Privacy Policy
Last updated: February 17, 2026
1. Introduction
MyPitchFlow (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at mypitchflow.com (the “Service”).
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, and authentication credentials. If you sign in via Google, we receive your basic profile information from Google.
Content You Provide
We store the content you upload or create in the Service, including proposals, questionnaires, knowledge center documents, and any text you enter. This content is necessary to provide the Service.
Google Drive Access
If you connect your Google Drive, we request read-only access to import files you explicitly select. We only access files you choose to import and do not browse or index your Drive contents beyond the folder navigation you initiate.
Usage Data
With your consent, we collect usage analytics (via PostHog, hosted in the EU) to understand how the Service is used and improve the experience. This includes page views, feature usage, and session information. When you are logged in, your user ID is linked to analytics data to provide a better experience. You can opt out of analytics at any time via the cookie consent banner.
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To process your content through AI models to generate proposals and suggestions
- To authenticate your identity and manage your account
- To communicate with you about the Service (e.g., support, updates)
- To detect and prevent fraud or abuse
4. AI Processing
Your content is processed by third-party AI models (Anthropic) to generate proposals, answer questions, and provide suggestions. Your content is sent to these services only as needed to fulfill your requests. We do not use your content to train AI models.
5. Data Storage and Security
Your data is stored securely using Supabase infrastructure, which provides encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.
6. Data Sharing
We do not sell your personal information. We share data only with:
- Service providers: Supabase (hosting/database), Anthropic (AI processing), Vercel (hosting), Stripe (payments)
- Legal requirements: When required by law or to protect our rights
7. Your Rights
You have the right to:
- Access and download your data
- Correct inaccurate information
- Delete your account and associated data
- Withdraw consent for optional data processing
- Revoke Google Drive access at any time through your Google Account settings
8. Cookies
We use essential cookies for authentication, session management, and language preferences. Analytics cookies (PostHog) are only activated after you give explicit consent via the cookie banner shown on your first visit. You can change your cookie preferences at any time by clearing your browser's local storage for this site, which will re-display the consent banner.
9. Data Retention
We retain your data for as long as your account is active. When you request account deletion, your account is scheduled for permanent deletion after a 30-day grace period. During this period, you can log back in and cancel the deletion to recover your account. After 30 days, all your personal data and content are permanently deleted, except where retention is required by law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at contact@mypitchflow.com.