Legal

GDPR & your data rights

ReelPitch is run from the EU, so the GDPR applies to it by default. Here is what you can ask for, how to ask, and what we do on our side to keep outreach clean.

Last updated 9 August 2026

Who is responsible for what

For your own account data (email, profile, settings) we are the controller. For the businesses and people you save as leads, you decide what to collect and why, so you are the controller and we act as your processor, storing and processing that data only to run the features you use.

In practice that split is simple: we look after the platform, you look after the choices you make inside it.

Your rights, and how to use them

  • Access. Ask for a copy of the personal data we hold about you.
  • Portability. Get your data in a machine-readable format. You can already export your whole pipeline to CSV yourself with the Export button on the Pipeline page.
  • Rectification. Fix anything wrong. Your profile and every lead field is editable in the app.
  • Erasure. Delete a single lead from its page, or email us to close the account and remove your workspace.
  • Restriction and objection. Ask us to pause a particular use of your data, or object to processing based on legitimate interests.
  • Withdraw consent. Where processing rests on consent, you can take it back at any time without affecting what happened before.
  • No automated decisions about you. AI scores rate the businesses you research, not you. Nothing in ReelPitch makes an automated decision with legal effect on you.

Making a request

Email privacy@reelpitch.io from the address on your account and say which right you want to use. We reply within 30 days, usually much sooner. We may ask one question to confirm it is really you, and we will never charge you for a first reasonable request.

If you are a business we were pitched from ReelPitch

ReelPitch does not send messages. An independent freelance editor did, using their own account and their own email or social profile. Their details are in the message they sent you, and the fastest route is to reply and ask them to remove you. They can delete your record permanently in one click.

If that gets you nowhere, write to privacy@reelpitch.io with the business name or handle used. We will pass the request to the account holder, require them to act on it, and take away access from anyone who ignores it.

Doing B2B outreach lawfully

If you use ReelPitch for prospecting, these habits keep you on the right side of both the GDPR and the platforms:

  • Contact businesses about work they plausibly want, and use business contact channels, not private ones.
  • Say who you are, where you found them and why you are writing, in the first message.
  • Keep a note of your reason for contacting them. The lead notes field is a fine place for it.
  • Make opting out effortless, then honour it immediately and delete the lead.
  • Do not buy scraped lists, and do not keep contacts you have no real intention of working with.

The free guide and the in-app Playbook follow the same approach: fewer, better-researched businesses instead of blasting hundreds of strangers.

Sub-processors and transfers

The current list of providers who process data on our behalf, and the basis for any transfer outside the EEA, is in the Privacy Policy. We update it when the list changes.

If something goes wrong

If a personal-data breach happens and it is likely to put you at risk, we will notify the competent supervisory authority within 72 hours of becoming aware of it and tell affected users what happened, what data was involved and what to do next.

Complaints

Please start with us at privacy@reelpitch.io. You also have the right to complain to a data protection authority. In Bulgaria that is the Commission for Personal Data Protection, and if you live elsewhere in the EU you can go to your own national authority.