Privacy Policy

Profile Pitch is a Massachusetts limited liability company with its principal place of business in Massachusetts. We build personal lead pages for professionals. We operate at profilepitch.ai. When this policy refers to “we,” “us,” or “our,” it means Profile Pitch. When it says “you,” it means you, the person visiting our website or purchasing our services.

If you have questions about this policy at any time, email us at hello@profilepitch.ai.

Information you give us directly

When you submit a request through our checkout form or contact us directly, we collect:

• Your name, email address, and phone number
• Your billing and payment details (processed securely by Stripe, our third-party payment provider, we never store your full card number)
• The content you provide for your page: headshot, bio, services, testimonials, and other materials
• Any messages or requests you send us via email or our contact form

Information we collect automatically

When you visit profilepitch.ai, our cookieless analytics automatically records aggregate usage data, page views, referrers, and approximate location. We do not retain raw IP addresses for analytics and do not use this data to identify you individually. Your device’s IP address is briefly processed in transit (as it is for any website) and may qualify as personal data under GDPR and certain US state privacy laws.

Why we collect it

• To build and deliver your page
• To process your payment and send receipts
• To communicate with you about your order, revisions, and hosting
• To send service reminders like hosting renewal notices
• To improve our website and services using aggregated, anonymous analytics
• To comply with legal obligations when required

Profile Pitch uses AI tools (currently from third-party providers including OpenAI and Anthropic) to draft copy and accelerate the build process. When you submit your intake brief, the content you provide may be transmitted to and processed by these AI providers under their respective enterprise terms.

What this means for your data:

• Information you submit in the intake brief (bio, services, credentials, written notes) may be sent to AI providers for processing.
• We use enterprise-tier AI services that contractually do not retain submitted data for training their models. Their retention periods are governed by their own data processing terms (available on request).
• We do not use AI for automated decisions that produce legal or similarly significant effects about you.
• You should not submit confidential information, trade secrets, or sensitive personal data (e.g., government IDs, financial account numbers, health information) in your intake brief.
• AI providers are listed as subprocessors in Section 06.

Cookies are small text files a website can store on your device. We want to be straightforward: Profile Pitch does not set any cookies of its own. The only information kept on your device is a temporary record of your intake-form progress (described below), and our analytics is cookieless.

What we store on your device

• Intake-form progress (local storage), when you fill out your page brief, your answers are saved in your browser’s local storage on your own device so you don’t lose your work. This data stays on your device and is not sent to us until you submit the form; it is deleted from your browser once you submit.
• Analytics (cookieless), we use Vercel Web Analytics, a privacy-respecting service that counts page views and referrers in aggregate. It sets no cookies and does not identify or track you individually across sites.
• No advertising, no cross-site tracking, no affiliate cookies, we set none of these.

We do not use advertising or marketing cookies, and we don’t run retargeting ads or behavioral marketing. Because we don’t set cookies, there’s nothing to disable, but you can clear your browser’s local storage at any time in your browser settings (this would remove any unsaved intake-form progress).

Global Privacy Control. We do not sell or share personal information or use cookies for cross-site tracking, so there is nothing for a Global Privacy Control (GPC) signal to opt out of, browsers sending the GPC signal already receive the treatment it requests. If our practices ever change, we will treat GPC as a valid opt-out request under California, Colorado, and other applicable state laws.

The only exception is if you ask us to route your leads into a third-party CRM or email tool of your choosing (e.g. HubSpot, Mailchimp), in which case your form data routes through that platform. Those platforms have their own privacy policies that apply to data processed through them.

You are responsible for handling lead submission data in accordance with applicable laws (including CAN-SPAM, TCPA, GDPR, and any industry-specific privacy obligations) once it reaches your inbox.

We share your information only when necessary and only with the following types of parties:

Service providers we trust

We work with a small number of third-party providers to run our business. Our current subprocessor categories include: payment processing (Stripe); web hosting, infrastructure, and cookieless analytics (Vercel); transactional email delivery (Resend); AI services for content drafting (OpenAI, Anthropic); order and brief management (Airtable); and domain registrars (acting on your behalf only when applicable). These providers receive only the data they need to perform their specific function and are required to keep it secure and confidential.

A current list of subprocessors is available on request by emailing hello@profilepitch.ai.

Legal requirements

We may disclose your information if required to do so by law, court order, or a valid request from a government authority. We’ll notify you if this happens unless we’re legally prohibited from doing so.

Business transfers

If Profile Pitch is ever acquired, merged, or sold, your information may be transferred as part of that transaction. We would notify you before your data becomes subject to a different privacy policy.

With your consent

We may share your information for any other purpose if you give us explicit permission to do so.

International data transfers

Profile Pitch is based in the United States, and we and our subprocessors process data in the US. If you access our services from outside the US, you understand that your data will be transferred to and processed in the US. Where data of EU/UK residents is involved, we rely on the EU-US Data Privacy Framework (where the receiving party is certified) and/or Standard Contractual Clauses adopted by the European Commission as the transfer mechanism.

We keep your personal information only as long as necessary to provide our services and meet our legal obligations:

• Client account and order information is retained for 7 years in line with standard business record-keeping requirements.
• Aggregate, cookieless website analytics (page views, referrers, general location) are retained for up to 14 months. We do not retain raw IP addresses for analytics purposes.
• Email correspondence is retained for as long as your account is active plus 2 years.

If you request deletion of your account and data, we will remove your personal information within 30 days, except where we have a legal obligation to retain certain records. Note that data may persist in encrypted backups for up to 90 days after deletion from active systems and is overwritten on the normal backup rotation cycle; backup data is not used for any purpose other than disaster recovery.

We take reasonable steps to protect your personal information from unauthorized access, loss, or misuse. This includes using encrypted connections (HTTPS) on our site, secure payment processing through PCI-compliant providers, and limiting internal access to personal data to only those who need it.

That said, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to use strong, unique passwords if you create an account with us.

If we become aware of a data breach that affects your personal information, we will notify you as required by law.

Regardless of where you live, you have rights over your personal data. Here’s what you can ask us to do at any time:

To exercise any of these rights, email us at hello@profilepitch.ai. We will verify your identity before processing the request by matching your email address against our records and may ask for additional information such as your order number or the email used at signup. We will not charge a fee for the first request in any 12-month period. We will respond within 30 days.

Notice at collection. This privacy policy serves as our notice at collection for purposes of the California Consumer Privacy Act and similar laws. By using our website or services, you are notified of the categories of personal information collected and the purposes for which they are used.

Appeals. If we deny your rights request, you may appeal by replying to our denial email. We will respond to appeals within 60 days. If we deny your appeal, you may contact the Massachusetts Attorney General’s Office or, where applicable, your state’s attorney general.

From time to time we may send marketing emails about new features, packages, or content we think will interest you. We send marketing emails only to people who have created an account, made a purchase, or otherwise opted in to receive them. We comply with the CAN-SPAM Act, including by clearly identifying the sender, providing our physical mailing address, and including a one-click unsubscribe link in every marketing email.

To opt out, click the unsubscribe link in any marketing email or email hello@profilepitch.ai. Opt-outs are processed within 10 business days. Transactional service emails (order confirmations, hosting renewal reminders, support replies) are not marketing and continue regardless of marketing opt-out.

If you’re visiting the Site from the European Union or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR give you additional rights and protections. We process your personal data under the following legal bases:

• Contract performance, processing necessary to deliver the services you’ve purchased from us
• Legitimate interests, operating and improving our business, fraud prevention, and basic analytics
• Legal obligation, where we’re required by law to process or retain certain data
• Consent, for any optional marketing communications, which you can withdraw at any time

Under GDPR you have the right to access, correct, delete, restrict, and port your data, as well as the right to object to processing and to withdraw consent. You also have the right to lodge a complaint with your local Data Protection Authority if you believe we’ve handled your data incorrectly.

To exercise any GDPR rights, contact us at hello@profilepitch.ai.

If you’re a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you specific rights over your personal information.

Categories of data we collect

In the past 12 months we have collected the following categories of personal information from California residents:

• Identifiers, name, email address, phone number, IP address
• Commercial information, records of services purchased
• Internet activity, pages visited, time on site, browser type
• Professional information, the bio, services, and credentials you provide for your page
• Inferences, limited inferences drawn from intake information by AI tools to draft page copy

Sensitive personal information. We do not knowingly collect categories of “sensitive personal information” as defined by the CPRA (such as Social Security numbers, precise geolocation, racial/ethnic origin, religion, genetic data, biometric data, or health information). To the limited extent any such data is incidentally provided to us, we do not use or disclose it for purposes that would trigger the consumer’s right to limit its use under CPRA § 1798.121.

Your California rights

• Right to know, you can request details about what personal information we’ve collected, used, and shared in the past 12 months
• Right to delete, you can ask us to delete your personal information, subject to limited exceptions
• Right to correct, you can ask us to correct inaccurate personal information
• Right to opt out of sale, we don’t sell or share data, but you can confirm this at any time by contacting us, and we honor Global Privacy Control browser signals as opt-out requests
• Right to limit, to limit the use of sensitive personal information (we do not collect SPI for purposes that would otherwise require this right, but it remains available)
• Right to non-discrimination, we will never treat you differently for exercising your privacy rights
• Right to appeal, see Section 09

To exercise your California rights, email hello@profilepitch.ai. We will respond within 45 days of receiving a verifiable request.

Residents of US states with comprehensive consumer privacy laws, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana, Iowa, Tennessee, Delaware, New Hampshire, New Jersey, Indiana, Kentucky, Maryland, Minnesota, Nebraska, Rhode Island, and others as they come into effect, have rights substantially similar to those described above for California residents, including: the right to confirm whether we process your personal data; to access, correct, and delete that data; to opt out of targeted advertising, sale, and profiling that produces legal or similarly significant effects (we do none of these); and to appeal a denial of a rights request (see Section 09).

To exercise your rights, email hello@profilepitch.ai. We will respond within the timeframe required by your state’s law (typically 45 days, with one extension available where permitted).

Our services are intended for adults running a business or professional practice and are not directed to children. We do not knowingly collect personal information from anyone under the age of 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, please contact us at hello@profilepitch.ai and we will delete it promptly.

For California residents, we do not knowingly sell or share the personal information of consumers under 16 (and consumers between 13 and 16 would need to provide affirmative consent under CPRA in any case where selling or sharing applied, which it does not for us).

Our website and your Profile Pitch page may contain links to third-party websites, such as LinkedIn, social media platforms, or booking tools. Once you click those links, you leave our site and their privacy policies apply. We have no control over and take no responsibility for the content or practices of third-party sites.

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make a material change, we’ll notify active clients by email at least 14 days before it takes effect and update the “Last updated” date at the top of this page. We will also post any changes we may make to our privacy policy on this page. Please check back frequently to see any updates or changes. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Site and this privacy policy to check for any changes.

Continued use of our services after a change takes effect means you accept the updated policy.

Privacy questions, data requests, or concerns, we’re here and we’ll respond promptly.