Privacy Policy

Effective [EFFECTIVE DATE — fill in when this goes live]

This Privacy Policy explains what Pitch collects when you use the service, why, and what control you have over it. It covers the account, brand, and photo data you give us directly, and how that data moves through the third-party AI providers we use to generate your ads and videos.

1. What we collect

Directly from you:

Account info: email address and authentication data (handled via Supabase Auth)
Brand kit content: brand name, colors, fonts, logo, product photos, and any reference ads you upload
Avatar/character photos: photos you upload to build a reusable AI persona or likeness
Prompts and instructions you type when generating creative
Generated output: the ads, carousels, and videos Pitch produces for you, stored in your library

Automatically:

Basic usage data (which tools you use, generation counts against your free-tier limit, timestamps)
Standard technical data (IP address, browser/device type) collected by our hosting and error-monitoring infrastructure

We don't buy data about you from third parties, and we don't run third-party ad trackers on the app itself.

2. Photos and likeness data specifically

Building an avatar or generating UGC-style content with a real person's likeness means processing a photo of a face. We treat this as sensitive data: it's used only to generate the creative you request, it's not used to train our own models, and it's not shared with anyone beyond the AI providers listed below that perform the actual generation. If you delete an avatar or your account, we delete the associated source photos and derived data from our systems (see Section 6).

Only upload a photo of yourself, or of someone else who has explicitly agreed to have an AI likeness generated from their photo. Some jurisdictions (for example, Illinois's Biometric Information Privacy Act) impose specific rules on collecting facial-geometry data; we don't claim compliance with every such law in every jurisdiction, so if you're building a product or workflow around this feature for other people, get your own legal advice on what consent you need to collect from them.

3. How we use what we collect

To generate the ads, videos, and creative you ask for
To operate your account (login, free-tier limits, your saved brand kits and generation library)
To fix bugs and understand which tools are actually used, so we build the right things next
To email you about your account or material changes to the service (no marketing spam)

4. Who we share it with

Pitch is built on infrastructure and AI providers we don't operate ourselves. Data flows to these categories of third parties as part of normal operation:

Supabase — database, authentication, and file storage for your account, brand kits, and library
AI generation providers — currently including OpenAI, Anthropic, and Google (Gemini), plus specialized image/video/voice model vendors — receive prompts, brand assets, and (where relevant) avatar photos to produce your generation
Hosting and infrastructure providers (e.g. Vercel) that run the application and handle standard web traffic logs

We don't sell your data to anyone, and we don't share it for a third party's own advertising purposes. Each provider above processes data under its own privacy terms; we choose providers whose terms state they don't use API-submitted content to train their own models where that commitment is available.

5. Cookies and analytics

We use essential cookies to keep you logged in and to remember basic preferences (like light/dark mode). If we add product analytics in the future to understand usage patterns, we'll update this section rather than adding it silently.

6. Data retention and deletion

We keep your account data, brand kits, and generation library for as long as your account is active. You can delete individual generations, avatars, or brand kits from within the app. If you delete your account, we delete your stored content — including uploaded photos and generated output — within a reasonable period, except where we're required to retain limited records for legal, security, or fraud-prevention reasons.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can exercise most of these directly in the app (editing your brand kit, deleting content, deleting your account) or by contacting us at the address below.

8. Children

Pitch is not directed at, and is not intended for use by, anyone under 18. We don't knowingly collect data from children.

9. Security

We rely on our infrastructure providers' standard security practices (encryption in transit, access-controlled storage) and restrict internal access to your data to what's needed to operate and support the service. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Changes to this policy

We may update this policy as the product changes, particularly once paid plans and any new data-processing features launch. We'll post the update here with a new effective date.

11. Contact

Questions about this policy, or want to exercise a data right? Reach us at hello@pitchapp.ai [replace with the real support address for the live domain].