Your privacy matters.

What data we collect

When you use PitchLab, we collect only the minimum information required to send your outreach emails. This includes:

• Your Gmail email address, obtained via Google OAuth during authorization
• A Gmail OAuth refresh token, which authorizes us to send email on your behalf
• Your selected plan (Starter, Pro, or Premium)
• Research preferences you submit in our order form — such as your target institution and field of interest

We do not collect your name, phone number, mailing address, or any other personal information beyond what is listed above.

How we use your data

The data we collect is used for one purpose only: fulfilling your outreach order.

• Your Gmail OAuth token is used exclusively to send the personalized emails you ordered, from your Gmail account, to the professors you selected
• Your email address is used to associate your authorization with your order
• Your form responses are used to understand your research interests and generate relevant, specific email content

We do not use your data for advertising, analytics, marketing communications, or any purpose beyond processing your order.

What we never do

• We never read your Gmail inbox, drafts, sent folder, or any existing emails
• We never send any email from your account other than the outreach batch you explicitly ordered
• We never sell, rent, share, or transfer your personal data to third parties
• We never use your Gmail access for any purpose other than sending your ordered emails

You can revoke PitchLab's access to your Gmail at any time by visiting myaccount.google.com/permissions and removing PitchLab from your connected apps.

Data retention

Your OAuth token is stored only as long as needed to process your outreach batch. Once your emails have been sent and your order is complete, your token is deleted from our systems.

Order metadata (your selected tier and research preferences) may be retained for up to 90 days for customer support and quality assurance purposes, after which it is permanently deleted.

Third-party services

PitchLab uses the following third-party services to operate:

• Google OAuth — to authenticate and authorize sending from your Gmail account
• PubMed — to look up professors' published research papers
• Stripe — to process payments securely. We never see or store your card details.
• Tally — to collect your research preferences via our order form

Each of these services operates under its own privacy policy.

Your rights

You have the right to request deletion of any personal data we hold about you. To do so, email us at the address below and we will respond within 5 business days. You can also revoke our Gmail access at any time via your Google Account settings.