Legal

Privacy Policy

Last updated: 23 March 2026  ·  Effective: 23 March 2026

1. Who we are

PitchOS is operated as an independent software product. The data controller responsible for your personal data is the founder and operator of PitchOS, contactable at support@pitchospro.com.

For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for personal data collected through the PitchOS iOS app and pitchospro.com.

2. What data we collect

Data you provide directly

Data collected automatically

Voice data

When you use the voice note capture feature in Post-Call Summary, your device's microphone is used to transcribe speech to text. On iOS 17 and above, this transcription is performed on-device using Apple's Speech framework — audio is not transmitted to our servers. On older iOS versions, Apple may process audio through its servers per Apple's own privacy policy. We do not store raw audio recordings.

3. How we use your data

• Providing the service: Your ICP configuration and deal context are sent to the Claude API (operated by Anthropic) to generate AI outputs. Only the minimum necessary context is included in each API call.
• Improving the app: Anonymised usage analytics help us understand which features are valuable and identify friction points. No personally identifiable information is used for this purpose.
• Account management: Your email address is used for authentication, account recovery, and service communications.
• Billing: Subscription management is handled by RevenueCat, which interfaces with the Apple App Store. We do not process or store payment card details.
• Support: When you contact support, we use the information you provide to resolve your issue.

4. AI processing — Anthropic / Claude API

AI generations in PitchOS are processed by the Claude API, operated by Anthropic PBC. When you generate a brief, questions, objection response, summary, or email, the relevant context (your ICP configuration, deal details, and your input) is sent to Anthropic's servers for processing.

Anthropic does not use API inputs to train their models. API data is subject to Anthropic's API data usage policy, available at anthropic.com/legal/privacy.

You should not enter sensitive personal data about third parties (such as private individuals' personal details) into PitchOS beyond what is necessary for professional sales activity.

5. Data storage and security

Your data is stored in Supabase, a managed database platform. All data is encrypted in transit (TLS) and at rest. Row-level security policies ensure your data is only accessible to your authenticated account.

A copy of your ICP configuration and deal data is also stored locally on your device using iOS SwiftData. This enables offline access. This local data is protected by iOS device encryption and is not accessible to other apps.

We take reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet is 100% secure — if you have concerns, contact us at support@pitchospro.com.

6. Data sharing and third parties

We do not sell your personal data. We share data only with the following third-party processors, under appropriate data processing agreements:

Where data is transferred to the United States, we rely on Standard Contractual Clauses (SCCs) or equivalent mechanisms to ensure adequate protection under UK GDPR.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data and deal data will be deleted from our systems within 30 days, except where we are required to retain it for legal or financial compliance purposes (typically 7 years for financial records).

Anonymised analytics data (which cannot be linked to you) may be retained indefinitely.

8. Your rights under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can correct inaccurate data — most data can be updated directly in the app's Settings.
• Right to erasure: You can request deletion of your account and associated data.
• Right to restriction: You can ask us to restrict processing of your data in certain circumstances.
• Right to data portability: You can request your data in a machine-readable format.
• Right to object: You can object to processing based on legitimate interests.
• Rights related to automated decision-making: PitchOS does not make automated decisions with legal or significant effects about you.

To exercise any of these rights, email support@pitchospro.com with the subject "Data request". We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies and tracking

The PitchOS iOS app does not use cookies. The pitchospro.com website uses no third-party tracking cookies. We use privacy-respecting analytics (PostHog, self-hosted with anonymisation) to understand website traffic. No advertising pixels or third-party tracking scripts are present on this website.

10. Children's privacy

PitchOS is designed for professional use by adults. We do not knowingly collect data from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us at support@pitchospro.com and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the email address associated with your account and update the "Last updated" date at the top of this page. Continued use of PitchOS after changes are posted constitutes acceptance of the updated policy.

12. Contact us