Privacy
Your deck stays between us.
A pitch deck is one of the most sensitive documents a founder owns. This page explains exactly what we collect, where it goes, and how long we keep it.
The short version. We use your deck only to prepare your discovery call and, if you work with us, to help with your raise. Only the two PitchCraft founders can open it. It is never used to train AI models. We won't share it, publish it, or use it as an example without your written permission. We delete it whenever you ask, and automatically 12 months after we last spoke.
Who we are
PitchCraft is a brand of Startup Labs Global Innovation Ltd, an English company operating through its registered branch in the Dubai International Financial Centre (DIFC) ("PitchCraft", "we"). Branch address: IH-00-01-01-OF-01, Level 1, Innovation One, Dubai International Financial Centre, Dubai, UAE. Startup Labs Global Innovation Ltd is the data controller for the personal data described here. Contact us about anything on this page at privacy@wearepitchcraft.com.
What we collect
- When you book a call: your name, email, the time you chose, and anything you add to the booking.
- When you send your deck: the deck itself (or the link you share), plus your name, email, startup name and funding stage.
- When you visit the site: anonymous usage data, such as which page you came from and which buttons you clicked. See Analytics below.
Why we use it, and our lawful basis
- To prepare and hold your discovery call, and to deliver the retainer if you join. Steps taken at your request and performance of a contract (UK GDPR Art. 6(1)(b)).
- To email you about PitchCraft beyond your call, only if you ticked the box saying so. Consent (Art. 6(1)(a)); unsubscribe any time.
- To keep the service secure and understand how the site is used. Legitimate interests (Art. 6(1)(f)), balanced against your rights.
Your deck, specifically
Your deck is uploaded through our form provider and moved straight into access-controlled storage that only the two PitchCraft founders can open. We then delete it from the form provider. It is never stored in our spreadsheets, never placed behind a public link, and never moved onto unencrypted devices.
To prepare for your call, we may run your deck through an AI model provider under a data-processing agreement that bars them from training on it. Your deck is not used to train any AI model, ours or theirs.
Decks often contain other people's personal data, such as employees, customers or investors. We process that data only for the purpose above and hold it under the same controls.
Who else handles your data
We use a small number of providers to run the service. Each is bound by its own data-processing terms.
| Provider | What for | What it touches |
|---|---|---|
| Cal.com (EU instance) | Booking your call | Name, email, booking details |
| Tally | Deck upload form | Name, email, deck, form answers |
| Make | Moving your deck to storage | Deck and details, in transit only |
| Google (Drive, Sheets) | Deck storage, booking records | Deck file; name, email and status |
| OpenAI | Helping us review your deck | Deck contents, at review time only |
| PostHog (EU) | Anonymous site analytics | Pages visited, buttons clicked |
| Cloudflare | Hosting this website | Site traffic, IP address |
| Zoho Mail (US) | Email with you | Name, email, messages |
International transfers
Some of these providers process data outside the UK and EEA. Where they do, the transfer relies on an adequacy decision, the UK International Data Transfer Agreement, or EU Standard Contractual Clauses.
How long we keep it
We keep your deck and personal data for 12 months after your last interaction with us (a booking, upload, call, email or payment), then delete it, unless you ask us to delete it sooner or the law requires us to keep it longer. If you become a client, we keep billing records for as long as tax law requires.
Some providers hold a recoverable copy in a trash or backup for a short time after deletion. Those copies clear within a further 90 days.
Analytics
We use PostHog, hosted in the EU, in a mode that sets no cookies and stores nothing on your device. We see which pages are visited and which buttons are clicked, without recognising you between visits. There is no advertising tracking on this site.
Your rights
You can ask to access, correct, delete, restrict or move your data, or object to how we use it. Email privacy@wearepitchcraft.com and we will respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes, we'll update this page and the date below.