Privacy Policy

What we collect and store

• Email address: collected at sign-up to create your account and send a verification email.
• Full name: collected at sign-up and stored in your profile.
• Date of birth: collected at sign-up. Used to verify you meet the minimum age requirement.
• Phone number (optional): if provided at sign-up, stored in your profile.
• Job title (optional): if provided at sign-up, stored in your profile.
• Session data: for each practice session, we store the full conversation transcript, your scores, and your feedback report. This is tied to your account and retained while your account is active. We use this to let you review past sessions, to verify what happened in a session if a technical issue affects your credits (so we can resolve it fairly), and to improve the product.
• Context you provide before a session: details you type in before starting (such as company, role, or industry) are stored alongside your session data.

What we do NOT store

• Raw CV file content: the document you upload is processed to extract relevant details and the file itself is not saved. The extracted summary used to personalise your session is not saved to your session record either, only the manual details you type in (above) and a record that a document was uploaded.
• Audio recordings: voice input is processed via the Web Speech API in your browser and is never sent to or stored on our servers.

On your device

To protect against interruptions like a locked screen or accidental reload, your current session is also saved in your browser's local storage while it's in progress. This is separate from the server-side copy described above.

How we use your data

Your data is used to personalise AI practice sessions and maintain your account. We do not sell your data or share it with third parties for marketing purposes.

Cookies and tracking

PitchRoom does not use cookies for advertising or marketing tracking, and we do not use Google Analytics or similar tracking pixels. We use Vercel Analytics in production to understand aggregate site usage (such as page views); this is cookieless and does not track you individually across sites. We use Sentry to catch and diagnose errors, which on a small sample of sessions (or automatically when an error occurs) records a replay of on-screen activity to help us fix bugs; this data is used only for debugging and is never used for marketing or shared with advertisers. Your account session itself is kept in your browser's local storage, not in cookies.

Third-party services

• Supabase: authentication and database. Your account data is stored on Supabase infrastructure.
• Anthropic: AI session processing. Session prompts are sent to Anthropic's API for generating AI responses.
• ElevenLabs: voice synthesis, if you enable voice features. Text is sent to ElevenLabs to generate spoken audio.
• Vercel: hosting, and privacy-friendly, cookieless analytics of aggregate site usage.
• Sentry: error monitoring and diagnostics, including limited on-screen session replay used only to fix bugs.

Each third-party service operates under its own privacy policy. We only share the minimum data necessary to provide the feature.

International data transfers

Your data may be processed on servers located outside your country, including infrastructure operated by Supabase, Anthropic, ElevenLabs, Vercel, and Sentry. Where this involves a transfer of personal data outside your jurisdiction, we rely on the safeguards provided by these providers, such as standard contractual clauses or equivalent mechanisms, to protect your data.

Data retention

Account data is retained while your account is active. You can request deletion of your account and all associated data at any time by emailing us. We will process deletion requests within 30 days.

Your privacy rights

Depending on your location, you may have the right to access, correct (rectify), delete (erase), restrict, or receive a copy of your personal data (data portability), and to object to certain processing. We apply this same set of rights to all users, regardless of location. To exercise any of these rights, email us at pitchroomltd@gmail.com and we will respond within 30 days.

Children's privacy

PitchRoom is not intended for use by anyone under 18. We do not knowingly collect data from children.

Data breach notification

In the event of a data breach affecting your personal information, we will notify affected users without undue delay, in accordance with applicable law.

Contact

For privacy questions or deletion requests, email us at pitchroomltd@gmail.com.