Privacy Policy

This policy covers the Pitchgrit site at pitchgrit.com, the free preview, accounts, and paid plans. It is written for the teams and people who use the product.

Account

When you create an account we collect your name, email address, and password. The password is stored only as a one-way hash. We do not store the password itself.

We also store the plan you chose, a role, and a title set when the account is created. The product sets that title: sales manager for the person who opens a team workspace, and account executive for an individual account or an invited rep. If you open a team workspace we store the organization name. After you subscribe we store a billing status, a Stripe customer id, a Stripe subscription id, and the end of the current billing period. For a team plan we also store the rep seat count.

Team workspace

A manager can invite a rep by entering that person's email. We store the email, who sent the invite, and a token so the invite link can be accepted. Pitchgrit does not email the invite. The manager copies the link and sends it. When the rep joins, we store the rep's name, email, and password hash and connect the account to the organization.

A manager in the same organization can see rep names, email addresses, assignments, drills, practice transcripts, and scorecards. A rep can see their own practice. An individual plan keeps history on that account. People outside the organization cannot open it.

Practice content

When you practice, we store the scenario (including a buyer role, company description, goal, and similar notes you or a manager entered), the text of the conversation, coaching notes, and the scorecard. We also store how many seconds and turns of voice the call used.

The transcript is text. If you speak, the browser records a short clip when you choose to talk and sends it to our server. We send that clip to OpenAI to transcribe it, then we keep the text. We do not save the recording in our database or in a file store. The buyer's spoken reply is generated for playback in your browser and is not saved as an audio file. Your browser asks before it uses the microphone. That permission stays on your device.

Anything you type can include names and details of real buyers if you put them there. Do not put information into Pitchgrit that you are not allowed to share with us or with your organization.

Free preview

The preview at /try does not require an account. For each preview we store a random browser id, a hash of the IP address (not the raw IP address), the meeting details you enter, the transcript, the score and coaching shown on the page, and how much voice time the preview used.

You can leave an email after a preview. That field is optional. The score, the fixes, and the prep sheet stay on the page either way. If you leave an email, we store it with that preview.

If free previews are paused because the service is busy, the page can ask for an email. We store that address on its own, without a practice session.

If you leave an email, we may use it to follow up about your preview or about Pitchgrit. Every follow-up email includes a way to opt out.

Password reset

If you ask to reset a password, we email a one-time link. The link expires in 45 minutes and works once. We store a hash of the token, not the token itself. To limit abuse we store a hash of the email address and a hash of the IP address for about an hour. We do not store the raw IP address in those rows. The page gives the same reply whether or not an account exists for that email.

Payments

Paid plans use Stripe Checkout and the Stripe customer portal. We send Stripe your account email, the plan, the seat count, and an internal account id so the subscription can be tied to the workspace. Stripe collects the payment method and any billing details you enter on Stripe's pages. Stripe tells us the customer id, subscription id, status, seat count, and period end. We do not receive or store your full card number.

Technical data

We read the IP address from the request so we can build the hashes described above. Our host may keep ordinary request logs, which can include IP address, time, and the URL requested. The app does not run a separate analytics or advertising product, and it does not set advertising cookies.

We use this information to:

• Run the practice room, including the AI buyer, the transcript, the scorecard, and coaching.
• Create and protect accounts, including sign-in and password reset.
• Run the free preview and limit how often it can be started.
• Bill subscriptions and keep the plan in sync with Stripe.
• Let a manager see practice inside their own organization.
• Follow up if you leave an email on the preview, and reply if you contact us.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use your practice calls to train a Pitchgrit model.

We share information with the service providers below so they can perform the service. We also share team practice with managers in the same organization, as described above. We may disclose information if the law requires it, or to protect the service, our users, or the public.

OpenAI

We use OpenAI's API to run roleplays, transcribe voice and generate speech. By default, OpenAI does not use API data to train its models.

Stripe

Stripe processes subscription payments, stores the payment method, hosts Checkout and the customer portal, and sends us the subscription events that keep a plan active, past due, or canceled.

Vercel

Vercel hosts the application. The database is Prisma Postgres, provided through Vercel. Account records, transcripts, scorecards, preview sessions, leads, invites, and password-reset records are stored there. Vercel processes each request in order to serve the site and may keep hosting logs.

Resend

Resend delivers password-reset email. Resend receives the recipient address, the message, and a one-time link. The only email Pitchgrit sends automatically is a password-reset message. The from address is Pitchgrit <hello@pitchgrit.com>.

We use these service providers to run Pitchgrit.

Pitchgrit sets three first-party cookies. Each is httpOnly, so page scripts cannot read it. In production each is sent only over HTTPS. We use them to run the product, not to advertise.

• nl_session. Keeps you signed in. It holds a signed token with your account id. It lasts 14 days. Signing out deletes it. Changing your password stops older tokens from working.
• pg_try. A random id for the free preview, so we can count previews from that browser. It lasts about 400 days.
• pg_promo. Set only if you open a pricing link with a promotion code we recognize. It remembers that code for 7 days so checkout can apply it.

You can block cookies in your browser. Sign-in, the free-preview limits, and a saved promotion code will not work the same way if you do.

We keep personal information for as long as we need it to run Pitchgrit, meet legal duties, and resolve disputes. We do not run an automatic purge of old transcripts, accounts, or preview leads on a fixed timetable.

• Account information, transcripts, and scorecards stay while the account exists, including after you cancel a subscription, until you ask us to delete them or we no longer need them.
• Preview sessions and optional emails stay so the preview, its limits, and any follow-up can work, until you ask us to delete them or we no longer need them.
• Password-reset links expire after 45 minutes. The stored hash of a used or expired link may remain until we delete the account or the row.
• The short-lived hashes used to limit password-reset requests are removed as they age out of a one-hour window.
• Stripe keeps payment records under Stripe's own retention rules. We keep the subscription ids and status we need to know whether the plan is open.

Email hello@pitchgrit.com to ask for access, a correction, or deletion of personal information we hold about you. Include the email on the account or the preview, and say what you want done. We may ask you to confirm that you control that email before we act.

We will delete or correct the account, the leads that match that email, and preview sessions tied to those leads, unless we need to keep a record for tax, security, fraud prevention, or to finish a transaction. There is no delete button in the product. Email is how a request is made.

A preview with no email is tied to a browser cookie and a hashed IP address, not to a name. If you can describe it well enough for us to find it, we will delete it. If we cannot match it, we may not be able to.

If a state privacy law gives you other rights, email us and we will honor the ones that apply.

Pitchgrit is for B2B sales teams. It is not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe we have, email hello@pitchgrit.com and we will delete it.

We use ordinary safeguards: hashed passwords, httpOnly session cookies, hashed reset tokens, and a hashed IP address where a raw address is not required. No method of storage or transmission is perfectly secure. The service is operated from the United States. Our processors may process information in the United States and other countries where they operate.

We may update this policy. When we do, we will change the effective date at the top and post the new version at this page. The version on pitchgrit.com/privacy is the one that applies. Using Pitchgrit after the new date means the updated policy applies. We do not send a separate email for every change.

Questions about this policy, or a request for access or deletion, go to: