Privacy Policy

• Account data. When you sign in through our authentication provider (Clerk), we receive your name, email address, profile image, and authentication identifiers.
• Roster data you provide. Information about the freelancers you manage — names, contact details, day rates, skills, work history, CVs, and writing samples — that you upload to build and pitch their profiles.
• Mission data. Publicly available freelance mission listings we retrieve from third-party sources on your behalf.
• Integration data. If you connect Slack, the tokens needed to post review notifications, stored encrypted at rest.
• Usage data. Logs, device and browser metadata, and diagnostic information used to operate and secure the Service.

We use it to operate the Service: match freelancers to relevant missions, generate tailored application drafts from the profile data you provide, notify you for review, and let you approve submissions. We do not sell personal data or use it for advertising.

Application drafts are generated by a large language model (provided by Anthropic) from the profile data you supply. Drafts are grounded in that data and are always reviewed by a human before any submission — nothing is sent automatically.

We rely on a small set of trusted providers to run the Service: Clerk (authentication), Neon (database), Vercel (hosting and file storage), Anthropic (AI draft generation), and Slack (notifications, if you connect it). These providers process data on our behalf under appropriate agreements. Data may be processed in the European Union and the United States.

Because the Service processes personal data about the freelancers you manage, you act as the data controller for that data and we act as your processor. You are responsible for having a lawful basis to upload it, for informing the individuals concerned, and for honoring their rights.

Depending on your location (including under the GDPR in the EEA), you may have rights to access, correct, delete, restrict, port, or object to the processing of your personal data. Contact us at the address below to exercise them. We will respond within the time required by applicable law.

We retain data for as long as your account is active or as needed to provide the Service, then delete or anonymize it. Data is encrypted in transit, and secrets such as integration tokens are encrypted at rest.

Where personal data is transferred between the EU and the US, we rely on appropriate safeguards such as the applicable standard contractual clauses.

We may update this policy. Material changes will be posted on this page with a new effective date.

Questions or requests: privacy@pitchautopilot.com.