This Privacy Policy explains how PitchPilote (“PitchPilote”, “we”, “us”) collects, uses, shares, and protects personal information when you use pitchpilote.com and the PitchPilote app (the “Service”). For privacy questions, contact us at team@pitchpilote.com.

We are the controller of your personal information. This policy covers everyone, with extra detail for users in the European Economic Area (EEA), the UK, and US states with privacy laws (such as California).

Information we collect

Account information — your name and email address from Google sign-in.
Voice recordings & transcripts — when you record a practice session, your spoken audio is captured, uploaded to secure cloud storage, and transcribed to text. Transcripts and timeline markers are saved with the session.
Speech Academy activity — your drill responses, scores, progress, and profile. For voice drills, your speech is transcribed in your browser; the audio is not uploaded — only the resulting text and metrics (e.g. pace, filler counts) are sent to us.
Coaching & analysis — AI feedback, scores, insights, and suggestions generated from your sessions and drills.
Slides & projects — presentation content you upload, project context, and linked sessions.
Payment information — if you subscribe, payments are handled by our Merchant of Record, Lemon Squeezy, which processes your payment as the seller of record (including any applicable taxes). We receive your subscription status and limited billing details, and never see or store your full card number.
Usage & device data — session counts, subscription tier, onboarding answers, approximate location/IP, browser and device info, and product analytics.
Support & feedback — messages, reports, or feedback you send us.

Voice & audio (sensitive data)

We treat your voice as sensitive. We use your recordings and transcribed speech only to transcribe your words and generate speaking feedback for you (pace, filler words, clarity, and similar coaching signals).

We do not use your voice to identify you, create a voiceprint or biometric identifier, or match you against other people.
We do not sell your recordings or use them to advertise to you.
Practice-session audio is stored until you delete the session or your account; Speech Academy voice is transcribed on your device and the audio never leaves it.
You can record without audio upload at any time by using typed drills, and you can delete recordings whenever you like.

AI processing

To generate feedback, we send the text of your transcript, drill responses, and any slide content to a third-party AI inference provider (currently Groq, Inc.). We do not send your audio to the AI provider. We instruct our AI provider(s) not to use your content to train their models, and they process it only to return your results. AI feedback is generated automatically and is informational only.

How we use your information & legal bases

We use your information to:

Provide, operate, and secure the Service, and generate your coaching feedback — legal basis: performance of our contract with you.
Manage your account, subscription, and payments — contract; and compliance with legal obligations.
Improve and develop features, and keep the Service safe from abuse — our legitimate interests.
Send service emails (e.g. account and billing notices) — contract / legitimate interests; and product updates where permitted — consent, where required.
Use optional analytics and non-essential cookies — consent (see our Cookie Policy).

We do not sell your personal information, and we do not use it for cross-context behavioral advertising.

Sharing & service providers

We share personal information only with vendors who help us run the Service, under contracts that limit their use of it. These include Google (sign-in), Lemon Squeezy (payments / merchant of record), Resend (email), Upstash (database), Vercel (hosting, audio storage, and analytics), and our AI provider(s). See our full list of sub-processors. We may also disclose information to comply with law or to protect our rights, and in connection with a merger or acquisition (with notice).

International data transfers

We and our service providers may process data in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum). Contact us for a copy of the relevant safeguards.

Data retention

Sessions, recordings, transcripts, projects, and Academy data: kept while your account is active, or until you delete them.
In-progress session data: stored temporarily and expires automatically.
Account and billing records: kept as needed to run the Service and meet legal, tax, and accounting obligations.
When you delete your account, we permanently delete your data from our active systems; residual copies in backups are removed on our routine backup cycle.

Security

We protect your data with encryption in transit, access controls, and authentication so your data is tied to your account and inaccessible to other users. No system is perfectly secure, but we work to safeguard your information and will notify you and regulators of a breach where the law requires.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information; to restrict or object to certain processing; to withdraw consent; and to not be discriminated against for exercising these rights.

You can delete your account and all associated data instantly from Settings > Delete Account, or email us to request access, export, correction, or deletion.
We will verify your request and respond within the timeframe required by law. You may use an authorized agent where permitted.
EEA/UK users may lodge a complaint with their local data protection authority.
California & other US state residents have the rights to know, delete, and correct, and to opt out of sale/sharing and limit use of sensitive personal information — see below.

Your privacy choices (US states)

We do not sell your personal information and do not share it for cross-context behavioral advertising, so there is no “Do Not Sell or Share” action to take. We use sensitive information (your voice/recordings) only to provide the Service you asked for, not to infer characteristics about you. To exercise any state privacy right, email team@pitchpilote.com. We will not discriminate against you for exercising your rights.

Cookies

We use essential cookies to keep you signed in, and — with your consent — optional analytics cookies to understand usage. You can change your choice anytime. See our Cookie Policy for details.

Children

The Service is for adults and is not directed to children under 16. We do not knowingly collect personal information from children under 16; if you believe a child has provided us data, contact us and we will delete it.

Changes & contact

We may update this policy as the product evolves; we will revise the “Last updated” date and, for material changes, give notice. For any question or request — including from users in the EEA, UK, or California — contact team@pitchpilote.com.