Privacy policy

• We keep what you give us to run your account, your practice and your applications.
• This demo’s practice partner is scripted and runs in this browser tab, and so does the scorer. Typed text never leaves the page, and your sessions stay in this tab until you close it.
• We never get your audio. Your browser turns speech into text, and only the text reaches us. Some browsers send the audio to their own speech service (Google, Apple, or Microsoft) to do that.
• An employer sees only what you send with an application to their job.
• There are three cookies: one keeps you signed in, two protect your forms. We don't use advertising, analytics or tracking cookies.
• You can delete any practice session, or your whole account, whenever you like.

PitchPerfect is open-source software for practicing sales conversations and hiring for entry-level sales roles. In this policy, “we” means whoever operates this PitchPerfect site. To reach us, contact the maintainer listed on the project's GitHub page.

• Account: your name, email address, and whether you are a student or an employer. Your password is stored only as a one-way hash. Students also confirm they are 18 or older, and we record the date they did.
• Student profile: school, major, graduation year, target role, industry, state, and which lessons you have finished.
• Résumé: the PDF you upload, up to 2 MB.
• Practice sessions: the skill, the job if you practiced for one, the buyer scenario, what you and the partner said, your scorecard, timestamps, and how much processing the session used. We also record when you accepted the practice notice.
• Jobs and applications: jobs you save, jobs you apply to, the scorecard you chose to share, each application's status, and interview times and links.
• Employers: your job title; your company's name, website, LinkedIn page, pitch and logo link; your job posts; and your notes on applicants' status.
• Technical records: request logs with an ID, the page or endpoint, the result and how long it took. Logs never contain what you typed or said.
• Abuse limits: short-lived counters keyed to your IP address and, for sign-in and password resets, your email address. We store a one-way hash of each key, never the address itself.

• To run your account and keep it secure.
• To run practice sessions, score them, and show you your history.
• To send the applications you submit, and the details you share, to that employer.
• To show public job listings and company profiles.
• To send account emails: verifying your address, resetting your password, interview invitations, and notices when an application you made is closed.
• To keep the service working and fair: rate limits, usage limits and abuse checks.

Voice practice uses your browser's built-in speech recognition. PitchPerfect never receives or stores audio; only the text you choose to send reaches us. Some browsers recognize speech by sending the audio to their maker (Google, Apple or Microsoft), under that company's own privacy terms. Where your browser offers on-device recognition, it is used automatically.

The partner's replies are read aloud by your browser's own speech voices. Text mode is always available if you would rather not use your microphone.

• No one. The scripted partner and the scorer run in this browser tab, and your practice turns stay in the tab, with email addresses, phone numbers and card-like numbers replaced by placeholders.
• An email delivery service sends account and interview emails, so it receives your email address and the message.
• A breached-password check: when you choose a password, the first five characters of a hash of it are sent to a breached-password lookup service. The password itself never leaves our servers.
• Our hosting and database providers store the data described here on our behalf.

When you apply to a job, that employer sees your name, school, major, graduation year, your résumé if you uploaded one, and the one scorecard you chose to share. They do not see your email address or any other practice session.

A shared scorecard is a live link, not a copy. If you delete that session, withdraw the application, or the session reaches its 180-day limit, the employer sees that it is no longer shared.

PitchPerfect sets only the cookies it needs to work:

• pp.sid keeps you signed in. It lasts up to 7 days without activity and 30 days at most.
• pp.csrf holds a security token that protects your forms from other websites.
• pp.aid is a random ID that ties that security token to your browser before you sign in.

There are no advertising, analytics or tracking cookies, and no third-party scripts.

• Practice transcripts and scorecards: 180 days, then deleted automatically.
• Email verification links: 24 hours. Password reset links: 30 minutes.
• Rate-limit counters (the hashed IP address and email keys used to stop abuse): from one minute to an hour, depending on the action, then deleted automatically.
• Everything else: until you delete it or delete your account.

You can delete any practice session from your history. You can delete your account from your settings, and this signs you out everywhere.

• Students: deleting your account removes your account, profile, résumé, saved jobs, applications and practice sessions.
• Employers: deleting your account removes your account, your company, its jobs and its interviews. Open applications to those jobs are closed, and the applicants are told by email.

Passwords are hashed with argon2id. Sessions use secure, HTTP-only cookies. Every request is checked so people can only reach their own data, and employers can only reach applications to their own jobs. Résumés are only ever downloaded, never shown in the browser. The practice partner service cannot be reached from the internet. No system is perfectly secure; if you find a problem, please report it to the maintainer listed on the project's GitHub page.

PitchPerfect is for people 18 or older. Students confirm their age when they sign up, and employers sign up with a work email. If we learn that an account belongs to someone younger, we delete it.

You can see and change your profile, email address and password in your settings, choose whether to share a scorecard each time you apply, practice in text mode instead of voice, and delete sessions or your whole account. We don't offer a download of your data yet; ask the maintainer listed on the project's GitHub page if you need a copy.

If this policy changes, we will update the date at the top of this page. For questions about your data, contact the maintainer listed on the project's GitHub page.