Who We Are
PitchMonster is run by ONBOARD SOFTWARE LTD ("we", "us", "our"), a company registered in England and Wales under company number 13081905, with its registered office at 89 Addison Road, Bromley, England, BR2 9RS.
This policy covers two things:
- our website, pitchmonster.io (the "Website"); and
- the PitchMonster sales training platform at app.pitchmonster.io, including AI role-plays, call scoring and coaching (the "Platform").
For any privacy question or request, email us at info@pitchmonster.io.
Our Role: Controller or Processor
Data protection law treats us differently depending on whose data it is.
When we are the controller
We decide how and why we use personal data about Website visitors, people who book a demo or contact us, the people who manage a customer account (for example, admins and billing contacts), and people who receive our marketing.
When we are the processor
When a company buys PitchMonster for its team, that company (our "Customer") is the controller of the data its users create on the Platform: role-play recordings, transcripts, scores, feedback and any content or calls it uploads. We process that data only on the Customer's instructions, under a data processing agreement ("DPA") signed with that Customer.
If you use PitchMonster through your employer and want to access, correct or delete your Platform data, contact your employer first. We will help them answer your request.
Data We Collect
On the Website
- Contact and demo details you give us: name, work email, phone number, company, job title and team size.
- Usage data: IP address, browser and device type, pages visited, time on page, and the site or ad that brought you to us.
- Cookie data, described in the Cookies section below.
On the Platform
- Account data: name, work email, role, team and login details (including via SSO).
- Session data: audio and video recordings of AI role-plays, transcripts, AI scores and written feedback.
- Content the Customer uploads, such as call recordings, scripts, playbooks and scenarios.
- Product usage data: which features you use, when, and for how long.
Billing and support
- Billing contact and invoice details. Card payments go to our payment processor, not to us.
- Messages you send to our support and sales teams.
We do not ask for and do not want special category data (for example, health data) or government ID numbers. Please do not put them in role-plays or uploaded content.
How We Use Data and Our Legal Basis
Under UK GDPR and EU GDPR we need a legal basis for each use. Ours are:
- To run the Platform for Customers (hosting sessions, transcribing, scoring, feedback, reports for managers). Basis: performance of our contract with the Customer, and the Customer's instructions under the DPA.
- To answer demo requests and enquiries, and to manage customer accounts and billing. Basis: steps taken at your request before a contract, and performance of the contract.
- To keep the Website and Platform secure, fix problems and prevent abuse. Basis: our legitimate interest in running a secure service.
- To understand how the Website is used and to measure our ads. Basis: our legitimate interest, and your consent where the law requires it for cookies.
- To send product news and marketing emails to business contacts. Basis: legitimate interest, or consent where the law requires it. Every email has an unsubscribe link.
- To meet legal duties, such as tax and accounting records. Basis: legal obligation.
How We Use AI
The Platform uses AI to play the buyer in role-plays, to turn speech into text, and to score each session against the rubric the Customer sets. Reps and their managers see the scores and feedback.
Scores are coaching feedback. We do not use them to make decisions that have legal or similarly significant effects on you. How a Customer uses scores inside its own business (for example, in performance reviews) is that Customer's decision, made under its own policies.
We never use your role-plays, calls or content to train AI models for other customers.
Where We Store and Process Data
We host the Platform and store Customer Platform data in data centres in the European Economic Area (EEA). This is the default for every Customer.
Some of our subprocessors are based in, or provide support from, countries outside the UK and EEA. When personal data leaves the UK or EEA, we protect it with one of these safeguards:
- an adequacy decision, including the EU-US Data Privacy Framework and its UK Extension where the provider is certified;
- the European Commission's Standard Contractual Clauses (SCCs); or
- the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the SCCs, for data covered by UK GDPR.
Website analytics and advertising tools (such as Google and Meta) may process Website visitor data in the United States under their own safeguards. This does not apply to Customer Platform data.
Customers can ask us for a copy of the safeguards that apply to their data by emailing info@pitchmonster.io.
How Long We Keep Data
- Customer Platform data: for as long as the Customer's contract runs. When it ends, we delete or return it as set out in the Customer's DPA.
- Billing records: six years after the end of the financial year they relate to, as UK tax law requires.
- Everything else: only for as long as we need it for the purposes in this policy, or as the law requires.
How We Protect Data
We encrypt data in transit and at rest, limit staff access to the people who need it, and support single sign-on (SSO) for Customer accounts. Customers can ask for our security documentation by emailing info@pitchmonster.io.
No system is perfectly secure. If a breach affects your personal data, we will tell the Customer and the relevant regulator as the law requires.
Your Rights Under UK GDPR and EU GDPR
If you are in the UK or the EEA, you have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use your data;
- object to our use of your data, including for direct marketing;
- receive your data in a portable format; and
- withdraw consent at any time, where we rely on consent.
To use these rights, email info@pitchmonster.io. We reply within one month. We may ask you to confirm who you are first. For Platform data, we will pass your request to your employer, who controls that data.
You can also complain to a data protection regulator. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EEA it is the regulator in the country where you live or work.
Your Rights in the United States
If you live in California or another US state with a consumer privacy law, you can ask us what personal information we hold about you, ask us to correct or delete it, and opt out of its sale or sharing for targeted advertising.
We do not sell personal information for money. Our advertising cookies may count as "sharing" under California law. To opt out, email info@pitchmonster.io. You can also choose "Decline" on our cookie notice. We will not treat you differently for using these rights.
SMS / Text messaging
Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. Any other mentions in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. If you wish to be removed from receiving future communications, you can opt out by texting STOP.
Children's Privacy
PitchMonster is a business tool and is not meant for anyone under 16. We do not knowingly collect data from children. If you think a child has given us personal data, email info@pitchmonster.io and we will delete it.
Links to Other Sites
Our Website links to sites we do not run. Their own privacy policies apply when you visit them, and we are not responsible for their content or practices.
Changes to This Policy
We may update this policy. We will post the new version on this page and change the date at the top. If a change materially affects how we handle Customer Platform data, we will tell Customers by email before it takes effect.
Contact Us
For questions about this policy or your data:
By email: info@pitchmonster.io
By post: ONBOARD SOFTWARE LTD, 89 Addison Road, Bromley, England, BR2 9RS.