Privacy Policy

1. Introduction

Crow Enterprises, Inc., doing business as Pitchcrow (“Pitchcrow,” “we,” “us,” or “our”), provides an AI platform that helps investment banking teams plan, write, and generate presentation decks and spreadsheets. This Privacy Policy describes how we collect, use, and share personal information when you use our websites, applications, and services, including the Pitchcrow dashboard at app.pitchcrow.com (collectively, the “Service”).

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page with an updated effective date.

2. Scope

This Privacy Policy applies to personal information we process as a business. Where we process content that our customers upload or generate within the Service (“Customer Content”) on behalf of a customer organization, we act as a processor/service provider, and that processing is governed by our agreement with the customer, including our Data Processing Addendum where applicable. If you use Pitchcrow through your employer, your employer’s privacy practices also apply, and requests about Customer Content should generally be directed to your organization’s administrator.

3. Information We Collect

Account information. Name, email address, password credentials or single sign-on identifiers, job title, organization name and workspace membership, role and permissions, locale, and plan and billing details.

Customer Content. Files and data you upload to a space’s file repository, decks you upload to your organization’s template library, decks, slides, and sheets generated or edited in the Service, spreadsheet and chart data, comments, and messages you exchange with the Pitchcrow assistant, including voice dictation audio and its transcriptions.

Payment information. Payments are processed by a third-party payment processor. We receive transaction records and billing details but do not store full payment card numbers.

Device and log information. IP address (used to infer general city/country location), browser type and version, operating system, device identifiers, and timestamps of requests.

Usage information. Login times, features used, pages viewed, deck and space activity metadata, settings changes, and engagement with our emails.

Communications. Support requests, feedback, and other correspondence with us.

Information from third parties. Business contact enrichment data (such as company size and industry) and information from sign-in providers you connect (such as Google), limited to what you authorize.

4. How We Use Personal Information

We use personal information to:

• provide, operate, secure, and maintain the Service;
• authenticate users and prevent fraud, abuse, and unauthorized access;
• process transactions and manage billing;
• respond to support requests and communicate with you about the Service;
• perform product research and development and improve the Service;
• market and promote Pitchcrow, subject to your right to opt out;
• comply with legal obligations and enforce our agreements.

We do not sell personal information. You can unsubscribe from promotional emails using the link in any such email or by contacting privacy@pitchcrow.com. Transactional messages about your account or the Service cannot be opted out of while you maintain an account.

5. AI Processing and Model Training

Pitchcrow uses large language models and other AI technologies to generate and edit decks, answer questions about your files, and transcribe dictation.

• We do not use Customer Content to train AI models, and we do not permit our AI model providers to do so. Customer Content is sent to model providers solely to generate responses for you.
• Our model providers are contractually bound to zero data retention or equivalently restrictive terms: prompts and outputs are not retained by them beyond what is required to return a response, and are not used to train their models.
• We retain prompts, outputs, and related traces within our own systems to operate the Service (for example, so you can see your conversation history) and to debug failures. Access is restricted as described in Section 6.

6. Employee Access to Customer Content

Pitchcrow personnel do not access Customer Content except (a) with your permission (for example, to investigate a support request), (b) as necessary to maintain the security and integrity of the Service, or (c) where required by law. Access is limited to personnel who need it for the specific task and is logged.

7. Website, Cookies, and Analytics

When you visit our websites, we automatically collect IP addresses, general location, browser and operating system information, and page-view history. We use this information to administer and improve our websites and understand how visitors use them, based on our legitimate interest in doing so.

We use cookies and similar technologies for authentication, preferences, and analytics. We use product analytics and session replay tooling configured in privacy mode: text inputs and Customer Content are masked in session recordings. You can control cookies through your browser settings.

8. How We Share Personal Information

We share personal information only with service providers (“subprocessors”) that help us deliver the Service, and only for the purposes described in this policy. Our current subprocessors include:

A current list of subprocessors is available on request at privacy@pitchcrow.com. We may also disclose personal information: (a) at your direction; (b) to comply with law, regulation, legal process, or enforceable governmental request; (c) to protect the rights, property, or safety of Pitchcrow, our users, or the public; or (d) in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations.

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

9. International Data Transfers

We are established in the United States, and personal information may be transferred to, stored, and processed in the United States and other countries where we or our subprocessors operate. Where personal data originating in the EEA, Switzerland, or the UK is transferred to a country not deemed to provide adequate protection, we rely on standard contractual clauses as recognized under EU and UK data protection law, or another lawful transfer mechanism.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, role-based access controls, and access logging. We maintain a security compliance program aligned with SOC 2. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Data Retention

We retain personal information only as long as needed for the purposes described in this policy, unless a longer period is required to comply with legal obligations, resolve disputes, or enforce our agreements. Customer Content is retained for as long as the customer’s account is active and is deleted within a reasonable period after account closure or upon verified deletion request, subject to backup cycles and legal retention requirements. Data retained solely for legal purposes is restricted from other processing.

12. Your Rights (EEA, Switzerland, and UK)

Depending on your location, you may have the right to: be informed about our processing; access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; withdraw consent at any time (without affecting prior processing); and object to automated decision-making that produces legal or similarly significant effects. We do not make such automated decisions about you.

Our legal bases for processing are: performance of a contract (providing the Service), our legitimate interests (such as securing and improving the Service) where not overridden by your rights, consent where we ask for it, and compliance with legal obligations.

To exercise these rights, contact privacy@pitchcrow.com. You also have the right to lodge a complaint with your data protection authority.

13. U.S. State Privacy Rights

If you reside in California or another U.S. state with a comprehensive privacy law, you may have the right to: know what personal information we collect, use, and disclose; access and receive a copy of it; correct inaccuracies; delete it; opt out of “sale” or “sharing” of personal information; limit use of sensitive personal information; and appeal a denied request.

We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than those permitted by law. We will not discriminate against you for exercising your rights.

To exercise these rights or appeal a decision, email privacy@pitchcrow.com. Under California Civil Code Section 1798.83 (“Shine the Light”), we do not share personal information with third parties for their own direct marketing purposes.

14. Verifying Rights Requests

We take reasonable steps to verify your identity before acting on a rights request, which may include requiring you to log in, confirming account details, or requesting additional information. At minimum we ask for your name, email, and state/country. An authorized agent may submit a request on your behalf with written authorization and verification of your identity. We acknowledge requests within 10 business days and respond within 45 calendar days, extendable to 90 days with notice. We retain records of rights requests for at least 24 months.

15. Children

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact privacy@pitchcrow.com and we will delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date, and where appropriate we will notify you by email or in the Service.

17. Contact Us

Email: privacy@pitchcrow.com
Crow Enterprises, Inc. d/b/a Pitchcrow, 251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808