Privacy Policy

1. What We Collect

When you create an account: your email address, and any profile information you provide (handle, bio, avatar).

When you create a Pitch: the content of your Pitch (title, description, disclosures, video URL, CTA URL, pricing), which is publicly visible.

When you browse: pages viewed, pitches clicked, and CTA clicks — collected via Matomo (self-hosted, privacy-first analytics). We do not use third-party tracking or advertising networks.

When you vote: your hype/reality scores are recorded. If logged in, associated with your account; if not, associated with an anonymous browser hash.

2. How We Use It

• To provide the Platform and publish your Pitch
• To process payments via Stripe (we never see your card details)
• To send transactional emails (magic links, listing expiry notices) via Mautic
• To detect and prevent fraud, Terms violations, or illegal content
• To generate anonymized, aggregate platform statistics

3. What We Do NOT Sell

We do not sell, rent, or share your personal data with advertisers or third parties for their own marketing purposes.

4. Data Retention

Your account data is retained as long as your account is active. You may request deletion at any time — see Section 6. Pitch content (public disclosures) may be retained for legal/compliance purposes after account deletion.

Conversion events are retained for 12 months. Audit logs are retained for 5 years per our data retention policy.

5. Cookies

We use a single session cookie to maintain your logged-in state. No advertising cookies, no tracking cookies, no third-party cookies.

6. Your Rights (GDPR/CCPA)

If you are a resident of the EU/EEA or California:

• Access: Request a copy of all data we hold about you
• Correction: Update your profile at any time via your dashboard
• Deletion: Request account deletion — we will delete all personal data within 30 days
• Portability: Export your data as JSON at any time
• Object: Object to processing of your data for specific purposes

To exercise any of these rights, email privacy@honestpitches.com.

7. Data Security

We use industry-standard encryption (TLS 1.3), Appwrite's role-based access controls, and immutable audit logging. No security measure is perfect — but we are committed to best efforts.

8. Data Breach Notification

In the event of a data breach that affects your rights, we will notify you via email within 72 hours of discovery, as required by applicable law.

9. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

10. Contact

Privacy questions: privacy@honestpitches.com