Privacy Policy

1. Who we are

PitchPage is the service available at https://pitchpage.pro. It is operated by Shafqat Shadaab, an individual doing business as a sole proprietor in New York, United States (“we”, “us”). We decide how and why the personal information described in this policy is used, which makes us its “controller” under laws such as the GDPR.

For any privacy question or request, email support@pitchpage.pro. Our postal address is 3043 33rd St Apt 3, Astoria, NY 11102, United States. Our Terms of Service explain the rules for using PitchPage.

2. Information we collect

Account information

When you create an account with an email address, we collect that address and your password. Passwords are stored by our authentication provider as a one-way hash, never in readable form. If you choose Continue with Google, Google shares your email address, name, profile picture and Google account identifier with us, and we use that picture as your profile image until you add your own.

We also keep records about your account: when it was created and last signed in, your trial start and end dates, and your plan. While you are signed in, our authentication provider stores the IP address and browser information (user agent) associated with your session.

Profile information you add

In Settings you can add a display name, a company name and a profile image. Uploaded images are stored in our file storage at a public web address so that they can appear on your published pages.

Page content

Everything you enter to build a page: its title, its address (for example pitchpage.pro/your-page), the greeting, the video and booking calendar links, the optional button link and label, color and background choices, whether the PitchPage badge is shown, and the page’s search visibility. When you change a page’s address, we keep the old address so that it can redirect to the new one.

Videos you upload or record

Where native video is available on your account, you can upload a video file or record one in the page editor instead of linking to Loom or YouTube. The video file goes from your browser straight to Cloudflare, which stores it and delivers it to viewers. We store the video’s identifier at Cloudflare, its length, dimensions and size, its processing status and when it was created, and which of your pages uses it.

Recording uses your camera and microphone only after you choose Record video and allow access in your browser, and only on the page editor. While you record and review, the recording stays in your browser; nothing is sent until you choose Use this video, and a recording you discard is never sent. A camera recording stops when you leave the tab.

On a computer, you can record your screen instead. Your browser asks you each time to choose a screen, window or tab, and only what you choose is recorded: with your microphone unless you turn it off, with your camera in a corner if you choose Screen + camera, and with the sound of the shared tab or screen only if you turn that on and your browser can share it. Everything visible in what you share, including notifications, becomes part of the recording, so choose it with care. A screen recording continues while you work in what you shared, and ends when you stop it, stop sharing, reach five minutes or leave the editor. What you share is not sent to us or analyzed while you record; only a recording you choose to use is uploaded, as described above.

Billing information

Pro subscriptions are sold by Lemon Squeezy, which acts as merchant of record. Lemon Squeezy collects your payment details, billing name, email and address under its own privacy policy; we never receive your full card number. To connect a purchase to your account, the checkout link carries your PitchPage account identifier together with a security signature, which Lemon Squeezy sends back to us.

We store your Lemon Squeezy customer and subscription identifiers, your subscription status and the time of its latest update, and whether Pro is active. Lemon Squeezy’s notifications to us also contain details such as the purchaser’s name and email and the brand and last four digits of the card; we do not store those.

Messages you send us

If you email us, we keep your message and our reply so that we can help you.

Usage and technical information

When anyone loads a page on pitchpage.pro — including a page published by a PitchPage user — our hosting provider receives the visitor’s IP address and browser information in order to deliver the page and protect the service. If you accept analytics, we also use Vercel Web Analytics and HeyCatch, described in section 7.

Product analytics, with your consent

If you accept analytics and sign in, we share with HeyCatch your PitchPage account identifier, email address, display name (if you added one), plan and sign-up date, and we report when you complete sign-up, create a page, and start, cancel, resume or end a Pro subscription. Section 7 explains this in full.

Visitors to published pages

Viewing a published page does not require an account, and PitchPage does not ask visitors for any information. If a visitor accepts analytics, their visit is measured by Vercel Web Analytics and HeyCatch. Embedded videos and calendars load from their own providers, a video uploaded or recorded in PitchPage plays from Cloudflare, and anything a visitor enters into an embedded booking calendar goes to that calendar provider, not to PitchPage (section 6).

3. How we use information

• Providing the service — creating your account, signing you in, saving and publishing your pages, and showing them to the people you share them with.
• Managing your trial and subscription — tracking your trial dates and page allowance, connecting a purchase to the right account, and applying subscription changes reported by Lemon Squeezy.
• Account emails — messages such as password-reset links, sent through our authentication provider. We may also send one email when your free trial ends, explaining how to subscribe. We do not send newsletters or marketing emails.
• Support — answering your emails and requests.
• Security — protecting accounts, preventing misuse of the service and enforcing our Terms.
• Understanding usage — with your consent, statistics from Vercel Web Analytics and HeyCatch about how pitchpage.pro is used and, for signed-in customers, how their account uses PitchPage.
• Legal obligations — complying with applicable law and responding to lawful requests.

We do not sell your personal information, and we do not use it for advertising.

Where data protection laws such as the GDPR apply, we rely on these legal bases: performing our contract with you (providing the service and your subscription), our legitimate interests (security, support and improving PitchPage), compliance with legal obligations, and your consent — for analytics, and wherever else the law requires it.

4. Published pages: Public and Unlisted

Every page you create is published and can be opened by anyone who has its link. PitchPage has no private or password-protected pages, so do not put confidential information on a page.

Each page also has a search visibility setting. New pages start as Unlisted:

• Unlisted — the page works normally at its link, but it is left out of our sitemap and served with a noindex, nofollow instruction asking search engines not to list it.
• Public — the page is also included in our sitemap at /sitemap.xml, so search engines can discover it.

Unlisted does not mean private. It controls discoverability, not access: anyone with the link can open the page, the link can be forwarded, and noindex is a request that well-behaved search engines honor rather than something we can enforce.

A published page shows your display name, company name and profile image, if you have added them. Your email address and billing details are never shown on a page.

To take a page offline, delete it from your dashboard. Deleting works at any time, including after your trial has ended; changing a page, including its search visibility, requires an active trial or subscription. Copies that others have already made, such as screenshots or search engine caches, are outside our control.

5. Service providers

These companies process information on our behalf to run PitchPage:

• Vercel — hosts the website and application, and provides Vercel Web Analytics (only with your consent).
• Supabase — our database, authentication (including Google sign-in) and file storage for profile images. It also sends account emails such as password-reset links.
• Cloudflare — stores videos uploaded or recorded in PitchPage and delivers them to viewers (Cloudflare Stream).
• Lemon Squeezy — merchant of record for Pro subscriptions: checkout, payments, tax, receipts and the customer portal for managing a subscription.
• HeyCatch (HeyCatch, Inc.) — product analytics, only for visitors who accept analytics. HeyCatch uses its own service providers, including PostHog for analytics infrastructure; see its list of subprocessors.
• Google — only if you choose Continue with Google, to verify your identity. Your Google account is governed by Google’s own privacy policy.

We may also disclose information when the law requires it, to protect the rights, safety or property of our users or others, or as part of a sale or transfer of the PitchPage business, in which case this policy continues to apply to the information transferred.

6. Embedded content and external links

Page owners can embed a video from Loom or YouTube and a booking calendar from Calendly or Cal.com — the only embeds PitchPage accepts. When a visitor opens a page, the video player and calendar load directly from those providers, which may set cookies, use similar technologies and collect information about the visitor under their own privacy policies. PitchPage does not control that collection.

A page can instead show a video its owner uploaded or recorded in PitchPage. That player loads from Cloudflare, our service provider, which receives the visitor’s IP address and browser information in order to deliver the video. The address it plays from is signed and expires.

A page may also include a button that links to a destination the page owner chooses, such as their own website, form or checkout page. Following that link takes the visitor off PitchPage. Payments made there are between the visitor and the page owner or the owner’s payment provider; PitchPage does not process them or receive that payment information. This is separate from PitchPage’s own Pro subscription billing through Lemon Squeezy, described in section 2.

7. Analytics, cookies and similar technologies

Your analytics choice

Optional analytics — HeyCatch and Vercel Web Analytics — are off until you choose. On your first visit a banner asks whether to accept analytics; “Accept analytics” and “Reject analytics” are equally available, and until you accept, these services record nothing and store nothing in your browser. When a published page is shown inside another website, no choice can be stored there, so no banner appears and optional analytics stay off. Signing in, billing and everything else on PitchPage work the same whatever you choose.

Your choice is kept for one year in a first-party cookie, pp_analytics_consent, so that we do not ask on every visit. When you are signed in, it is also saved on your account, so that it applies to analytics our servers send (section below) and on your other devices; if you choose differently on different devices, the most recent choice applies. You can change your choice or withdraw consent at any time with the Analytics settings button in the bottom-left corner of every page, the Analytics settings link in the site footer, or here: change your analytics choice. Withdrawing stops collection straight away, deletes HeyCatch’s identifiers from your browser and stops analytics events for your account.

Sign-in cookies

When you sign in, our authentication provider stores your session in cookies on pitchpage.pro so that you stay signed in. These cookies are necessary for the dashboard to work; if you block them, you will not be able to sign in.

Vercel Web Analytics

If you accept analytics, we use Vercel Web Analytics on every page of pitchpage.pro, including the dashboard and pages published by our users, to see aggregated traffic. For each page view, Vercel may record the time, the page address and its route pattern, the referring website, approximate location (country, region and city), browser, operating system and device type. Before a page view is reported, PitchPage removes the query string and any fragment from the address, so only the path is sent. A path can still contain words chosen by a page owner, such as a published page’s address.

According to Vercel’s documentation, Web Analytics does not use third-party cookies. It distinguishes visitors with a hash created from the incoming request, which is discarded after 24 hours, and the data is used for aggregated statistics. We do not use advertising cookies or advertising trackers.

HeyCatch product analytics

If you accept analytics, we use HeyCatch on every page of pitchpage.pro, including the dashboard and pages published by our users. HeyCatch records the pages you view, with their address including the query string (we remove sign-in codes, tokens, email addresses and anything after a # before an event is sent); the referring website; clicks and form submissions, including the text and attributes of the element clicked but never what is typed into form fields; and your browser, operating system, device type and approximate location derived from your IP address. We keep sign-in and sign-up forms, account settings, the page editor’s preview, and the titles and addresses of your pages in the dashboard out of this click tracking. HeyCatch does not record your screen or session.

When you are signed in and have accepted analytics, we also tell HeyCatch who you are, so that your activity is linked to your account: your PitchPage account identifier, your email address, your display name if you added one, your plan (trial, Pro or expired) and the date you signed up. Our servers report a few account events to HeyCatch — completing sign-up, creating a page, and a Pro subscription starting, being canceled, resuming or ending — together with your plan. A sign-up is reported once, when the account is first confirmed; subscription events come from Lemon Squeezy’s verified notifications and follow the choice saved on your account. We never send HeyCatch passwords, sign-in tokens, payment-card details, the contents of forms, or page content you have not published. When you sign out, the analytics identity is cleared from your browser.

After you accept, HeyCatch stores a random identifier in a first-party cookie and in local and session storage on pitchpage.pro, by default for up to one year, together with a record of your consent and a count of events sent. HeyCatch, Inc. processes this information on our behalf in the United States, using its own service providers, including PostHog for analytics infrastructure, as described in HeyCatch’s privacy policy and its list of subprocessors.

Embedded providers

Embedded videos and calendars may set their own cookies when they load, whatever you choose about analytics (section 6).

PitchPage is therefore not cookie-free, and not everything described here is anonymous. You can also block or delete cookies in your browser settings, but signing in will not work without the sign-in cookies.

8. Security

Connections to pitchpage.pro use HTTPS. Database access rules limit signed-in users to their own account information, passwords are stored as one-way hashes by our authentication provider, and payment details are handled by Lemon Squeezy rather than by us. We take reasonable measures to protect information from loss, misuse and unauthorized access, but no website or storage system is completely secure. If you believe your account has been compromised, email support@pitchpage.pro.

9. How long we keep information

• Your account, profile and pages are kept for as long as your account exists, unless you delete them sooner.
• When a trial or subscription ends, nothing is deleted automatically: your account and pages remain, and published pages stay online until you delete them.
• A page you delete is removed from our live database immediately, together with its old-address redirects. Deleted information can remain in the daily backups kept by our database provider until those backups expire, currently up to seven days later.
• Replacing or removing your profile image stops it appearing on your pages, but the earlier image file is not deleted automatically and remains reachable at its file address until you ask us to delete it or your account is deleted. When we delete your account, we delete every profile image you uploaded.
• A video you upload or record is kept while one of your pages uses it. When you replace it or switch the page to a link, it is kept for 24 hours and then deleted; a video you upload but never save onto a page is deleted 24 hours after it is ready. A video is deleted promptly when you cancel or discard it, when you delete the page that uses it (unless another of your pages uses it too), or when your account is deleted. Deletion is carried out at Cloudflare and confirmed there.
• Lemon Squeezy keeps its own records of purchases under its own policies.
• Support emails are kept for as long as they are useful for handling your request and keeping a record of it.
• Your analytics choice is remembered for one year.
• Vercel Web Analytics discards its visitor hash after 24 hours.
• HeyCatch’s identifier lasts up to one year unless you withdraw consent or delete it, and HeyCatch keeps analytics data under its own terms.

10. Deleting your data and making requests

From your dashboard you can edit or remove your display name, company name and profile image, and delete any of your pages.

PitchPage does not yet have a button for deleting your whole account. To delete it, email support@pitchpage.pro from the address on the account. We will delete your account, profile and pages, which also stops your published links from working, and every profile image you uploaded, so those image addresses stop working too. Any videos you uploaded or recorded are deleted from Cloudflare as well. Information may remain for the backup period described in section 9, and we may keep anything the law requires us to keep.

Deleting your PitchPage account does not cancel a Pro subscription. Cancel it first from Dashboard → Billing → Manage subscription, or ask us to help. Records of your purchase are held by Lemon Squeezy.

Withdrawing analytics consent stops new collection, and deleting your account stops it too, but neither deletes analytics data already sent to HeyCatch. Email us and we will ask HeyCatch to delete the analytics data linked to your account.

For any other request — access, a copy of your data, or a correction — email us. We may need to confirm that you control the account’s email address before we act on a request.

11. Your privacy rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent where we rely on it — for analytics, at any time with Analytics settings. If you are in the European Economic Area or the United Kingdom, you may also complain to your local data protection authority. Residents of some US states, such as California, have similar rights to know about, correct and delete their personal information, and not to be discriminated against for using those rights.

We do not sell personal information or share it for cross-context behavioral advertising. To use any of these rights, email support@pitchpage.pro; we will respond within the time required by the law that applies to you.

12. International processing

Our database and file storage are hosted in South Korea (Supabase’s Asia Pacific — Seoul region), and our application runs on Vercel servers in the United States, delivered through Vercel’s global network. Videos uploaded or recorded in PitchPage are stored and delivered by Cloudflare on its global network. HeyCatch processes analytics data in the United States. Lemon Squeezy and Google process information in their own facilities. Your information may therefore be processed in countries other than the one where you live, whose data protection laws may differ from yours.

13. Children

PitchPage is not directed to children. You must be at least 18 to create an account, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, email support@pitchpage.pro and we will delete it.

14. Changes to this policy

We may update this policy as PitchPage changes. We will change the “Last updated” date above whenever we do, and if a change materially affects how we handle personal information, we will make reasonable efforts to tell account holders in advance, for example by email or a notice on the site.

15. Contact

Email support@pitchpage.pro, or use our contact page. You can also write to Shafqat Shadaab, 3043 33rd St Apt 3, Astoria, NY 11102, United States. Our Terms of Service explain the rules for using PitchPage.