Privacy policy

1. Introduction

Sunfron LLC ("PitchBoards," "we," "us," or "our") operates the PitchBoards app for iPad and Mac and the pitchboards.io website, including the boards and client pages you publish from them (collectively, the "Service"). This policy explains what information we collect, how we use it, who we share it with, and the choices you have.

2. Information we collect

• Account information: name, email address, phone number, brokerage or business name, profile photo, and other details you provide when creating an account or subscribing.
• Payment information: billing address and payment method details for organization plans, processed by Stripe. We never store your full card number. In-app plans are billed by Apple; we receive only your subscription status.
• Content you provide: boards, listing and property details, photos, videos, PDFs and documents, pasted text, prompts you write for AI features, team information, and anything else you upload or create in the Service.
• Content about other people: boards and client pages often contain information about your sellers, buyers and clients (names, contact details, property details), and public lead forms on your pages collect the name, email, phone number and message of people who fill them in. We process this information on your behalf. See Section 12.
• Connected accounts: if you connect Google Drive or Dropbox, we receive the folder listings you browse and the files you choose to import. See Section 11.
• Usage and diagnostic data: how you use the app and website (features used, pages viewed), device type and operating system, IP address and browser details, and crash and performance reports.
• Communications: support requests, feedback (including an optional screen recording you choose to attach), and other correspondence.

3. How we use your information

• Provide, maintain, and improve the Service.
• Provide the AI features described in Section 5.
• Process payments and send purchase confirmations, invoices and receipts.
• Send transactional email: team invitations, account notifications, verification codes, and notices about your subscription.
• Send marketing email about PitchBoards, which you can opt out of at any time (Section 9).
• Respond to your questions, feedback and support requests.
• Understand how the Service is used so we can improve it.
• Measure our own advertising and choose who sees it (Section 10).
• Detect, prevent and address technical issues, abuse and fraud.
• Comply with legal obligations.

4. Sharing of information

We do not sell your personal information for money. We share information only:

• With service providers that process it on our behalf, listed in Section 6.
• With Meta, for advertising measurement, as described in Section 10. You can opt out.
• With your team: if you belong to an organization or team on PitchBoards, its owners and admins can see the account, boards and leads that are part of that workspace, as the collaboration features describe.
• Publicly, when you publish: a board or client page you publish is visible to anyone who has its link. Public pages are not indexed by search engines, but a link can be forwarded. Unpublish a page to take it down.
• When required by law, such as a subpoena or court order, or to protect our rights, safety or property, or yours.
• In a business transfer, such as a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

5. AI features

Some features send content to Anthropic, our AI provider, through its commercial API. Nothing is sent unless you use one of these features, and only what the feature needs:

• Reading listing or collection materials: the PDFs, documents or pasted text you submit, so the app can pull out the facts for a board.
• Improving a prompt: the prompt text you type before pressing Enhance.
• Setting up from your website: the website address you give us during setup, and a screenshot and the text of its first screen, so the setup can tell what your business is and what it is called.

Under Anthropic's commercial terms, this content is not used to train its models by default, and Anthropic deletes API inputs and outputs from its systems within 30 days. The results come back to your account and become part of your content. Widgets and other material generated with your own AI tools and pasted into PitchBoards are not sent anywhere by us.

6. Subprocessors

These providers process customer data on our behalf. All are based in the United States. The full list, with what each one receives, is kept at pitchboards.io/subprocessors.

• Google Cloud / Firebase: database, authentication, file storage, Cloud Functions, app analytics and crash reporting.
• Vercel: hosting for pitchboards.io, the web viewer and the client pages.
• Cloudflare: content delivery and storage for board media (images, video, PDFs, documents).
• Stripe: payments and subscription billing for organization plans.
• Apple: app Store distribution and in-app subscription billing.
• Resend: transactional and notification email.
• Anthropic: aI features: reading listing materials, improving prompts, reading a website during setup.
• Meta Platforms, Inc.: advertising measurement for our own ads (the Meta Pixel and Conversions API on our marketing pages).
• Pexels: stock photo and video search inside the app.
• Google Drive: importing files you choose from your Google Drive (only if you connect it).
• Dropbox: importing files you choose from your Dropbox (only if you connect it).

7. Data security

We protect your information with industry-standard measures, including encryption in transit (TLS) and at rest, access controls on every database record, and server-side checks on every action that changes data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information we will notify you as the law requires.

8. Data retention and deletion

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements.

You can delete your account yourself in the app (Settings → Account → Delete account). Deleting your account removes your profile, boards and their media, leads, settings, and the client pages published from your account; it also cancels a subscription billed through our website. A subscription billed by Apple must be cancelled in your Apple Account's Subscriptions, which the deletion screen reminds you of.

Deleted data leaves our live systems immediately and leaves our backups within 14 days (we keep point-in-time recovery for 7 days and daily backups for 14). Records we must keep by law, such as payment and tax records held by Stripe, are retained for the period the law requires.

9. Your rights and choices

• Access and update: you can view and update your account information at any time in the app.
• Deletion: delete your account in the app as described in Section 8, or ask us at the email below.
• Export: email us and we will send you a copy of the personal information we hold about you.
• Marketing email: every marketing email we send has an unsubscribe link; we honor it within ten business days. Transactional email about your account continues while you have an account.
• California residents: under the CCPA you have the right to know what personal information we collect, to request its deletion, and to opt out of its sale or sharing. We do not sell personal information for money. Our use of the Meta Pixel and Conversions API (Section 10) may count as "sharing" for cross-context behavioral advertising; opt out at Do not sell or share my personal information. We honor Global Privacy Control as the same opt-out. We will not treat you differently for exercising these rights.
• Residents of other states and countries: where your local law grants similar rights, the same requests apply. Contact us at the email below.

10. Cookies, analytics and advertising

The website uses one essential cookie to keep you signed in, and a first-party cookie that remembers which campaign link brought you to the site. Website analytics (Vercel Analytics) are cookieless and aggregate. The app uses Firebase Analytics and Crashlytics for usage and crash reporting tied to your account, so we can fix problems you hit. The app does not track you across other companies' apps or websites and does not use advertising identifiers.

Meta Pixel and Conversions API. Our marketing pages use the Meta Pixel, which sets Meta cookies and tells Meta which page you viewed. When you sign up, apply for a founding spot, book a demo or subscribe, our servers also tell Meta that it happened, with your IP address, browser details, Meta's cookies if present, the campaign link you arrived on and, where we have it, your email address in hashed (SHA-256) form. Meta uses this to measure our ads and to show them to people likely to be interested. The pixel never runs on your boards, client pages or account pages, and your boards and your clients' details are never sent to Meta.

Customer lists. We may upload a hashed list of customer and lead email addresses to Meta, so ads can be kept away from people who already use PitchBoards or shown to people who asked about it. Meta matches the hashes against its own users and deletes the ones that do not match.

Your choice. Opt out at Do not sell or share my personal information, which turns off the pixel and the server events for that browser. A Global Privacy Control signal does the same automatically. To be left off customer lists, email us at the address below. We do not target ads to the EU or UK.

11. Connected accounts

You can connect Google Drive or Dropbox to import files into boards. We access only the folders you browse and the files you choose, use them only to place that content in your boards, and never post anything back to those accounts. You can disconnect either account at any time in the app's settings, which revokes our access.

PitchBoards' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information received from Dropbox is used only as described in this section.

12. Information about your clients and leads

When you put information about other people into PitchBoards (your sellers, buyers, clients, or the people who fill in a lead form on your page), you are responsible for having the right to use it and for honoring their privacy rights, including any consent they need to give before you contact them. We process that information only to provide the Service to you, and we will help you fulfil a request from one of them to access or delete it. Anyone whose information appears in a board or client page can also contact us directly at the email below.

13. Third-party links

Boards, client pages and the website may link to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to read their policies.

14. Children's privacy

The Service is for professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. We will post the updated policy here and change the effective date, and for material changes we will also notify you by email or in the app. Continuing to use the Service after a change takes effect means you accept the updated policy.

16. Contact us

Questions about this policy or your information: support@pitchboards.io or by post at Sunfron LLC, 2108 N St, Ste N, Sacramento, CA 95816.