Last updated: August 31, 2026
Pitchbase places great importance on protecting your personal data. This Privacy Policy describes how Pitchbase collects, uses, retains, and protects your personal data in connection with your use of the platform available at https://pitchbase.app (the "Service").
This policy complies with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the French Data Protection Act, as amended.
The controller of your personal data is:
Given the size of the organization, no Data Protection Officer (DPO) has been appointed. Any request relating to your personal data may be sent directly to the data controller at the address above.
| Purpose | Legal basis |
|---|---|
| Creating and managing your user account | Performance of contract |
| Providing the voice simulation and AI analysis service | Performance of contract |
| Billing and subscription management | Performance of contract, legal obligations |
| Customer support and responding to your requests | Performance of contract, legitimate interest |
| Improving the service and analyzing usage | Legitimate interest |
| Sending transactional emails (confirmations, notifications) | Performance of contract |
| Sending marketing and nurture emails | Legitimate interest, with opt-out at any time |
| Audience measurement and advertising (Google Analytics, Google Ads, Meta pixel) | Consent (cookie banner) |
| Platform security and fraud prevention | Legitimate interest |
| Compliance with legal obligations (accounting, tax) | Legal obligation |
To deliver the Service, Pitchbase relies on the following sub-processors. All are bound by contractual commitments compliant with Article 28 of the GDPR.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Authentication, database, storage | EU (Frankfurt) |
| Render | Application hosting | EU (Frankfurt) |
| OpenAI | Call analysis and AI content generation (personas, feedback) | United States |
| Anthropic | AI persona response generation (voice simulation) | United States |
| Deepgram | Speech recognition (speech-to-text) | United States |
| Gradium | Voice synthesis (text-to-speech) | France (EU) |
| Stripe | Payment and subscription processing | United States (Ireland for the EU) |
| IONOS (SMTP) | Sending transactional emails | EU (Germany) |
| Google (Analytics, Ads) | Audience measurement and advertising (after consent) | United States |
| Meta Platforms | Advertising measurement, pixel (after consent) | United States |
| Google OAuth | Sign-in via Google account (optional) | United States |
Transfers outside the EU: some sub-processors are located in the United States. These transfers are governed by the European Commission's Standard Contractual Clauses, and where applicable, by the relevant providers' Data Privacy Framework certifications.
Pitchbase lets you create a training persona from a real prospect, so you can rehearse before a meeting. Two sources are possible: information you provide yourself (a pasted profile, notes, a description), or a copy of a prospect already saved in your workspace.
This processing relies on our legitimate interest (Article 6.1.f): it is individual, one-off and private training. The following safeguards apply:
If you are a person for whom a user has created a persona and wish to exercise your rights, please write to briac@pitchbase.fr.
In accordance with the GDPR, you have the following rights regarding your personal data:
To exercise these rights, contact us at contact@pitchbase.app with your specific request. A response will be provided within a maximum of one month.
If you disagree with our response, you have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.
Pitchbase uses the following cookies and trackers:
On your first visit, a banner lets you accept or refuse these trackers; none is set before you choose, and your choice is kept for 6 months. You can change it at any time via the floating button at the bottom of the page or by clicking here.
Pitchbase implements appropriate technical and organizational measures to protect your data:
The transcripts, personas, scenarios, and other content you create on Pitchbase belong to you. Pitchbase does not use them to train its AI models nor share them with third parties, except for the technical sub-processors necessary to deliver the service (see section 5).
The Service is intended for professionals and for students in a training context. It is not intended for persons under 15 years of age, and Pitchbase does not knowingly collect data about them. As part of partnerships with educational institutions, minor students aged 15 or over may use the Service under the responsibility of their institution (the age of digital consent is set at 15 under French data protection law). If you believe a minor under 15 has shared their data with us, please contact us immediately for deletion.
Pitchbase reserves the right to modify this Privacy Policy at any time. Any substantial change will be notified to you by email or via an in-Service notification at least 30 days before it comes into effect. The date of the last update appears at the top of this document.
For any question regarding this policy or the processing of your personal data: