Privacy Policy

Last Updated: 2026-09-04 · PitchGlobal (the "Service")

We are committed to protecting your privacy. This Policy explains how we collect, use, store, and share your personal information when you use the Service, and the rights available to you.

1. Data Controller

The Service is operated by an individual sole trader(the "Operator"). Privacy contact: support@kivelu.com.

2. Personal Information We Collect

Information you provide directly:

• Account info: your email address (used for password-less sign-in links).
• Voice recordings and transcripts of your practice sessions, created to correct errors and build your review queue. You can delete individual recordings from the account page at any time.
• Payment info: subscription status and period. We never receive your card number.
• Support communications you send us.

Information collected automatically: usage data (practice sessions, feature usage), request logs, and basic device/network data needed to operate the Service.

3. How We Use Your Information

• Delivering the Service: transcription, correction, review queues (contract performance).
• Billing and subscription management via our payment processor (contract performance).
• Security, fraud prevention, and abuse prevention (legitimate interests).
• Service notifications such as billing and security notices (legitimate interests).
• Legal compliance (legal obligation).

We do not sell your personal information. We do not use your recordings to train AI models.

4. Payment Processing

Payments are processed by our merchant of record, Waffo Pancake. Your payment card data is entered on Waffo Pancake's hosted checkout, processed by Waffo Pancake as the PCI-DSS certified processor, and is not stored on our servers. We receive only subscription status, period dates, and a payment reference.

5. Third-Party AI Providers

To deliver practice sessions, your voice and transcripts are processed by third-party AI providers under data processing agreements, including speech recognition (e.g., Deepgram or Microsoft Azure), language models (e.g., Anthropic or OpenAI), and speech synthesis. These providers process data solely to deliver the Service's functionality.

6. Cookies & Similar Technologies

We use only strictly necessary cookies: a login session cookie and sign-in link tokens. We do not use advertising or third-party analytics cookies.

7. Data Retention

• Recordings: kept until you delete them (one tap on the account page).
• Text records (transcripts, error records): kept while your account is active, so the Service can re-test you on past mistakes; erased when your account is deleted.
• Account information: erased within 90 days after an account deletion request.
• Transaction records: kept as long as required by applicable law.

8. Your Data Rights

You can delete individual recordings yourself from the account page, and delete your whole account from the account page or by emailing support@kivelu.com. You may also request access, correction, export, restriction, or objection by emailing support@kivelu.com; we respond within 30 calendar days. You may lodge a complaint with your local data protection authority.

9. International Data Transfers

Our providers may process data in countries other than yours (for example Japan, the United States, or Singapore). Where required, transfers are safeguarded by standard contractual clauses or equivalent protections.

10. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect information from children below that age.

11. Security

Data is encrypted in transit (TLS). Sign-in tokens are stored only as hashes; passwords do not exist (email links only). Access to production data is limited to the Operator.

12. Policy Changes & Contact

Material changes to this Policy will be announced in the Service or by email at least 15 days before taking effect. Questions or requests: support@kivelu.com.