supabase | Database, authentication | US (AWS us-east-1) |
| Resend | Transactional email | US |
| LemonSqueezy | Payment processing, subscriptions, VAT | US |
| PostHog | Product analytics (consent-gated) | US (posthog.com) |
| Google Analytics | Website analytics (consent-gated) | US |
| Tally.so | Waitlist / feedback forms | EU |
| Vercel | Hosting & edge network | Global (edge) / US origin |
Transfers of data outside the EEA rely on Standard Contractual Clauses or the respective processor's adequacy mechanisms.
5. Data Retention
- Account & project data: retained while your account is active; deleted when you delete your account
- Billing records: retained for 7 years to comply with tax/accounting obligations
- Creator submissions: retained while the associated campaign is active; deleted when the founder deletes the campaign or their account
- Analytics data: PostHog retains event data per their default retention (1 year); Google Analytics retains data per your property settings (default 14 months)
- Email logs: Resend retains logs for 30 days
6. Your Rights
Depending on your location, you may have the following rights:
Under GDPR (EEA / UK residents):
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure / "right to be forgotten" (Art. 17)
- Right to restrict processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (without affecting prior lawfulness)
Under CCPA (California residents): you have the right to know what personal information is collected, the right to delete it, the right to opt out of sale (we do not sell personal data), and the right to non-discrimination.
To exercise any of these rights, email us at support@pitchcrier.com. We will respond within 30 days. For account deletion, you can also use the Delete Account option in your dashboard settings.
7. Cookies
We use essential cookies (Supabase authentication session) and, with your consent, analytics cookies (PostHog, Google Analytics). See our Cookie Policy for details.
8. Children
Our service is not directed to anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us their data, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use after the effective date constitutes acceptance.
10. Contact
For privacy enquiries or Subject Access Requests: support@pitchcrier.com
