Draft pending legal review (owner decision P-14). This text is not final until counsel has reviewed it.
Privacy notice
What PitchRep collects, why, and which service providers handle it.
Who we are
The legal entity that operates PitchRep, its registered address and its contact details are pending legal review.
What we collect
- Account
- Your email address and an account identifier. Sign-in codes are sent to your email.
- Pitches
- The content you publish about your business, and the founder profile attached to it.
- Placements and bids
- Bid amounts, the pitch they refer to, the week, and the outcome of the placement.
- Payments
- Stripe identifiers for payments, holds and subscriptions. Card numbers are held by Stripe, not by PitchRep.
- Security data
- The IP address of a request, used for rate limiting and abuse checks, and the result of bot checks.
- Error reports
- When something breaks, an error report is sent to Sentry. Emails, IP addresses, authorisation headers, cookies, request bodies and Stripe identifiers are removed before it leaves our systems.
- Analytics
- Page views, scrolling, engagement and form activity. Only collected after you accept analytics.
Why we use it
- To sign you in and keep your session secure.
- To run the pitch board, the weekly auction and boosts.
- To prevent abuse and to keep the service available.
- To find and fix errors.
- To understand how the site is used, after you accept analytics.
Who handles your data
- Swfte account service
- Runs sign-in and sends sign-in codes by email. Identity is provided by WorkOS through this service. After you accept analytics, the Swfte analytics ingest receives analytics events.
- WorkOS
- Identity provider, reached through the Swfte account service.
- Stripe
- Payments, bid holds, captures, refunds and subscriptions.
- Amazon Web Services
- Storage of uploaded media (S3), functions (Lambda) and media delivery (CloudFront).
- Cloudflare
- Turnstile bot checks on sign-in and bidding. Web Analytics, after you accept analytics.
- Upstash
- Rate-limit counters, which are keyed on IP address and account.
- Sentry
- Error reporting, with personal data removed as described above.
How long we keep data
Retention periods for each category are pending legal review.
Your choices and rights
You can change your analytics choice at any time on the cookie policy page. Your other rights, and how to exercise them, depend on where you live and are pending legal review.
Transfers and changes
Where the processors above process data, and the safeguards for that, are pending legal review. We will update this notice when the processors or their purposes change.