Privacy Policy

Pitchk is a digital service operated by ALWALEED KHALID ALKHLAIWI Establishment Commercial, with its general place of business in Jeddah, Kingdom of Saudi Arabia. The establishment is the controller of personal data collected directly through the Pitchk website, services, accounts, and support channels.

This policy applies to visitors and customers who create an account, upload a deck or optional video, purchase an analysis, or contact support. It does not govern independent websites or services reached through an external link; those services apply their own notices.

Account data means your email address and sign-in session information. Project content means the project information you enter, your deck, your optional video, and material you send to support. Analysis output means the classification, scores, findings, questions, and revision plan produced for you.

Processing means any operation involving data, including collection, temporary storage, reading, classification, analysis, secure transfer to a provider, or deletion. Service provider means a technical organization that performs a defined function for Pitchk.

We collect the minimum reasonably needed to create your account, perform the analysis, protect the service, complete payment once enabled, and respond to you. The exact information depends on how you use Pitchk.

• Account data: email address, verification status, and secure session identifiers.
• Project data: project name, city or market, stage, sector, deck language, analysis purpose, and requested report language.
• Files: a PDF, PPT, or PPTX deck; an MP4 or MOV video if you choose to attach one; and file name, type, and size.
• Analysis data: document type, readability result, extracted evidence, scores, findings, contradictions, questions, and revision plan.
• Transaction data: amount, status, timestamp, reference, and general payment method. We do not store a full card number or card security code.
• Support data: your message, account email, transaction reference where relevant, and attachments you choose to send.
• Necessary technical and security data: limited network information for abuse controls, browser and device information, error logs, and request times.

Most information comes directly from you when you enter your email, complete project details, upload files, confirm processing, or contact us. Some information is generated automatically as the service operates, such as session state, upload progress, error diagnostics, and the analysis output.

Once payments are enabled, the payment provider may return the transaction confirmation, reference, and status required for reconciliation, fulfilment, and refunds. We will never ask you to email or WhatsApp full card information or a bank OTP.

We do not use information merely because it is available. Each category is tied to an operational purpose connected to the service you requested.

• Create your account, verify your email, and provide passwordless sign-in.
• Temporarily preserve journey progress so you do not have to repeat steps within the same session.
• Check file readability and classify the document before producing a potentially misleading score.
• Apply the Pitchk framework, build the evidence ledger, calculate scores, and generate the requested report.
• Evaluate delivery separately when you attach an optional pitch video.
• Confirm payments, prevent duplication, reconcile refunds, and manage disputes once payments are enabled.
• Prevent abuse, automated misuse, and fraud; diagnose faults; and improve reliability.
• Answer support, privacy, refund, and complaint requests.
• Meet applicable Saudi legal and accounting duties and protect legal rights.

We process information necessary to perform the service you request. We also rely on your consent where the journey expressly asks you to approve processing of files for that analysis. Limited processing may support platform security, fraud prevention, and service integrity where permitted and proportionate.

We may retain or disclose defined information to comply with law, respond to a valid request from a competent authority, evidence a transaction, or protect Pitchk and its users. Where consent is the relevant ground, you may withdraw it for future processing. Withdrawal does not make earlier lawful processing invalid or override a mandatory retention duty.

A file is first staged temporarily in your browser while you prepare the request. When cloud preflight begins, it is uploaded in chunks to private storage, assembled for reading, and classified. If it is unreadable or unrelated to the service, we may stop the journey or ask for confirmation rather than manufacture an inaccurate investor report.

During analysis, we read slide content, structure, and evidence. If you attach a video, its audio may be extracted to evaluate delivery independently. Our systems treat text inside uploaded content as untrusted evidence, not operational instructions, which reduces the risk that instructions embedded in an arbitrary document alter system behavior.

A pitch video is optional. Omitting it does not reduce the deck score or create a fabricated delivery score.

Pitchk uses specialized automated systems to classify documents, extract evidence, apply stage-calibrated criteria, and draft the report. The result is not produced by an unrestricted chat model alone; it passes through required schemas, application calculations, evidence rules, and quality checks designed to withhold generic, repetitive, or ungrounded output.

Automated systems can still make mistakes or miss context. The report is decision support, not a binding investment, legal, or financial decision. Contact us if you identify a technical error or an incorrect link between a finding and your file.

We may use providers that process only what is reasonably necessary to perform a defined function, including account verification, private hosting and storage, specialized document and AI processing, transactional email, payments, security, and customer support.

We select providers according to operational need and seek appropriate contractual and security restrictions. They are not authorized to use your data for their independent advertising. We may also disclose information where required by applicable law or a binding request from a competent authority, limited to what is required.

• We do not sell personal data.
• We do not sell your decks, videos, or reports.
• We do not share your file with investors, accelerators, or marketers unless you ask us to do so.
• We do not request that the payment provider return full card data to Pitchk servers.

Some cloud infrastructure and specialized processing providers may operate systems or support teams in other countries. Limited processing may therefore occur outside the Kingdom of Saudi Arabia depending on the infrastructure serving the request.

Where an international transfer occurs, we seek to apply relevant legal requirements, data minimization, and appropriate safeguards. This policy does not claim that all information always remains inside Saudi Arabia or that every destination provides an identical level of protection.

We retain each category only for as long as reasonably necessary for its purpose, then delete or de-identify it where appropriate, unless continued retention is required for law, a live dispute, fraud prevention, or protection of rights.

• Browser-staged files: for the active upload journey, cleared after analysis, logout, or browser-data deletion.
• Cloud upload chunks: deleted after analysis succeeds or fails.
• Cloud job metadata and result: expire after approximately 24 hours and are removed by scheduled cleanup.
• Browser report copy: remains until logout, replacement by a new analysis, or browser-data deletion.
• Account and transaction records: as needed to operate the account, evidence the transaction, meet accounting duties, prevent fraud, and comply with law.
• Support messages: until the request is closed and the related operational or legal need ends.

Pitchk does not currently promise a permanent report archive. Keep your important copy because the cloud result is temporary.

We use essential cookies, local storage, session storage, and browser database storage for sign-in, safe post-verification routing, language, temporary file staging, analysis-job continuity, and local report display. These functions are operational, not advertising cookies.

You can remove site data through your browser settings, but doing so may sign you out and delete your pending file, local report, and journey progress. If we later add non-essential marketing analytics, we will update this notice and implement the choice mechanism required at that time.

We use technical and organizational measures proportionate to the service, including encrypted transport, verified sessions, private storage, random job-access tokens, timing-safe token comparison, server-only secrets, upload-chunk deletion, rate controls, and separation of sensitive payment-card handling from our application servers.

No internet-connected system can guarantee absolute security. Protect access to your email and one-time login codes, and do not share a device or link that exposes your report. If you suspect unauthorized access, contact us promptly and sign out from the affected device.

Subject to applicable law and exceptions, you may have rights to be informed, access your personal data, obtain it in a clear form, request correction, completion or updating, request destruction, and withdraw consent where consent is the processing ground. Some requests may be limited by accounting, fraud-prevention, or legal-claims requirements.

Send the request from your account email to support@pitchk.io. We may request limited information to verify identity and prevent disclosure to another person. If law prevents full completion, we will explain the process or relevant limitation.

• State the request type and the analysis or data concerned.
• Never send a password, login code, full card details, or IBAN.
• For a transaction request, provide only the payment reference.

Pitchk is intended for founders, professionals, and people authorized to act for their projects. It is not designed to target children. If you lack legal capacity or authority to commit the project, do not upload files or purchase a service without appropriate authorization.

If we learn that a child's data was collected contrary to applicable requirements, we will take reasonable steps to delete it or obtain the required authorization, depending on the circumstances.

If an incident affects personal data, we assess its scope and risk, contain the impact, and carry out notifications and actions required by law. We may contact an affected user through the registered email where notice is required or materially helps protect them.

To raise a complaint, start by emailing support@pitchk.io with a concise description and no sensitive payment data. This does not prevent you from contacting the competent data-protection authority or exercising another available legal right.

We may update this policy when the service, providers, law, or retention periods change. We will publish the new version and effective date here and use an additional notice or email where a material change makes that appropriate.

Continued use after the effective date confirms that you have had an opportunity to review the update. It does not waive a mandatory right or convert consent that must be affirmative into assumed consent.

ALWALEED KHALID ALKHLAIWI Establishment Commercial — Pitchk, Jeddah, Kingdom of Saudi Arabia. Email: support@pitchk.io. Telephone and WhatsApp: +966 50 727 0897. We aim to reply within two business days; complex requests may require additional time, and we will keep you informed where appropriate.