Privacy & Security

Founders: Your pitch decks, uploaded documents, and company information are visible only to you. No other founder can see your work. When you share a pitch, only the people you share it with can view it — and only the presentation, not your drafts or editing history.

Investors: Decks you upload are completely private to your account. Your scores, notes, and AI chat conversations are never shared with other investors or with the founders who created the decks. No one can see your deal flow.

Sharing: Pitch links are token-based. Each share generates a unique link. You control who gets it. Links can be revoked at any time. There is no public directory of pitches.

PitchSaga uses AI to help founders generate pitch content and to help investors analyze decks. Here's what that means in practice:

• •We run our own securely hosted AI models. We do not use OpenAI, Anthropic, or any third-party AI APIs. Your data never leaves our infrastructure for AI processing.
• •Your data is never used to train AI models. Not by us, not by anyone. It is processed only to generate your results and then it stays in your account.
• •AI-generated content (pitch text, scores, analysis) may contain errors. We label AI outputs clearly and encourage you to review everything before relying on it.
• •AI scores are a starting point, not a verdict. Investors can override any AI score with their own assessment.

Your account, pitches, and uploaded documents are stored in Supabase (hosted on AWS). Our database is currently located in the United States.

All connections are encrypted in transit (TLS). Passwords are hashed and never stored in plain text. Authentication uses industry-standard JWT tokens.

We do not sell your data. We do not share it with advertisers. We do not mine it for insights. We do not send it to third-party AI providers.

You can always:

• ✓See the information we hold about you — via your account page and dashboards.
• ✓Edit your name, password, pitches, and deck notes directly in the app.
• ✓Delete your account — self-service, from the Account page. This removes your pitches, uploads, scores, notes, and chat history.
• ✓Ask questions or challenge how we handle your data — email privacy@pitchsaga.com.

If we can't resolve a privacy concern to your satisfaction, Canadian users can contact the Office of the Privacy Commissioner of Canada.

We keep your data only as long as your account is active, or as needed to provide you service.

• •While your account is active: your pitches, decks, scores, notes, and chat history stay available to you.
• •When you delete your account: we remove your records from our live database immediately. Backups are retained for up to 30 days and then overwritten.
• •Billing records: payment metadata is retained by Stripe according to their retention policy (for tax and legal reasons).
• •Inactive accounts: we may contact you before deleting an account that has been inactive for more than 12 months.

We take security seriously — but if a data breach ever happens that poses a real risk of significant harm to you, we will:

• •Notify you directly by email as soon as is reasonably possible.
• •Report the breach to the Office of the Privacy Commissioner of Canada, as required under PIPEDA.
• •Keep a record of the breach and what we learned from it.