Privacy Policy

When you create an account, we collect your email address and name. If you sign in via Google or Microsoft, we receive your name and email from your OAuth profile. If you sign in with email and password, we store a hashed version of your password. We never see or store your plaintext password.

When you use the Service, you provide business information including company name, founder names, contact information, financial data (revenue, raise amount, projections), market positioning, competitive landscape, team details, and narrative elements (customer stories, founding moments). If you upload an existing pitch deck (.pptx or .pdf), we extract text and structural data from it.

This is the core of what we do. We use this information to generate your pitch deck and nothing else.

When you purchase credits, payment is processed entirely by Stripe. We do not see, store, or have access to your credit card number, bank account, or other payment credentials. Stripe provides us with a transaction ID and confirmation of payment. Stripe's privacy policy governs their handling of your payment data: stripe.com/privacy

We track credit transactions (purchases, coupon redemptions, generation usage) and API token consumption for billing and cost management. This data is linked to your account.

We do not use analytics or tracking tools (no Google Analytics, no pixel trackers, no fingerprinting). We do not serve ads. We do not set cookies beyond what is required for your login session. We do not collect device information, browsing history, or behavioral data.

Your pitch deck content (form inputs and uploaded deck text) is sent to Anthropic's Claude API to generate and evaluate deck content. Under Anthropic's Commercial Terms of Service, Anthropic does not train its AI models on customer content submitted through the API. Anthropic processes your data solely to generate the requested output and does not retain it beyond what is necessary to deliver the response. Anthropic's privacy practices are governed by their Commercial Terms of Service and Data Processing Addendum.

Your account data, pitch deck content, generated output, and uploaded files are stored in a Supabase-hosted PostgreSQL database and file storage, which runs on Amazon Web Services (AWS) infrastructure. Data is encrypted at rest and in transit. Row-level security policies ensure that each user can only access their own data.

Credit card payments are processed by Stripe. We receive only a transaction confirmation and session ID. We never see or store your payment credentials. See Stripe's privacy policy: stripe.com/privacy

The Pitch Deck Builder application runs on Railway's hosting infrastructure. Railway processes your requests but does not independently store your data beyond server logs, which are retained for a limited period for operational purposes.

Email verification and password reset emails are sent via Resend's SMTP service from noreply@letsbuilditbetter.com. Resend processes your email address solely for email delivery.

If you choose to sign in with Google or Microsoft, those services process an authentication token confirming your identity. They are informed that you signed in to our Service. We receive only your name and email address from them.

You can:

• Access your data at any time by logging into your account
• Delete individual decks from the dashboard
• Request a copy of all data associated with your account
• Request deletion of your entire account and associated data

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. Our legal basis for processing your data is the performance of our contract with you (delivering the Service you signed up for). You may also lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of your personal information. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.