Privacy Policy

1. What We Collect

When you create an account: your email address, and any profile information you provide (handle, bio, avatar).

When you create a Pitch: the content of your Pitch (title, description, disclosures, video URL, CTA URL, pricing), which is publicly visible.

When you browse: pages viewed, pitches clicked, and CTA clicks are collected via Matomo (self-hosted, privacy-first analytics). We do not use third-party tracking or advertising networks.

When you vote: your hype/reality scores are recorded. If logged in, associated with your account; if not, associated with an anonymous browser hash.

Audience feedback (section-anchored timed questions): When a Pitch includes audience questions, your choice (e.g. yes/no, multiple choice, or five-face rating) and, where the question enables a free-text expansion, the text you type into the expansion field, are recorded. Every response is tagged with an anonymous browser hash (a non-reversible one-way hash of your user-agent string) so a Pitcher can see distribution, count, and excerpts without knowing who you are. We never log your IP address, browser fingerprint, or any cross-site identifier alongside an audience response. Pitchers see a warning if a question is anchored to a video timestamp (so the timing of your answer could correlate with the moment you watched), but the system does not block them from writing such questions; the choice is yours whether to answer.

2. How We Use It

• To provide the Platform and publish your Pitch
• To process payments via Stripe (we never see your card details)
• To send sign-in magic links (authentication)
• To send marketing and product lifecycle emails (welcome, listing expiry notices, verified tier) via Mautic when you opt in to those programs
• To detect and prevent fraud, Terms violations, or illegal content
• To generate anonymized, aggregate platform statistics

3. What We Do NOT Sell

We do not sell, rent, or share your personal data with advertisers or third parties for their own marketing purposes.

4. Data Retention

Your account data is retained as long as your account is active. You may request deletion at any time (see Section 6). Pitch content (public disclosures) may be retained for legal/compliance purposes after account deletion.

Conversion events are retained for 12 months. Audit logs are retained for 5 years per our data retention policy.

Audience feedback responses (your choice + optional free-text expansion) are retained for the life of the Pitch. The anonymous browser hash rotates when you clear your browser's user-agent or switch browsers. The hash is one-way: we cannot recover your identity from it.

5. Cookies

We use a single session cookie to maintain your logged-in state. No advertising cookies, no tracking cookies, no third-party cookies.

6. Your Rights (GDPR/CCPA)

If you are a resident of the EU/EEA or California:

• Access: Request a copy of all data we hold about you
• Correction: Update your profile at any time via your dashboard
• Deletion: Request account deletion. We will delete all personal data within 30 days.
• Portability: Export your data as JSON at any time
• Object: Object to processing of your data for specific purposes

To exercise any of these rights, email privacy@HonestPitches.com.

7. Data Security

We use industry-standard encryption (TLS 1.3), role-based access controls, and immutable audit logging. No security measure is perfect, but we are committed to best efforts.

8. Data Breach Notification

In the event of a data breach that affects your rights, we will notify you via email within 72 hours of discovery, as required by applicable law.

9. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

10. Contact

Privacy questions: privacy@HonestPitches.com