Privacy policy
Effective October 23rd, 2026
PitchGhost is a product of SaidThat, Inc. (“we”, “us”). This policy explains what personal information we handle, why, and what you can do about it. It covers pitchghost.com, the PitchGhost app, our browser extension, our API, and our emails.
Two groups of people will find themselves in here:
- Customers and visitors. You use PitchGhost, or you’re looking at it.
- People who post in public. You wrote something public on a social platform, and one of our customers’ Ghosts found it.
If you have a question this page doesn’t answer, email support@pitchghost.com.
The short version
- We collect what you give us, what your team connects, and public posts from social platforms.
- We don’t sell your account or workspace data.
- When we run ads, we tell the ad platform which ad clicks led to a visit or a sign-up. Nothing from your workspace goes with it.
- We don’t use your data to train AI models, and neither does our AI provider.
- Nothing is posted from your accounts unless someone on your team approves it.
- You can delete your workspace at any time from your settings.
What we collect from customers and visitors
Your account. Your name, work email, job title, company, and role in your workspace. You sign in with an emailed code, Google, or Microsoft. If you use Google or Microsoft, they send us your name, email address, and profile picture.
Billing. Stripe collects and stores your card details. We see your plan, your invoices, your billing address, and the last four digits of your card.
What you put in your workspace. Your company description, your ideal customer, your Ghosts and their goals, notes, ratings, drafted and sent replies, and your conversations with Pitchie, our AI agent.
Social accounts you link. Linking is optional and only needed if you want to respond or act from inside PitchGhost. Finding posts never uses your accounts.
- For Reddit and Microsoft Teams, we store the access tokens those services issue when you approve the connection.
- For LinkedIn and X, linking works through our browser extension. See the next section.
- If you turn on connection sync for a linked LinkedIn account, we request your LinkedIn data export and read your list of connections from it.
Tools you connect. If you connect Slack, Microsoft Teams, Discord, HubSpot, Salesforce, Apollo, Folk, or HighLevel, we store the access that tool grants us. For CRMs, we read contact and company records so we can match them to social profiles, and we write Finds, notes, and profile links back.
AI assistants you connect. If you connect an AI assistant to PitchGhost, it can read and act on your workspace with the permissions you approve. We record which assistant you connected and the requests it makes. The assistant’s maker handles what it receives under its own terms.
How you use the product. Pages you view, features you use, your IP address, your approximate location based on that IP address, your browser and device, and error reports. On our website and in the app, we also record sessions so we can replay what happened when something breaks. A session recording shows what was on your screen, apart from password fields.
Emails we send you. We record whether a Finds email was opened and which links were clicked, along with the IP address and browser that did it.
When you contact us. Whatever you send through the contact form, the support chat, email, or a booked call.
The browser extension
The PitchGhost extension lets your team interact on LinkedIn and X as themselves, and adds PitchGhost controls to LinkedIn profile pages.
When you link a LinkedIn or X account, the extension collects that site’s cookies from your browser, along with basic browser details and your approximate location. It sends them to us, and we store them encrypted. We use them for one purpose: to carry out the actions your team approves. The extension keeps them up to date while the account stays linked. It doesn’t read cookies from any other site, and it doesn’t track your browsing.
On a LinkedIn profile page, the extension reads the name on the page so you can add that person to a Ghost or look up their work email.
You can unlink an account at any time, which deletes the stored cookies.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Public posts and the people in them
PitchGhost reads public posts on social platforms, such as LinkedIn, X, Reddit, and Facebook, and shows our customers the ones that match what they asked for. We call a matching post a Find.
What we collect. The post or comment, when and where it was posted, and the public profile details attached to it: name or username, headline or job title, employer, location, follower count, profile picture, and profile link. We only collect what anyone can see without being connected to you. We don’t collect private messages or anything behind a privacy setting. We don’t go looking for sensitive information, such as health details, but a public post contains whatever its author chose to publish.
Where it comes from. The platforms themselves and data providers that supply public posts from them.
What we do with it. We check each post against a customer’s goals, using AI. We show the matches to that customer’s team, send them to the tools that team connected, and help the team draft a reply. A person on the team decides whether to send it. We also offer some customers the same public posts and profiles through our API.
Work email and employee lookups. A customer can ask us to find the work email address for a public profile, or the people who work at a company. We pass the profile or company link to a lookup provider and return the result. We cache that result for up to seven days.
What we don’t do. We don’t build advertising profiles, and we don’t offer PitchGhost for decisions about anyone’s credit, employment, housing, or insurance.
Want us to ghost you? Email support@pitchghost.com with a link to your profile. We’ll delete what we hold about you. You don’t need an account, and it’s free.
How we use information
We use what we collect to:
- Run PitchGhost: find posts, score them, deliver them, and carry out the actions your team approves.
- Run your account, bill you, and answer you when you ask for help.
- Keep the service secure and stop abuse.
- Fix bugs and decide what to build next.
- Email you about your account and your Finds. If you’re a customer, we also send product news, and each of those emails has an unsubscribe link.
- Meet our legal obligations.
We also use totals that don’t identify anyone, such as how many posts our Ghosts read in a week, to improve PitchGhost and to describe it.
How we use AI
AI does a lot of the reading at PitchGhost. To score a post and draft a reply, we send the post, the public profile details attached to it, and the relevant parts of your workspace (such as your company description and the Ghost’s goal) to Google’s Gemini models. Requests travel through Cloudflare.
We don’t collect, use, or sell personal information to train large language models. Google’s terms bar it from using this data to train its models without our permission, and we haven’t given it. Google and Cloudflare can hold requests for a short time for caching, debugging, and abuse monitoring.
AI at PitchGhost recommends. It doesn’t decide anything about you that has a legal or similarly serious effect.
Who we share it with
We don’t sell your account or workspace data. The only information we share for advertising is the ad click data described under Cookies and tracking.
We share information with:
- Your team and the tools they connect. Finds go where your workspace sends them, such as Slack or your CRM. Those tools handle the data under their own terms.
- Vendors who help us run PitchGhost. They can only use the data to do that work for us.
- Authorities, when the law requires it, or when we need to protect someone’s safety or our legal rights.
- A buyer or successor, if PitchGhost is acquired or merged. This policy keeps applying to your data until you’re told otherwise.
Our vendors:
| Vendor | What they do for us |
|---|---|
| Supabase | Database and sign-in |
| Vercel | App hosting |
| Cloudflare | Hosting, storage, security checks, AI routing |
| AI models, sign-in with Google, address lookups, ad measurement | |
| Microsoft | Sign-in with Microsoft |
| Stripe | Payments |
| PostHog | Product analytics and session recording |
| Plausible | Website analytics |
| Sentry | Error reports |
| Resend | Email delivery |
| Featurebase | Support chat, feedback, and changelog |
| Cal.com | Booking calls |
| RocketReach | Work email and company employee lookups |
| Social data providers | Public posts from social platforms |
| A Reddit engagement provider | Reddit comment orders you place |
| ip-api | Approximate location for the browser extension |
Cookies and tracking
On pitchghost.com. We use PostHog and Plausible to count visits and see which pages people read. Both run through our own domain. They record the pages you view, where you came from, your browser and device, and your approximate location based on your IP address. PostHog also records sessions, as it does in the app.
In the app. We use cookies and browser storage to keep you signed in, to protect the sign-in form from bots, and for the analytics and session recording described earlier.
Advertising. We sometimes run ads on Google. When you arrive by clicking one, Google adds a click ID to the link, and we keep it with your visit. If you go on to sign up or book a call, we send that click ID back to Google with what happened. Google uses it to measure our ads and decide who sees them next, under its own privacy policy. We don’t send Google your Finds, your Ghosts, or anything else from your workspace.
Your choices. If your browser sends a Global Privacy Control signal, we don’t send your click ID to Google. You can also email support@pitchghost.com to opt out, or turn off ad personalization in your Google ad settings. We don’t respond to Do Not Track signals, because there’s no agreed standard for them.
How long we keep it
- Your workspace stays until you delete it. An owner can delete the whole workspace from settings, which removes its Ghosts, Finds, contacts, linked accounts, and conversations from our systems.
- Linked accounts are deleted when you unlink them.
- Conversations with Pitchie stay until you delete them.
- Public posts we haven’t matched to a customer are deleted within seven days.
- Work email and employee lookup results are deleted within seven days.
- Billing records are kept as long as tax and accounting law requires.
- Analytics, error reports, and support history held by our vendors expire on their schedules. We delete them sooner if you ask.
Backups can take a little longer to clear.
How we protect it
Data is encrypted in transit and at rest. The cookies and tokens for social accounts you link get a second layer of encryption inside our database. Access to production systems is limited to the people who need it.
No system is perfectly secure. If a breach affects your information, we’ll tell you and the relevant authorities as the law requires.
Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you and give you a copy.
- Correct it.
- Delete it.
- Stop using it for a particular purpose, including marketing.
Email support@pitchghost.com. We’ll confirm it’s you, usually by replying to the email address we have on file, and answer within 30 days. Someone you’ve authorized can ask on your behalf. We won’t treat you differently for asking.
If your employer’s workspace holds information about you, ask them first. They decide what goes in their workspace, and we handle it on their behalf.
If you live in the United States. Many states give residents the rights listed here, plus the right to opt out of the sale of personal information, targeted advertising, and certain profiling. We don’t do that kind of profiling. The ad click data we send to Google can count as targeted advertising, or as “sharing” under California law, and Cookies and tracking explains how to opt out. If we decline your request, reply to tell us you want to appeal and we’ll review it within 45 days. If the appeal fails, you can complain to your state’s attorney general.
If you live in the EU, the UK, or Switzerland. We rely on these legal grounds: performing our contract with you, our legitimate interests in running and improving PitchGhost and in showing our customers public posts relevant to their business, your consent where we ask for it, and our legal obligations. You can object to processing based on legitimate interests, and you can withdraw consent at any time. You can also complain to your local data protection authority.
Where your information goes
We’re based in the United States, and so are our main systems. If you use PitchGhost from another country, your information is processed in the United States and in the other countries where our vendors operate. Where the law requires it, we rely on safeguards such as standard contractual clauses in our vendors’ data processing terms.
Children
PitchGhost is for businesses. It isn’t meant for anyone under 18, and we don’t knowingly collect information from them. If you think we have, email us and we’ll delete it.
Changes to this policy
When we change this policy, we update the effective date at the top. If a change is significant, we’ll email customers or post a notice in the app before it takes effect.
Contact
SaidThat, Inc.
3423 Piedmont Road NE
Atlanta, GA 30305
United States