What we collect, and why

Last updated October 26, 2026.

This describes what Pitch Companies (the website, and the mobile apps, which show the same site in a native shell) actually collects — no boilerplate about data we don't touch.

What we collect

Account: your email address and password. Passwords are handled entirely by our auth provider, Supabase — we never see or store them in plain text.
Profile: display name, avatar URL, location, bio, and favorite genres/companies — all optional, all editable from your profile page.
Content: ideas, comments, votes, reactions, and poll answers you post, tied to your account. Vote counts and idea text are public by design — this site is a public record.
Reports and blocks: if you report a post or block an account, we keep a record of it so a moderator can review the report and so that content stays hidden from you.
Anonymous backing: if you back an idea without an account, your browser or the app stores a random ID so the same idea can't be backed twice from one device. It isn't linked to you.
Company-rep verification: if you sign up to represent a company, your email's domain is checked against that company's listed website to confirm you work there. We don't collect anything beyond the domain match itself.

What we don't do

No ads, and no ad networks.
No third-party analytics or tracking scripts.
We never sell your email, password, or any individual account's activity in a form that identifies you.
We don't share your account details with the companies listed on the site — they see the same public ideas, votes, and comments everyone else does.

Aggregated data sharing

Separately from the above, we may share or sell aggregated, de-identified usage data — patterns like which industries draw the most votes, not anything traceable to you individually — with third parties. There's a checkbox for it at sign-up (checked by default), and a toggle in your profile settings to turn it off anytime — it's never required to use the site. Full details in Terms & Conditions.

Who processes it

Two infrastructure providers, both under their own privacy policies: Supabase (accounts, database, authentication) and Vercel (hosting). Standard server logs (request timestamps, IP addresses) are generated by this infrastructure the way they are for any website — we don't layer additional tracking on top.

In the mobile apps

The apps don't use advertising identifiers and don't track you across other apps or websites. If you turn on the weekly reminder, the notification is scheduled on your phone; nothing about it is sent to us. Links to other websites open in an in-app browser.

Cookies

One cookie, set by Supabase, to keep you signed in. No advertising or tracking cookies.

Your data, your account

You can delete your account yourself from your profile page, on the website or in the app, or by emailing hello@pitchcompanies.com. Deletion is permanent: your account, profile, ideas, comments, petitions, votes, reactions, reports, and blocks are removed. Companies you added to the directory stay listed without your name. Email us too if you want to see what we have on you or correct it.

Age

Pitch Companies isn't directed at children, and accounts require an email address — it isn't intended for use by anyone under 13.

Changes

If this changes materially, we'll update the date at the top of this page.

Questions? Contact us.