> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pitchweave.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy Policy

> How Big Trouble Labs Limited collects, uses, and protects your personal data.

**Last updated: 22 March 2026**

This Privacy Policy explains how Big Trouble Labs Ltd ("we", "us", "our") collects, uses, and protects your personal data when you use PitchWeave ("Service"). We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

For questions about this policy, contact us at [legal@pitchweave.app](mailto:legal@pitchweave.app).

***

## 1. What Data We Collect

### Data you provide

* **Account data**: Your name and email address, collected when you sign up via Clerk
* **Deck content**: Briefs, source material, audience descriptions, and goals you enter to generate decks
* **Uploaded files**: Any documents or files you upload as source material
* **Feedback and communications**: Any feedback, support requests, or other communications you send us

### Data collected automatically

* **Usage data**: Pages visited, features used, actions taken, and frequency of use within the Service
* **Technical data**: IP address, browser type, device type, operating system, and referral source
* **Authentication data**: Session tokens managed by Clerk
* **Performance and error data**: Logs, crash reports, and system performance data used to maintain and improve the Service

### Aggregated and anonymised data

We may derive aggregated, anonymised data from your use of the Service (such as feature usage statistics and performance metrics). This data cannot identify you individually and is used to improve and develop the Service. It does not constitute personal data.

***

## 2. How We Use Your Data

We use your data to:

| Purpose                                                    | Legal basis                             |
| ---------------------------------------------------------- | --------------------------------------- |
| Provide and operate the Service                            | Performance of contract                 |
| Authenticate your identity                                 | Performance of contract                 |
| Save and retrieve your decks                               | Performance of contract                 |
| Process your content via Anthropic to generate slide decks | Performance of contract                 |
| Maintain, monitor, and improve the Service                 | Legitimate interests                    |
| Detect and prevent fraud, abuse, and security incidents    | Legitimate interests                    |
| Send service-related notifications (e.g. changes to terms) | Legitimate interests / Legal obligation |
| Comply with legal obligations                              | Legal obligation                        |

We do **not** use your content to train AI models, and we do not sell your personal data to third parties.

***

## 3. Sub-Processors

We share data with the following third-party service providers to operate the Service:

| Provider      | Purpose                                                                        | Location |
| ------------- | ------------------------------------------------------------------------------ | -------- |
| **Anthropic** | AI deck generation — your brief and source material is sent to Anthropic's API | USA      |
| **Clerk**     | Authentication and session management                                          | USA      |
| **Railway**   | Database and backend hosting                                                   | USA      |

Where data is transferred outside the UK, we rely on appropriate safeguards, including the UK International Data Transfer Agreement (IDTA) or adequacy decisions where applicable.

We will update this table if we engage additional sub-processors.

***

## 4. Data Retention

| Data type                  | Retention period                                          |
| -------------------------- | --------------------------------------------------------- |
| Account data               | For the life of your account, plus 30 days after deletion |
| Deck content               | For the life of your account, plus 30 days after deletion |
| Usage and technical logs   | 90 days                                                   |
| Error and performance logs | 30 days                                                   |

**Dormant accounts**: If your account has been inactive (including where you are no longer paying for the Service, once paid tiers are introduced) for more than 90 days, we may delete your account and associated data after providing reasonable advance notice to your registered email address.

You can request deletion of your account and data at any time by emailing [legal@pitchweave.app](mailto:legal@pitchweave.app).

***

## 5. Your Rights

Under UK GDPR, you have the right to:

* **Access** the personal data we hold about you
* **Rectify** inaccurate or incomplete data
* **Erase** your data ("right to be forgotten")
* **Restrict** processing of your data in certain circumstances
* **Object** to processing based on legitimate interests
* **Data portability** — receive your data in a structured, machine-readable format
* **Withdraw consent** where processing is based on consent

To exercise any of these rights, email [legal@pitchweave.app](mailto:legal@pitchweave.app). We will respond within one calendar month.

You also have the right to lodge a complaint with the **Information Commissioner's Office (ICO)**:

* Website: [ico.org.uk](https://ico.org.uk)
* Telephone: 0303 123 1113

***

## 6. Security

We implement commercially reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.

We are not responsible for unauthorised access to your data arising from your own acts or omissions, such as sharing your login credentials.

***

## 7. Cookies

We use cookies to operate authentication sessions and, where you have consented, to understand how the Service is used. See our [Cookie Policy](/legal/cookie-policy) for details.

***

## 8. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently done so, please contact us immediately at [legal@pitchweave.app](mailto:legal@pitchweave.app) and we will delete the data promptly.

***

## 9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by a prominent notice in the Service. The "last updated" date at the top of this page reflects the most recent revision.

***

## 10. Contact

Big Trouble Labs Ltd
[legal@pitchweave.app](mailto:legal@pitchweave.app)
