PitchPilot

The short version

PitchPilot helps creators find newly launched brands and pitch them from their own email address. To do that we store the information you give us and, with your permission, send email on your behalf.

We can never read your email. We do not ask for that permission, and we have no technical ability to access your inbox.

What we collect

Account information. Your name, email address, and profile photo from Google when you sign in.

Your creator profile. The details you enter yourself — niche, audience size, portfolio links, past brand work, rates. These are used only to match you with brands and to draft pitches you review and control.

Pitch activity. The pitches you send through PitchPilot, their delivery status, and replies brands send to those pitches (see below).

Email opens. Pitches sent through PitchPilot may include a standard tracking pixel that tells us whether the email was opened. We record a single opened-or-not signal per pitch — never location, device details, or a count — and we label open data as approximate wherever we show it.

Cookies. We use only the session cookie that keeps you signed in. No advertising or cross-site tracking cookies.

How Gmail permission is used

If you connect Gmail, we request a single permission: gmail.send — the ability to send email from your address. It is used only to send pitches and replies that you have composed or approved, at the pace you configure. We request no read, modify, or delete access of any kind.

When a brand replies to a pitch, their reply is delivered to a PitchPilot-operated reply address (not your inbox), shown to you in the app, and a copy is forwarded to your own email. We only ever see messages that brands send to that PitchPilot address in response to your pitches — never anything in your mailbox.

PitchPilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we never do

• Read, scan, or analyze your inbox — we cannot.
• Sell your data, or share it with advertisers or data brokers.
• Send email without your configuration and consent.
• Use your Google data to train AI models.

Who we share with

Only the infrastructure that runs the product: hosting (Vercel), database (Neon), background jobs (Inngest), and email infrastructure for reply handling. Each processes data solely to provide PitchPilot's service.

Retention & deletion

We keep your data while your account is active. Disconnecting Gmail immediately revokes our ability to send as you; you can also revoke access anytime at myaccount.google.com/permissions. To delete your account and all associated data, email us and we'll complete it within 30 days.

Security

All data is encrypted in transit (TLS) and at rest by our infrastructure providers. Gmail access uses OAuth tokens issued by Google — we never see or store your Google password — and those tokens are stored server-side, never in your browser.

Children's privacy

PitchPilot is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

If we make material changes, we'll update this page and its date above, and notify you by email for anything that changes how your Google data is handled.

Contact

Questions or deletion requests: sbecharv@gmail.com