Privacy Notice

1. Who We Are

This Privacy Notice is issued by Pitchmaster ("we", "us", or "our"), the data controller for PitchLab ("the Service"). We are responsible for deciding how your personal data is collected and used.

2. What Data We Collect

We collect the following categories of personal data:

• Account information: name, email address, and login credentials when you create an account.
• Usage data: how you interact with the Service, including exercises completed, practice time, and feature usage.
• Device and technical data: browser type, operating system, IP address, and device identifiers.
• Support communications: messages you send to our support team.
• AI coaching interactions: prompts you submit to Aria and the AI-generated responses, used solely to provide the coaching service.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide the Service: account creation, authentication, and delivering vocal exercises, pitch detection, and AI coaching features.
• To improve the Service: analyzing usage patterns to enhance features and fix issues.
• For security and fraud prevention: detecting suspicious activity and protecting your account.
• For customer support: responding to your questions and resolving issues.
• For marketing: sending you updates about new features or offers, where you have consented or where permitted by law.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: processing necessary to provide the Service you signed up for.
• Legitimate interests: improving our Service, ensuring security, and preventing fraud.
• Consent: where you have explicitly agreed, such as for marketing communications.
• Legal obligation: where we are required to comply with applicable laws.

5. Who We Share Data With

We share your personal data with the following categories of recipients:

• Service providers: hosting, analytics, and customer support tooling providers who help us operate the Service.
• Paddle (Merchant of Record): for processing payments, managing subscriptions, handling tax compliance, generating invoices, and providing customer service related to orders. Paddle acts as an independent data controller for payment data.
• Professional advisers: legal and accounting professionals, where necessary.
• Authorities: where required by law or to protect our rights.

6. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this notice. When your account is deleted, we will remove or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, tax, or accounting purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data in certain circumstances.
• Restriction: request that we limit how we use your data.
• Portability: request a copy of your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us through the Service or our support channel. We will respond within one month.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. Essential cookies are necessary for the Service to function. Analytics cookies help us understand how users interact with PitchLab. You can manage cookie preferences through your browser settings.

10. International Transfers

Your personal data may be transferred to and processed in countries outside your own. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data in accordance with applicable data protection laws.

11. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us so we can delete it.

12. Changes to This Notice

We may update this Privacy Notice from time to time. We will post the updated version on this page with a revised date. We encourage you to review this notice periodically.

13. Contact Us

If you have any questions about this Privacy Notice or how we handle your personal data, please contact us through the Service or our support channel.