What we do with
what you type
This page says what the site collects, why, where it goes, how long it stays, and how to have it removed. It is written in plain language, so you can read it in a few minutes.
Last updated 27 October 2026, to describe every record we keep and how long backups are kept. Earlier versions are kept.
The short version
- Your pitch is sent to an AI provider so the read can be written. It is not stored on our servers and it is not written to our logs.
- Your recording stays on your own device. No audio is sent to us, and we make no voiceprint.
- Your history of reads, and any notes you write on them, stay in your own browser. We cannot see them.
- To be assessed you make an account: a name, an email address and a password. Your first read is free. The password is stored only in scrambled form, so nobody can read it, us included.
- If you choose to tell us how your real pitch went, we keep that note. We show it on the site only if you say we may, and never with your name or your score.
- We do not sell or share personal information, and we do not run advertising trackers.
What is collected, and why
The pitch you submit
When you ask for a read, the text of your pitch, the room and audience you chose, and the short intake answers are sent from your browser to our server, and on to our AI provider, which writes the read. We do this to give you the thing you asked for. The text passes through our server in memory; we do not save it to disk and we do not write it to our logs. Our logs record only the time, your account number, whether the request succeeded, how long it took, and how many words were involved. To keep the service within its daily limits we also keep a short record of when each read was made, with no text in it, for 30 days.
Your account
Your account works as soon as you confirm your email address. For your account we keep: your name and email address; your password, scrambled with a one-way method (Argon2id) so that it can be checked but never read; the moment you confirmed you are 18 or over; the last five of your earlier passwords, scrambled in the same way, so a reset can tell you when you reuse one; a log of changes to your account (when it was made, switched on, refreshed, or given a pack, and any refund); how many reads you have used and when your current period started; anything you send us through Give feedback, a request for more reads or our short question about price; when you signed in; and, if you buy a pack, what you bought, the amount, the date, whether it was refunded, and the reference numbers our payment processor gives us. We never see or keep your card details. To slow down anyone guessing passwords, we also keep a short record of sign-in attempts, with the email address and network address stored only as scrambled codes. Your pitch text is still not stored, with or without an account.
If you were given a guest code, the person who invited you typed your name when the code was made. We keep that name beside the code, and once the code is used we keep which account used it and when. That is how an invitation is matched to the person it was meant for. It is used for nothing else.
If you ask for a free code at one of our events, we keep the name and email you typed and the code we sent, so each person gets one code per event.
This is kept in TOM PITCH’s own database, which no other site of ours shares, on Amazon Web Services in the United States. We use it to run your account, to count your reads, and to read what you tell us. We do not sell it or share it. The sign-in cookie is a single random code that keeps you signed in for up to 30 days; it is not used for anything else.
How your real pitch went, if you tell us
Signed-in people can tell us how a real pitch went: how it turned out, which room it was and who was listening, a note in their own words, and, if they tick the box, their first and latest TOM scores. We keep this with your account and read every note. The site never shows your name, your email or your scores. If you tick “You may show this note”, and only once we have read it, the note may appear on the site with the room and the month. Scores are only ever shown as rounded middle figures across at least ten people, never one person at a time, and never the highest or lowest. Write to team@tompitch.com and we take a note down for good.
Voice, where you use it
When you record your pitch, the recording stays on your own device, so you can play it back and so TOM can play it while it reads. It is never sent to us or stored by us, and it is gone when you leave the page. Your browser asks your permission before it uses the microphone. We do not make a voiceprint and we do not identify anyone by their voice. If you bring a recording file of your own, your browser reads it on your device to measure its length and pauses; the file is not uploaded.
Where your browser also writes your words down, it uses its maker’s speech service to turn the sound into text: Chrome uses Google’s, Safari uses Apple’s. We receive only the words, the same as if you had typed them. No audio is ever sent to us.
Your history
Your past reads, the detail of the most recent ones, and any notes you write on a pitch are kept in your browser’s local storage, on your own device. They never reach our servers. Clearing your browser data deletes them, and so does Delete my history on this device on the history page. Signing out, or another account signing in on the same device, clears them too.
If you write to us or book a session
If you write to us or book a session, we receive what you send: your name, your email address, and what you wrote. We use it to answer you and to run the session. Payment is taken by our payment processor; we never see or hold your card number.
The companies that help us run it
- Amazon Web Services hosts the site and the accounts database, in the United States.
- Anthropic writes the read from your pitch text. More on this just below.
- Stripe takes payment for packs. You give your card details to Stripe directly; they never reach us.
- Google Workspace sends our account emails, such as the link that confirms your address, from team@tompitch.com.
- Google Fonts supplies the typefaces. Your browser fetches them from Google, which sees your network address, as it does on any site that uses them.
- Have I Been Pwned lets us refuse passwords known from past breaches. Only the first five characters of a scrambled form of the password leave our server. The password itself does not.
- Your browser’s speech service (Google’s in Chrome, Apple’s in Safari) writes your words down as you speak, where you use it, under that company’s own terms.
We give these companies only what each needs to do its part. We do not sell personal information to anyone.
Cookies and tracking
We set one cookie: the one that keeps you signed in. We count visits with Umami, which runs on our own server: it sets no cookies, keeps no profile of you, and does not follow you to other sites. We use no advertising cookies and no tracking pixels. Because we do not track you from site to site, there is nothing for a Do Not Track or Global Privacy Control signal to switch off.
Emails from us
We email you about your account: confirming your address, a changed password, your assessments. We do not send marketing unless you have asked for it separately. When an account is made, a code is used or a pack is bought, our team receives a short email with the name and email address involved, so a person can help if something goes wrong; those emails are kept in our mailbox.
The AI provider
The read is generated by Anthropic’s Claude models through Anthropic’s commercial API. Your pitch text is sent to Anthropic for that purpose. Anthropic’s published position for its commercial products is: “By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models.” What Anthropic does with the text it receives, including how long it keeps it, is governed by its own terms, which you can read at anthropic.com/legal/commercial-terms.
We do not use your pitch to train anything. If a pitch ever becomes part of a research corpus, it will be because you agreed to it in writing first, for that purpose, and it will be de-identified.
What we never do
- We do not analyse faces, expressions, gestures, body language or voiceprints, and we do not infer emotion, confidence or personality. TOM reads words.
- We do not sell personal information, and we do not share it for cross-context behavioural advertising.
- We do not use advertising cookies or third-party tracking pixels.
- We do not let a TOM score be used to decide anyone’s access to a programme, a job, a place or money. That is written into our terms as a prohibited use.
How long things are kept
- Pitch text: not stored by us at all.
- Your account: kept while you have it. Ask us to close it and we delete it, along with your feedback and requests. Write to team@tompitch.com.
- Guest codes: the name a code was made for, and whether it has been used, are kept as our record of invitations. Ask and we remove yours.
- Notes on how your pitch went: kept with your account, and deleted with it. A note on the site comes down whenever you ask.
- Records of sign-in attempts: 30 days, then deleted.
- Records of what you bought: kept for as long as tax and accounting rules require, even if you close your account.
- Our record of the emails we sent you: 30 days, then deleted.
- Backups of the database: made daily and each kept for 7 days, with a copy in a second United States region. Before a change to the service we take an extra backup, kept for up to 90 days so the change can be undone if it has to be.
- Server logs (time, status, duration, word count, account number, IP address for rate limiting): 30 days, then deleted.
- The record of when each read was made (no text): 30 days, then deleted.
- Names and emails given for event codes: kept with the event as our record of who was given a code. Ask and we remove yours.
- Enquiries and booking correspondence: kept while we are working with you, and then for as long as our records need to show what was agreed.
- Your own history: in your browser, for as long as you keep it.
Where it is processed
The site runs on servers in the United States. Our AI provider processes the text in the United States. If you are writing from outside the United States, your text is processed there.
When we would pass information on
We would disclose information if the law required it, or if it were needed to protect people or the service from harm. If the business behind TOM PITCH changed hands, account records would pass to the new owner under this notice, and we would tell you.
The categories, in the law’s own words
For California: we collect identifiers (your name, email address and network address), account and usage records, and the content you choose to send us. The one item the law counts as sensitive is your account log-in (your email with a password, which we keep only scrambled), and we use it only to let you sign in. We do not collect biometric information, precise location or any other sensitive personal information, and we do not sell or share personal information. For the UK and the EU: we handle your information to carry out our agreement with you (running your account and writing your read), with your consent where we ask for it (showing a note on the site), and for our legitimate interest in keeping the service secure and working.
Your rights
Wherever you are, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. In California you also have the right to know, to delete, to correct, and to opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of, and we will not treat you differently for asking. In the UK, the EU and similar regimes you have the equivalent rights, and you may complain to your supervisory authority.
To exercise any of them, write to team@tompitch.com with “Privacy” in the subject. We answer within 30 days, usually sooner. For anything about your account, you can also write to team@tompitch.com.
Age
TOM PITCH is for adults. It is not directed at children, and we do not knowingly collect anything from anyone under 18. If you believe a child has sent us something, write to the address above and we will remove it.
Security
The site is served over HTTPS. The server keeps no copy of your pitch. Passwords are stored only in scrambled form, and the database that holds accounts is encrypted, is not reachable from the internet, and admits only TOM PITCH’s own server. Access to the machine is limited to named administrators with key-based login, and requests are rate limited. No system is perfect, and we do not claim otherwise; if something goes wrong that affects you, we will tell you.
Changes
If this page changes in a way that matters, the date at the top changes with it, and the previous version is kept. Continuing to use the site after a change means the new page applies.
Who to write to
TOM PITCH · team@tompitch.com.