PitchFirst operates pitchfirst.in. This Privacy Policy explains how we collect, use, store, and protect your personal data under the Digital Personal Data Protection Act, 2023 and applicable Indian law.
1. Data We Collect
Candidates: Full name, mobile, email, city, DOB (optional), qualifications, work history, resume PDF, voice pitch recordings, typing test results, infrastructure details (internet, devices, vehicle, UPI/bank info for badge verification only), professional references, and profile photo.
Employers: Company name, industry, address, work email, phone, GSTIN (optional), billing details (processed via PCI-DSS compliant gateway — card numbers are never stored by us).
Automatically collected: IP address, browser type, device identifiers, pages visited, time on platform — via cookies and server logs for analytics and fraud prevention.
2. How We Use Your Data
To: (a) operate and improve PitchFirst; (b) match candidates with roles; (c) provide employers access to profiles; (d) process payments; (e) send transactional alerts (profile views, shortlisting, interview invites); (f) AI-score voice pitches for Clarity, Confidence, Relevance, and Energy; (g) enforce our Terms; and (h) comply with Indian law.
3. Voice Pitch Data
By recording a pitch you explicitly consent to AI processing as required under Section 6 of the DPDP Act, 2023. Voice data is stored securely and only accessible to employers who unlock your contact. You may delete your pitch at any time from your profile settings.
4. Data Sharing
We do not sell your data. We share only with: (a) employers — limited to profile info you have made visible; (b) payment processors — under strict contractual obligations; (c) cloud providers (AWS/Google Cloud) — hosting only; (d) analytics providers — aggregated, anonymised data only; (e) law enforcement — only when required by law.
5. Data Retention
Personal data is retained for the duration of your account. On deletion, data is purged within 30 days except where Indian law requires retention (e.g., GST records 7 years, transaction logs 5 years). Voice pitches are deleted within 7 days of account closure.
6. Your Rights Under the DPDP Act, 2023
You have the right to: access your data; correct inaccuracies; request erasure; withdraw consent; nominate another individual to exercise rights in case of death/incapacity; and file a complaint with the Data Protection Board of India. To exercise rights email support@pitchfirst.app. We respond within 30 days.
7. Security
We use TLS 1.3 encryption in transit, AES-256 at rest, role-based access controls, and regular security audits. In case of a personal data breach, we notify affected users and the Data Protection Board as required under Section 8(6) of the DPDP Act.
8. Children
PitchFirst is not for users under 18. We delete any minor's account promptly on discovery.
9. Contact
Data Protection Officer: support@pitchfirst.app · PitchFirst, Mumbai, Maharashtra, India.