Privacy Policy

ReelPitch is a client-acquisition CRM for freelance video editors. The service is ReelPitch, operated by Ivan Bodurov (Bulgaria, EU). For anything on this page, write to privacy@reelpitch.io and we will answer from a real inbox.

• Account details. Your email address, and the name and profile picture your sign-in provider shares when you use Google sign-in. Used to create your account and let you back in.
• Your editor profile. Anything you type into Settings: display name, specialty, portfolio and showreel links, default rate, email signature.
• Your workspace content. The businesses you save as leads, their public handles and contact details you enter, your notes, AI scores and audits, pitch drafts, templates, outreach history, attachments and deal values.
• Usage counters. A small log of how many AI actions you run, so fair-use limits can be applied. It records the action type and a timestamp, not your content.
• Technical logs. Standard server and error logs from our hosting provider, which include IP address and browser type. They exist for security and debugging.

We do not sell your data, we do not run advertising networks on ReelPitch, and we do not build profiles of you for anyone else.

ReelPitch does not scrape platforms and does not send messages for you. You find businesses yourself, then paste public information into your own private workspace. Your leads are visible only to your account; database access rules scope every row to the account that created it.

For that lead information you are the one deciding what to collect and why, so under EU law you act as the controller and ReelPitch acts as your processor. That means two practical duties are yours: only save business contact details you may lawfully use for B2B outreach, and honour a person's request to be removed. You can delete any lead, along with its drafts, notes and history, from its page at any time.

• Contract. We need your account data and workspace content to actually provide the product you signed up for.
• Legitimate interests. Keeping the service secure, preventing abuse and applying fair-use limits on AI features.
• Consent. Anything optional you explicitly opt into. You can withdraw it at any time.

Lead scoring, content audits and pitch drafting send the details of that one lead, plus your profile context, to a large language model through the Lovable AI Gateway, which routes the request to Google Gemini models. Only what is needed for that request is sent. Results are stored in your workspace so you are not charged twice for the same answer.

Treat AI output as a first draft. It can be wrong about a business, so read it before you send anything.

• Lovable (Lovable Cloud) for application hosting, database, authentication and file storage, together with the infrastructure sub-processors they use for it.
• Google if you choose Google sign-in, and for the Gemini models behind the AI features.

These providers act on our instructions. Some of them process data outside the EEA; where that happens the transfer relies on the safeguards those providers offer, such as the EU Standard Contractual Clauses. If this list changes we will update this page.

Traffic to ReelPitch runs over HTTPS. Passwords are handled by our authentication provider and never stored by us in readable form. Every table that holds your content is protected by row-level access rules tied to your user ID, and AI and server actions re-check your identity on the server rather than trusting the browser.

No system is unbreakable, so we do not promise perfect security. If you believe you found a vulnerability, email privacy@reelpitch.io and please give us a reasonable window to fix it before disclosing it publicly.

Your workspace lives as long as your account does. Delete a lead and it goes immediately, together with its drafts, notes, history and attachments. Ask us to close your account and we delete your account data and workspace content, keeping only what we are legally required to keep. AI usage counters are short-lived and cleared automatically.

ReelPitch uses only what it needs to work: a session stored by the authentication provider so you stay signed in, and small preference values in your browser. There are no advertising or cross-site tracking cookies, which is also why you are not being nagged by a consent banner.

You can access, correct, export, delete, restrict or object to the processing of your personal data, and you can complain to a supervisory authority. The GDPR page spells out each right and how to use it, including the export you can run yourself from the pipeline.

ReelPitch is a tool for working freelancers and is not intended for anyone under 16. If a child's data reached us by mistake, tell us and we will remove it.

If we change how data is handled we will update this page and move the date at the top. Significant changes will also be announced in the app before they take effect.