BirdPitch ("we", "our", or "us") is committed to protecting the privacy of everyone who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
By creating an account or using BirdPitch you agree to this policy. If you do not agree, please do not use the service.
1. Information We Collect
Account Information
When you register we collect your email address and a hashed version of your password. We never store passwords in plain text.
Business Profile
To run discovery crawls we ask you to provide your company name, website URL, a short description of your product or service, target audience, keywords, and preferred reply tone. This information is used exclusively to power your crawls and generate contextually accurate AI replies.
X Connection Data
BirdPitch supports two methods to connect your X account:
- X OAuth 2.0 -we store the access token, refresh token, token expiry, your X user ID, and username. Tokens are used only to perform searches on your behalf and are automatically refreshed when they expire.
- Session cookies -if you choose the manual cookie method, we store the cookie values you provide. These are used only during crawl runs and are never shared.
We strongly recommend using a dedicated X account for crawling rather than your primary personal or business account.
Discovered Tweets and Generated Replies
Tweets found during a crawl are public posts from X. We store the tweet text, author handle, tweet ID, and timestamp so you can review them in your queue. AI generated reply drafts are stored alongside each tweet until you approve, skip, or delete them.
Usage and Log Data
We collect crawl logs (run time, result counts, error messages), reply statistics (approved, posted, skipped), and standard server logs (IP address, browser type, pages visited) for the purpose of operating and improving the service.
2. How We Use Your Information
- Provide, operate, and maintain the BirdPitch platform
- Run scheduled and on demand X discovery crawls on your behalf
- Generate AI reply drafts tailored to your business profile
- Process subscription payments and manage your billing plan
- Send transactional emails (account confirmation, password reset, billing receipts)
- Detect and prevent abuse, fraud, or violations of our Terms
- Improve accuracy, relevance, and performance of the platform
We do not sell your personal data. We do not use your data to train AI models without your explicit consent.
3. Third-Party Services
X (Twitter)
BirdPitch interacts with X to perform searches and authenticate your account. Your use of the X connection feature is also subject to X's Terms of Service and Privacy Policy.
Mistral AI
Reply drafts are generated by Mistral AI. When generating a reply, we send the tweet text and relevant excerpts of your business profile to Mistral's API. No personally identifiable information beyond what you included in your business profile is transmitted. Mistral's data handling is governed by their Privacy Policy.
Polar.sh
Subscription billing is handled by Polar.sh. When you purchase a paid plan, your payment details are collected and stored by Polar.sh directly. BirdPitch never sees or stores your card information. Polar's handling of payment data is governed by their Privacy Policy.
4. Data Retention
- Account and business profile data -retained while your account is active and deleted within 30 days of account deletion upon request.
- Discovered tweets -retained for 90 days, then automatically purged.
- Generated replies -retained until you delete them or your account is closed.
- X connection credentials -deleted immediately when you disconnect your X account or delete your BirdPitch account.
- Billing records -retained for 7 years as required by financial regulations.
5. Data Security
We take reasonable technical and organisational measures to protect your data:
- Passwords are stored using a secure cryptographic hash
- X session credentials are stored in a private database instance not exposed to the public internet
- All traffic between your browser and BirdPitch is encrypted via HTTPS in production
- Session tokens are stored as secure, server side cookies
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we will notify affected users promptly in the event of a confirmed data breach.
6. Cookies
BirdPitch uses a single session cookie to keep you logged in. This cookie is essential for the service to function and is not used for advertising or cross site tracking. We do not use third party analytics cookies.
7. Your Rights
Depending on your location you may have the right to:
- Access -request a copy of the personal data we hold about you
- Correction -ask us to correct inaccurate data
- Deletion -request deletion of your account and associated data
- Portability -receive your data in a structured, machine readable format
- Objection -object to processing based on legitimate interests
To exercise any of these rights, contact us at the email below. We will respond within 30 days.
8. Children's Privacy
BirdPitch is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes we will notify registered users by email at least 14 days before the change takes effect.
10. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact us at:
BirdPitch
Email: privacy@birdpitch.com