Privacy Policy

This policy explains what personal data PitchTwin (“we”, “us”) collects when you use pitchtwin.ai, our dashboard and our API (together, the “Service”), why we collect it, and what rights you have. If you have questions, write to pitchtwinsupport@gmail.com.

1. Two kinds of data

Account data is data about you as our customer. We decide how it is used, so we act as the data controller for it.

Customer content is what you send through the API: videos of people, voice recordings, and the scripts to be spoken. We process customer content only on your instructions, to deliver the Service, so we act as a data processor for it. You are responsible for having a lawful basis, including the consent of every person who appears or is heard in that content.

2. What we collect

• Account details: email address and, if you sign in with Google, your name and profile picture as provided by Google.
• Billing details: purchase history and token balance. Card payments are handled by Stripe; we never see or store your full card number.
• API usage: request logs (time, endpoint, status, latency, tokens used, IP address) and the API keys you create. We store only a one-way hash of each key.
• Customer content: source videos, voice samples, scripts and the videos we generate from them.
• Technical data: cookies strictly needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

3. Why we use it

• To create and secure your account and let you sign in (performance of a contract).
• To generate videos you request through the API (performance of a contract).
• To charge for token packs and keep accounting records (performance of a contract; legal obligation).
• To show you usage statistics and logs, prevent abuse and keep the Service reliable (legitimate interests).
• To send service messages such as receipts and security notices. We do not send marketing email without your consent.

We do not sell personal data, and we do not use customer content to train models shared with other customers.

4. Who we share it with

We use a small number of providers that process data on our behalf, under contracts that protect it:

• Supabase: authentication and database
• Vercel: website and API hosting
• Stripe: payments
• Google: sign-in with Google, if you choose it
• Cloud GPU and text-to-speech providers: to generate video and speech from customer content

Some of these providers are located outside the European Economic Area. Where that is the case, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses. We may also disclose data if required by law.

5. How long we keep it

• Account data: for as long as your account exists.
• Request logs: up to 12 months.
• Customer content: until you delete it or close your account.
• Billing records: as long as tax and accounting law requires, even after account deletion.

You can delete your account at any time in Dashboard → Settings. This removes your account, API keys, logs and generations, except records we must keep by law.

6. Your rights

Depending on where you live, including under the EU/UK GDPR, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent. To exercise these rights, email pitchtwinsupport@gmail.com. You can also complain to your local data protection authority.

If you are a person who appears in content a customer sent us, please contact that customer first. We will help them handle your request, and you can also write to us directly.

7. Security

We use encryption in transit, access controls and row-level isolation between accounts, and we store API keys only as hashes. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

8. Children

The Service is for businesses and is not directed to anyone under 18.

9. Changes

We may update this policy. If the changes are significant, we will notify account holders by email before they take effect.

10. Contact

Questions or requests: pitchtwinsupport@gmail.com.