Privacy Policy

Last updated: August 2026

1. Data We Collect

We collect your email address and password (hashed) for authentication. When you use PitchMatrix, you may upload candidate CVs and enter screening notes. We process this data solely to provide our services.

2. Candidate Data & Consent

Before processing any candidate CV, you must confirm that the candidate has consented to their data being processed for recruitment purposes. PitchMatrix acts as a data processor on your behalf. You remain the data controller and are responsible for obtaining valid consent from candidates.

3. How We Use Data

Uploaded CVs are processed using AI to extract structured candidate profiles. This data is stored securely and is only accessible to you. We do not share, sell, or use candidate data for any purpose other than providing our services to you.

4. Data Retention & Deletion

When you delete a project, all associated candidate data, CV files, extracted profiles, and email pitches are permanently deleted. This deletion is irreversible and applies to both our database records and file storage.

5. Data Security

All data is encrypted in transit (TLS) and at rest. Access to candidate data is strictly controlled — each user can only view their own projects and candidates. We follow industry best practices for data security.

6. Your Rights

Under GDPR, you have the right to access, correct, or delete your personal data at any time. You can delete your projects and associated data directly through the application. For account deletion requests, please contact us.

7. Cookies

We use essential session cookies for authentication. We do not use tracking or advertising cookies.