Legal
Privacy
Effective 30 August 2026 · PitchPlans is run by Three Door Labs, based in Ireland.
This page says what we collect, why, and what we never do — in plain language, because that’s how we’d want it said to us. The short version: we collect the email you give us and first-party usage data, we use both to run PitchPlans and make the sessions better, and we never sell any of it.
What we collect
- The email you give us. When you ask for the free sessions or create an account, we store your email and use it to send exactly what you asked for: the sessions, the Saturday drop, and account email like sign-in links and receipts. Every drop email has a one-tap unsubscribe.
- First-party usage events. We record which sessions are opened, read and shared, using a first-party anonymous id we set ourselves in a cookie. If you’re signed in, events can be tied to your account. We use this to see which sessions earn their place and which don’t. We don’t run third-party analytics scripts.
- Account details. Your email, a password (stored hashed by our sign-in provider — we can’t read it), and preferences you choose to give us, like the days you train.
- Payments. Handled entirely by Stripe. We never see card numbers — Stripe tells us only that a payment happened and for which plan.
Who processes it for us
A handful of companies process data on our behalf, under contract, to run the service:
- Supabase — our database and sign-in, hosted in the EU.
- Stripe — payments.
- Mailgun — sending email.
- Vercel — hosting the site.
- Meta — ads measurement on our marketing pages, so we know whether an ad brought a visit. This is the only third-party measurement we run, and it doesn’t run on session content you’re signed in to use.
Cookies
We set first-party cookies to keep you signed in, to remember the free sessions you’ve unlocked, and to hold the anonymous id used for our own measurement. The Meta pixel described above runs on marketing pages only.
How long we keep it
We keep your data while you have an account or are on the drop list. Unsubscribing stops the emails immediately. If you ask us to delete your data, we delete it — account, email, preferences — and anonymous usage events are kept only in a form that doesn’t identify you. Deleted data can persist briefly in routine backups before those cycle out.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Send any of these through the contact form and a person will handle it. If you’re unhappy with how we’ve handled your data, you can complain to the Data Protection Commission (Ireland).
What we never do
- We never sell your data. To anyone, for anything.
- We never share it beyond the processors listed above.
- We never buy email lists or scrape contacts.
Changes
If this page changes in a way that matters, we’ll say so by email before it takes effect — not bury it.