Privacy Policy

1. Who We Are

PulseBack LLC (“we,” “us,” or “our”), an Oklahoma limited liability company, operates PitchPack, a software platform located at pitchpack.tech. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service. If you have questions, contact us at info@pitchpack.tech.

2. Information We Collect

a. Account and Identity Information

When you register for an account, we collect your email address and password (stored securely via Supabase Auth). In your profile settings, you may optionally provide your full name, company name, legal entity name, and phone number. This information appears in lender packages you generate.

b. Financial Profile Information

You may optionally enter financial profile information including your credit score, annual income, monthly debt obligations, and liquid reserves. This information is used solely to populate lender packages and AI-generated narratives. We do not use this information to make credit decisions or to evaluate your creditworthiness.

c. Deal and Property Data

When you create a deal, we collect property details (address, type, investment strategy), financial inputs (purchase price, ARV, rehab cost, loan parameters, rental projections), and any notes you add. This data is used to generate PDFs, calculate metrics, and produce AI narratives.

d. Lender Contact Information

When you add lenders to your contact list or send lender packages, we store the lender’s name, email address, and phone number that you provide. You represent that you have the right to provide this contact information and that sending emails to these contacts complies with applicable law (including CAN-SPAM).

e. Usage and Technical Data

We may collect technical information such as your IP address, browser type, device information, pages visited, and actions taken within the Service. This is used to maintain service security, diagnose errors, and improve the platform.

f. Payment Information

Payments are processed by Stripe. We do not store your card number, CVV, or full payment details. Stripe may share billing metadata (last four digits, expiration date, subscription status) with us to manage your account. Stripe’s use of your data is governed by their Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and provide the Service
• Generate lender package PDFs and AI-assisted deal narratives
• Send lender package emails on your behalf to contacts you specify
• Process payments and manage your subscription
• Respond to your support inquiries
• Send you service-related notifications (e.g., billing receipts, material policy updates)
• Detect, investigate, and prevent fraud, security incidents, and abuse
• Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising or to build advertising profiles.

4. How Your Data Is Shared

a. Infrastructure and Hosting — Supabase

Your account data, profile information, deal data, and lender contacts are stored in a Supabase-hosted PostgreSQL database. Supabase also provides authentication services. Data is stored in Supabase’s secure cloud infrastructure. Supabase’s privacy practices are described at supabase.com/privacy.

b. AI Narrative Generation — OpenAI

When you generate an AI deal narrative, your deal’s property details, financial metrics, investment strategy, and portions of your investor profile (name, company, credit score, liquid reserves) are transmitted to OpenAI’s API to produce the narrative. OpenAI processes this data subject to their Privacy Policy. By using the AI narrative feature, you consent to this data transfer. Do not include information you are not comfortable sharing with OpenAI.

c. Email Delivery — Resend

When you send lender packages, the lender’s name and email address, along with the email body, are transmitted to Resend for delivery. Resend’s privacy practices are described at resend.com/legal/privacy-policy.

d. Payment Processing — Stripe

Subscription and payment data is handled by Stripe. We share your email address and subscription tier with Stripe to manage billing.

e. Legal Requirements

We may disclose your information to comply with a legal obligation, court order, or government request, or to protect the rights, property, or safety of PulseBack LLC, our users, or the public.

f. Business Transfers

If PulseBack LLC is acquired, merged, or its assets are transferred, your data may be transferred as part of that transaction. You will be notified via email of any such change in ownership.

5. Cookies and Tracking

PitchPack uses session cookies and local storage to maintain your authenticated session. These are necessary for the Service to function and cannot be disabled without preventing you from logging in. We do not use third-party advertising cookies or tracking pixels.

6. Data Retention

We retain your account data and deal data for as long as your account is active. If you cancel your subscription or request account deletion, we will delete your data within 90 days, except where retention is required by law or to resolve pending disputes. You may request deletion of your account and associated data at any time by emailing info@pitchpack.tech.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), row-level security policies on the database, hashed passwords (managed by Supabase Auth), and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights under applicable privacy law, including:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate or incomplete information (via your account settings)
• Deletion: Request deletion of your account and personal data
• Portability: Request an export of your deal data in a machine-readable format
• Opt-out of non-essential communications: Unsubscribe from marketing emails at any time

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of sale (note: we do not sell personal information).

To exercise any of these rights, contact us at info@pitchpack.tech. We will respond within 30 days.

9. Children’s Privacy

PitchPack is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, contact us immediately at info@pitchpack.tech and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via your registered email address and update the “Last updated” date at the top of this page. Your continued use of the Service after any update constitutes acceptance of the revised policy.

11. Contact Us

For questions, data requests, or privacy concerns, contact us at: