Privacy Policy

This Privacy Policy explains how LinkPitch ("we", "us", "our") collects, uses, and protects personal data when you use our service at linkpitch.agency. We are committed to handling your data lawfully, transparently, and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The data controller for personal data processed via LinkPitch is LinkPitch.agency, based in Blackburn, United Kingdom. You can contact us at hello@linkpitch.agency.

2. What data we collect

• Account data: your name and email address, provided when you sign up or sign in.
• Customer content: client and prospect information you enter into the app (e.g. client descriptions, prospect site details, draft pitches, notes, outcomes).
• Billing data: if you subscribe to a paid plan, Stripe collects and processes your payment details on our behalf. We do not store full card numbers.
• Basic usage data: limited technical logs (e.g. request times, error logs, plan usage counters) needed to operate the service.

3. How we use your data and lawful bases

• To provide the service (account creation, authentication, storing your clients/prospects, drafting pitches) — lawful basis: performance of a contract.
• To process payments and manage subscriptions — lawful basis: performance of a contract.
• To keep the service secure and operational (abuse prevention, rate limiting, error monitoring) — lawful basis: legitimate interests.
• To comply with legal obligations (e.g. tax, accounting) — lawful basis: legal obligation.

4. Processors and sub-processors

We use the following third-party providers to operate LinkPitch:

• Supabase — database and authentication (hosting of account and customer content data).
• Stripe — payment processing for paid subscriptions.
• Google (Gemini) via our AI gateway — generation of pitch drafts. Prompts you submit are sent to this provider to produce a response.

Each provider acts as a processor or sub-processor and is bound by their own data protection terms. Some providers may transfer data outside the UK; where this happens, transfers are protected by appropriate safeguards (such as Standard Contractual Clauses).

5. Data retention

We retain account and customer content for as long as your account remains active. If you delete your account, we delete or anonymise associated personal data within a reasonable period, except where we are required to retain certain records (e.g. billing/tax records) for legal reasons.

6. Your rights under UK GDPR

You have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• request portability of your data in a machine-readable format;
• object to or restrict certain processing;
• lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email hello@linkpitch.agency.

7. Cookies

LinkPitch uses a small number of cookies, primarily for authentication. See our Cookie Policy for details.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), row-level security in our database, and access controls. No system is completely secure; please use a strong, unique password.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision.