Legal
Privacy policy
Last updated August 22, 2026
This policy explains what Pitchscribe collects when you use the site, the demo and the workspace, why we collect it, how long we keep it and the rights you can exercise at any time.
1. Data controller
- Controller
- Pitchscribe SAS
- Country of establishment
- Paris, France
- Founded
- 2026
- Privacy contact
- contact@pitchscribe.site
Write to contact@pitchscribe.site for any question about this policy or about your personal data. We answer within one business day.
2. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account data (email, hashed password, display name, language) | Create and secure your account, sign you in, send verification email | Performance of a contract (Art. 6(1)(b) GDPR) |
| Briefs and generated proposals | Run the proposal engine and store your history so you can edit and export | Performance of a contract (Art. 6(1)(b)) |
| Usage counters (proposals generated per month) | Enforce plan quotas fairly | Performance of a contract (Art. 6(1)(b)) |
| Demo briefs and truncated IP address | Run the public demo and prevent abuse through rate limiting | Legitimate interest in keeping a free service available (Art. 6(1)(f)) |
| Leads (email, source, locale, date) | Newsletter, contact replies, integration requests | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Technical logs (errors, timestamps, request metadata) | Diagnose failures and protect the service | Legitimate interest in service security (Art. 6(1)(f)) |
We do not sell personal data, we do not build advertising profiles, and we do not use your proposals to train models.
3. Processors and transfers
- Hosting, database and authentication: our managed cloud infrastructure provider.
- AI generation: OpenAI, which processes the brief you submit to produce a proposal draft. Content sent through the API is not used for model training.
- Email delivery: transactional email provider for verification and replies.
Where a processor is located outside the EU or the EEA, transfers rely on Standard Contractual Clauses or an adequacy decision.
4. Retention
| Data | Retention |
|---|---|
| Account data | For the life of the account, then 30 days after deletion |
| Proposals and briefs | Until you delete them, or 30 days after account deletion |
| Demo briefs | 24 hours |
| Rate-limit records (truncated IP) | 1 hour |
| Leads and newsletter subscribers | Until you unsubscribe, then 12 months maximum |
| Technical logs | 12 months |
5. Your rights
Under the GDPR you may exercise the following rights by emailing contact@pitchscribe.site. We reply within one month.
- Right of access — obtain a copy of the data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — have your data deleted when there is no overriding reason to keep it.
- Right to restriction of processing — freeze processing while a claim is examined.
- Right to data portability — receive your proposals and account data in a structured, machine-readable format.
- Right to object — object to processing based on our legitimate interests.
- Right not to be subject to a solely automated decision producing legal effects — the proposal engine drafts text, it makes no decision about you.
- Right to withdraw consent at any time, without affecting processing carried out before withdrawal.
6. Security measures
- Encryption in transit (TLS) and at rest for the database.
- Row-level security: each row of your proposal history is readable only by your authenticated account.
- Passwords stored as salted hashes, never in clear text.
- Least-privilege access to production data, restricted to the founder-operator.
- Automated backups with restore testing.
- Server-side validation and rate limiting on public endpoints.
7. Complaints
If you believe your data is processed unlawfully, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr — or with the supervisory authority of your country of residence.
8. Changes
We update this policy when the product changes. The date at the top always reflects the current version, and material changes are announced by email to account holders.
These documents are practical templates written for Pitchscribe's current product, not legal advice. Have a qualified lawyer review them before charging customers.
Pitchscribe SAS · Paris, France · contact@pitchscribe.site