Security
What leaves your browser, and where it lives.
One screen for the person who has to approve the install. The long versions are the Privacy Policy, the DPA and the compliance section of the support manual; every sentence below is lifted from one of them.
Data we hold
Per licence key: your purchase details from Lemon Squeezy (name, email, licence key and status) and your call outcomes, meaning prospect, company, result and callback date. Private extension notes and transcripts are excluded. Separate notes you explicitly write in the dashboard are stored for your call, with the export destinations you select. Clearing the note clears its current text; sync records can keep the last-exported text while a destination is off or an update is unconfirmed, so later changes can be checked. Deleting the call clears that copied note text too; record identifiers and error history may remain. Existing CRM or Sheets copies are not deleted. Also your reveals and, if you use them, your lists and sequences. Not the profiles you open. The extension can contribute a snapshot of each one (name, company, title, the profile URL and the short public context it already read) to a shared prospect index. That index is switched off at both ends: nothing is collected and nothing is sent. The notice that governs it is published. Script and brief requests pass through our proxy to the AI model and are not retained. We don’t sell personal data, don’t use it for advertising, and don’t train AI models on customer data.
Where it lives
PitchWhip Cloud runs on Cloudflare, with data stored in Cloudflare’s data centres in the UK, EU and US. pitchwhip.com and the customer portal are hosted by Vercel (United States, global edge). Contact lookups go to an EU-established data provider with sources in the EU and US. Sign-in codes and campaign email send from the EU (Ireland). AI requests go to Anthropic in the United States and are not retained. International transfers rely on the UK IDTA and EU SCCs and, where a US sub-processor is certified, the EU–US Data Privacy Framework.
Access
Everything is encrypted in transit (TLS) and at rest by our hosting providers. Cloud data is isolated by licence key: every query is scoped to the calling licence or its team, and licence keys never appear in URLs. Access to production is limited to the people who run the service, on least-privilege accounts with multi-factor authentication; secrets live in provider secret stores, never in source code. On a team plan the reveals are billed to the org, so the team’s revealed numbers and its call log are visible to the team and to the admin who pays for them. Reveal rows carry no record of which rep ran one. Private extension notes and transcripts are not imported. Separate dashboard-authored notes are accessed through their owning user; exporting one to HubSpot, Salesforce or Google Sheets requires an explicit destination choice for that note.
What the extension can reach
It runs only on linkedin.com and reads the profile you already have open, in your own logged-in session. It presses three of LinkedIn’s own controls and no others: the Add-a-note button inside an invitation dialog you opened, the Message button on a profile, and the same control on a Sales Navigator lead page. It fills the note, message or InMail and leaves it on screen; Connect, Invite and Send are always your press. Three permissions: storage (settings and drafts, on your machine), downloads (your CSV exports) and alarms (callback timers). It can talk only to PitchWhip’s own server and to Lemon Squeezy for licences. Google is added only if you switch on the optional Sheets and Calendar sync. It never asks to read your history, your tabs or any other site.
Call audio (none stored)
No audio file is ever made or saved. Live call mode, if you turn it on, uses Chrome’s own speech recognition: your browser streams the audio to Google to turn it into text, the same service behind voice typing. We never receive, route or store it. The transcript stays in the browser tab; the last few sentences (live) or that call’s transcript (the summary) pass through our proxy to the AI model and are not stored.
Breach (72 hours)
If we suffer a breach that affects your data we will tell you and, where required, the regulator without undue delay and within 72 hours of becoming aware. Notices our payment, data and email providers send to our servers are signature-checked before anything is written.
Sub-processors
Cloudflare (cloud data), Vercel (site and portal), Anthropic (script and brief generation, transient), Lemon Squeezy (payments; we never see card numbers) and Resend (sign-in codes and campaign email, EU region). Our contact-data provider is identified by category for commercial confidentiality and named in the sub-processor schedule at contract stage. Google’s transcription and the Sheets and Calendar sync run under your own relationship with Google. Changes are notified with 30 days’ notice.
DPA
Our Data Processing Agreement (Article 28 UK GDPR and EU GDPR) applies to every customer automatically and we’ll countersign a copy on request. Our public documents are written to UK GDPR, EU GDPR and US state privacy laws including the CCPA; for other regimes, send your questionnaire and we’ll answer it against your jurisdiction.
ICO registration
PitchWhip Ltd is registered in England and Wales, company number 17389184, and registered with the UK Information Commissioner’s Office, reference ZC223705. We’re a young company and don’t yet hold SOC 2 or ISO 27001 and won’t pretend otherwise; send your security questionnaire to hello@pitchwhip.com and it gets the same candour.
Vendor questionnaires go to hello@pitchwhip.com. We complete them promptly, and we’ll take a security or DPIA call with your team if that’s faster.