Security & Data Overview

1. Hosting & Infrastructure

• Hosted using modern cloud infrastructure (Supabase; U.S.-based hosting where available)
• Data encrypted in transit using TLS
• Encryption at rest provided by managed cloud services

2. Data Ownership

• You own all content you create on PITCH — we make no intellectual property claim
• We do not sell user data
• Content is not publicly disclosed unless you explicitly choose to share it via visibility and sharing controls

3. Data Usage

• Your data is processed only to operate the platform: coaching, evaluation, exports, and improvements
• Data is not used for advertising

4. Confidentiality & Visibility Controls

PITCH provides user-controlled visibility settings for content:

• Private — visible only to you
• Group — shared within a specific group
• Organization — shared within your organization
• Public — visible to all platform users

You control which setting applies to each piece of content. For more details on how we handle your data, see our Privacy Policy.

5. Regulated or Sensitive Data

PITCH is not intended for classified, export-controlled (e.g., ITAR), HIPAA-protected, or FERPA-protected data. If your work involves regulated data, please consult your institutional compliance office before using the platform.

6. Access Controls

• All user access requires authentication
• Administrative access is restricted to authorized personnel
• Row-level security policies enforce data boundaries at the database level

7. Certifications

As an early-stage SaaS platform, PITCH does not currently hold SOC 2, FedRAMP, or similar certifications. We follow industry best practices appropriate for our stage and continuously work to improve our security posture.

8. Questions & Contact

If you have questions about our security practices, please contact us:

innovate@headframes.net