Privacy Notice
Last updated: 18 June 2026
1. Who we are
PitchForge ("we", "us") operates the PitchForge web application. We act as the data controller for the personal data described in this notice.
2. What we collect and why
- Account data — name, email, password hash, OAuth identifiers. Used to create and secure your account.
- Pitch content — startup details, pitch transcripts, uploaded decks. Used to generate AI feedback and to show you your history.
- Support communications — messages you send us. Used to respond.
- Usage and device data — pages visited, feature usage, IP address, browser/device identifiers. Used for security, fraud prevention, and product improvement.
3. Legal basis
We process your data to perform our contract with you (provide the Service), on the basis of our legitimate interests (security, product improvement), and where required, with your consent (e.g. optional analytics or marketing).
4. Who we share data with
- Paddle — our Merchant of Record. Paddle handles checkout, subscription billing, tax compliance, invoicing, and refund processing. See Paddle's privacy policy.
- Supabase — database and authentication hosting.
- AI model providers (Google, Anthropic, OpenAI via Lovable AI Gateway) — process pitch text to generate responses. Inputs are not used to train their models under our agreements.
- Hosting & infrastructure — Lovable / Cloudflare for application hosting and CDN.
- Professional advisers and authorities — when required by law.
5. International transfers
Some of our service providers are located outside India, the UK, and the EEA. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.
6. Retention
We keep account and pitch data for as long as your account is active, and for up to 90 days after deletion (backups cycle out within this window). Billing records are retained as required by tax law (typically 7 years).
7. Your rights
Depending on your location you may have the right to access, correct, delete, restrict, or port your data, to object to processing, to withdraw consent, and to complain to your data protection authority. To exercise these rights, email privacy@fundforge.app. We respond within 30 days.
8. Security
We use industry-standard technical and organizational measures including TLS in transit, encryption at rest, scoped access controls, and row-level security on all user data.
9. Cookies
We use essential cookies and local storage for authentication and session management. We do not currently use third-party advertising cookies. If we add analytics cookies in future we will request your consent first.
10. Children
The Service is not intended for users under 18.
11. Changes
We may update this notice; material changes will be notified in-product or by email.
12. Contact
Privacy questions? privacy@fundforge.app.