Privacy

What is kept

• The sender's account: name, email address, profile photo, and the campaigns and messages they create.
• Each message: the first name the sender typed for you, the recording and its preview image.
• The sender may also keep a short alias and private notes about each message, to tell people apart. Only the sender sees them: they are never shown to you or added to the link, and they are erased with “Delete my answers”, after 180 days, or with the message.
• What you choose to send: your answer, your written or audio reply, whether the sender may follow up, and a “do not contact” request.
• Anonymous playback sessions: which parts of the recording were played and at what speed. No IP address is stored and nothing identifies you or your device.

For how long

• Recordings and replies: deleted 180 days after the message was created. The answer itself stays with the sender.
• Playback sessions: 90 days. After that only anonymous totals per message remain.
• Deleted messages, campaigns and accounts: erased for good 30 days after they are deleted.

How to delete it

• If you received a message: “Delete my answers” at the foot of the message erases your answer, reply and playback sessions at once.
• If you send messages: you can revoke or delete a message or a campaign at any time, and delete your account in Settings.

No tracking

No third-party analytics, advertising or tracking scripts. Fonts are served by Authenpitch itself. A light or dark theme you pick stays in your browser only, and if you pick a language on the public pages, it is kept in a cookie in your browser, only to show Authenpitch in that language. A draft you record on the home page before signing up (the recording, its preview image, the photo you pick and what you type, such as your name) also stays in your browser until you create an account; it is deleted from the browser once it is sent, when you discard it, or after 3 days without use. The home page counts visits and steps of the try-it flow only as anonymous daily totals, without cookies, identifiers or IP addresses.

Operator access

To give support or check for abuse, the Authenpitch operator may view a sender’s account read only for up to 30 minutes, without changing anything. Each access is logged.

Service providers

• Vercel runs the web app in Frankfurt and a server in the EU runs background jobs. Supabase hosts the database in Frankfurt (EU). Mux hosts and streams recordings (its playback analytics are turned off), Cloudflare R2 stores images and nightly database backups in the EU, and Resend sends sign-in and notification emails.
• If the sender adds a link to an answer (for example to book a meeting), it opens the sender's chosen site in a new tab. The link may carry your first name so that site can fill it in; authenpitch does not record whether you open it.
• The sender may connect their own tools (for example Zapier or a CRM) through a signed webhook. Their endpoint then receives the facts of each answer: the first name they typed, their alias, the campaign, the option you chose and whether you sent a written or audio reply or asked not to be contacted. It never receives what you wrote or said, or anything about your device.
• Operator alerts go to the Authenpitch operator through Telegram, outside the EU: counts and error types about the service and, when someone creates a sender account, its email address and interface language. They never include messages, answers, replies, notes or anything about recipients.

Controller and legal notice

Authenpitch is provided by Borja Pérez Marín (tax ID 03925949X), C/ Eras Altas, 5, 45740 Villasequilla (Toledo), Spain, who is the operator of the service and the controller of the personal data described on this page. For any privacy request (to access, correct or delete your data, or any other right) or any question, write to admin@authenpitch.com.