Privacy Policy

1. Who is responsible for your data

STEVENSON PRICE LIMITED ("we", "us", "Pitchsmith") is the data controller for personal data processed through this service.

Registered address: 82 High Street Golborne, WA3 3DA, England. Contact: support@stevenprice.shop, +44 7439128810. We are established in the United Kingdom and this service is provided under the laws of England and Wales.

2. What we collect

• Account data: name, email address and authentication details.
• Subscription and billing metadata: plan, billing interval, billing country and the last four digits and card brand as returned by our payment processor. We never receive or store your full card number.
• Brief and generated content: the text you enter to brief a proposal, the structured proposals, decks, walkthroughs and any files, logos or brand assets you upload.
• Support data: messages you send us and lead-form submissions (name, email, message and the plan or role you indicate).
• Technical data: IP address, device and browser type, and essential cookies needed to keep you signed in.
• Usage data: how you use the studio, aggregated for reliability and product improvement.

3. Where the data comes from

Most data is provided directly by you when you create an account, subscribe, brief a proposal or contact us. Billing metadata comes from our payment processor. Technical and usage data is collected automatically when you use the service.

4. Why we use it and our legal bases

• To provide the service — craft proposals, render decks and walkthroughs, and enable exports (performance of a contract).
• To take payment and manage subscriptions (performance of a contract).
• To provide support and respond to enquiries (legitimate interests, or steps prior to a contract).
• To secure, maintain and improve the service (legitimate interests).
• To meet legal, accounting and tax obligations (legal obligation).
• For optional analytics or marketing, only where you have given consent.

5. AI data handling — your user input, generated results and uploads

User input: the briefs and prompts you type, and any files, logos or brand assets you upload, are your user input. We process this user input solely to generate and store your proposals, decks and walkthroughs, and to let you edit, export and share them. Generated results (the proposals, decks, images and walkthroughs produced from your user input) are stored to your account so you can return to them.

AI provider: to generate content, your user input may be sent to a third-party AI provider (an AI model provider) that returns the generated result. The AI provider processes your user input only to produce your output on our behalf under a data-processing agreement. We do not use, and we do not permit the AI provider to use, your user input, uploaded client information, logos or generated results to train AI models.

Sample and example data you choose to load is treated the same way as user input. This is an online-only digital service with no physical goods; we do not collect shipping or delivery addresses.

You can delete individual proposals and uploaded assets at any time from the studio, and you can request deletion of your account and associated content by contacting us. Deletion removes the content from active systems; residual copies in encrypted backups are purged on our normal backup cycle.

6. Payment provider boundary

Payments are processed by Stripe. When you check out or manage billing, your card details are entered on Stripe-hosted surfaces and sent directly to Stripe. Pitchsmith does not receive, process or store your full card number, CVC or full card data. We receive only limited billing metadata needed to manage your subscription.

7. Who we share it with (processors)

• Hosting and delivery: our cloud hosting and content delivery provider.
• Payments: Stripe, for checkout, subscriptions and billing.
• Database and storage: our managed database and file-storage provider, used to store accounts, proposals and uploads.
• AI generation: where enabled, an AI model provider that returns proposal or asset content from your brief.
• Email: our transactional email provider, for account and support messages.
• We do not sell your personal data. We share it only with processors acting on our instructions, or where required by law.

8. International transfers

Some processors may store or process data outside the United Kingdom or the European Economic Area. Where they do, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the EU Standard Contractual Clauses or an adequacy decision, so your data receives an equivalent level of protection.

9. How long we keep it

• Account and proposal content: for the life of your account, and up to 90 days after closure unless you delete it sooner.
• Billing and tax records: for the period required by UK law (generally six years).
• Support messages and leads: up to 24 months.
• Technical logs: typically up to 12 months.

10. How we protect it

We use encryption in transit, access controls, and encryption at rest for uploaded client assets. Access to personal data is limited to what is needed to operate the service. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and regulators of a qualifying breach as required by law.

11. Your rights

• Under UK GDPR and, where applicable, EU GDPR: access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent.
• Under the California Consumer Privacy Act (as amended): the right to know, delete, correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA.
• To exercise any right, email us at support@stevenprice.shop. We respond within the timeframes required by law.
• You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

12. Do Not Sell or Share

We do not sell your personal data and do not share it for cross-context behavioural advertising. If this ever changes, we will update this policy and provide a clear opt-out mechanism first.

13. Cookies and analytics

We use essential cookies to keep you signed in and to keep the service secure. Any optional analytics cookies are used only with your consent. See our Cookie Policy for details and controls.

14. Automated decisions and children

We do not make decisions producing legal or similarly significant effects about you solely by automated means. AI features generate draft content for your review; they do not make decisions about you.

The service is for professional adults. It is not for children under 13, and users aged 13–17 must have verifiable consent from a parent or guardian. We do not knowingly collect data from children under 13.

15. Changes and contact

We may update this policy from time to time. Material changes will be posted here with a new last-updated date. Contact us with any questions using the details below.