Pitch AideBack to home

Legal

Privacy Policy

Last updated: 13 July 2026

This is a general information document and not legal advice.

Who we are

Pitch Aide is an AI-powered proposal platform. If you have any questions about this policy or how your data is handled, contact us at privacy@pitchaide.dev.

What we collect

Account holders (senders). Your email address and authentication details (managed through our authentication provider), and the content you choose to upload — proposals and PDFs, generated slide images, knowledge-base text, organisation and client knowledge bases, pitch status notes, videos, suggested prompts and bookmarks.

Proposal viewers. The name you enter, which slides you view, time spent per slide, links you click, the questions you ask the in-proposal assistant and its responses, and any comments you leave. This information is only collected after you give explicit consent on the viewer's consent screen.

Technical. Your IP address is used transiently for rate-limiting and abuse prevention. It is not stored long-term alongside viewing data.

Lawful bases (UK GDPR)

  • Consent — for viewer engagement data, recorded only after you agree on the on-screen consent.
  • Performance of a contract / legitimate interests — to operate sender accounts and provide the service.
  • Legitimate interests — to keep the service secure and prevent abuse.

Where your data is stored

Data is stored in the European Union (Ireland) on infrastructure provided by Supabase, running on Amazon Web Services (AWS). Data is encrypted in transit using HTTPS/TLS and at rest, and access is isolated per account.

AI processing

The in-proposal assistant's answers and the prompt-generation feature are produced by a third-party large language model (Google Gemini, accessed via the Lovable AI Gateway). Relevant proposal content and questions are sent to this provider at the time a response is generated, and processed under the provider's terms. This content is not used by Pitch Aide to train its own models.

Sub-processors

  • Supabase, running on Amazon Web Services (AWS): hosting, database, file storage and authentication.
  • Google — large language model inference via the Lovable AI Gateway.
  • Our email delivery provider — sending account and notification emails.
  • Lovable platform analytics — aggregate product-usage analytics.

Retention & deletion

Senders control how long viewer session data is kept per proposal. The default is 90 days, after which the data is automatically purged. Senders can also delete a proposal's session data on demand. Deleting a proposal removes its associated data. Account data is kept for as long as the account is active.

Your rights

If you are in the UK or EU, you have the right to access, rectify, erase, restrict, port or object to processing of your personal data, and to withdraw consent at any time. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local data protection authority. To exercise any of these rights, email privacy@pitchaide.dev.

Changes to this policy

This policy may be updated from time to time. The "Last updated" date at the top reflects the latest version.