What leaves your browser.
Where it lives.
A clear starting point for the person approving the install. The full policies hold the detailed commitments.
Keep the data story visible.
Private extension notes and local drafts.
Account activity, reveals, lists and sequences.
The data needed for the connection you choose.
Data we hold
Per licence key: your purchase details from Lemon Squeezy (name, email, licence key and status) and your call outcomes, meaning prospect, company, result and callback date. Private extension notes are excluded, and so are transcripts unless an account admin has switched on transcript saving for calls dialled through PitchWhip. In that case the call’s transcript is stored for the period the account admin chooses (90 days unless they choose 1 year, 2 years or until deleted) and can be read by the rep who made the call and the account admin, and by nobody else. Separate notes you explicitly write in the dashboard are stored for your call, with the export destinations you select. Clearing the note clears its current text; sync records can keep the last-exported text while a destination is off or an update is unconfirmed, so later changes can be checked. Deleting the call clears that copied note text too; record identifiers and error history may remain. Existing CRM or Sheets copies are not deleted. Also your reveals and, if you use them, your lists and sequences, and a record of each call you dial from PitchWhip. Not the profiles you open. Script and brief requests pass through our proxy to the AI model and are not retained. We don’t sell personal data, don’t use it for advertising, and don’t train AI models on customer data.
Where it lives
PitchWhip Cloud runs on Cloudflare, with data stored in Cloudflare’s data centres in the UK, EU and US. pitchwhip.com and the customer portal are hosted by Vercel (United States, global edge). Contact lookups go to a US-incorporated data provider with sources in the EU and US. Sign-in codes and campaign email send from the EU (Ireland). AI requests go to Anthropic in the United States and are not retained. Calls you dial from PitchWhip are carried by Twilio in the United States, which also holds any recording. International transfers rely on the EU–US Data Privacy Framework and its UK Extension where the recipient is certified; otherwise on the EU SCCs and the UK IDTA or UK Addendum, which we have signed or requested.
Access
Everything is encrypted in transit (TLS) and at rest by our hosting providers. Cloud data is isolated by licence key: every query of your data is scoped to the calling licence or its team, and licence keys never appear in URLs. Find companies is different: its cache of people’s details from the public Companies House register is kept for 24 hours and used for every customer’s searches. Access to production is limited to the people who run the service, on least-privilege accounts with multi-factor authentication; secrets live in provider secret stores, never in source code. On a team plan the reveals are billed to the org, so the team’s revealed numbers and its call log are visible to the team and to the admin who pays for them. Reveal rows carry no record of which rep ran one. Private extension notes are not imported, and transcripts are not imported unless transcript saving is on for dialled calls. A recording or a saved transcript can be reached only by the rep who made the call and the account admin. Separate dashboard-authored notes are accessed through their owning user; exporting one to HubSpot, Salesforce or Google Sheets requires an explicit destination choice for that note.
What the extension can reach
It runs only on linkedin.com and reads the profile you already have open, in your own logged-in session. It presses three of LinkedIn’s own controls and no others: the Add-a-note button inside an invitation dialog you opened, the Message button on a profile, and the same control on a Sales Navigator lead page. It fills the note, message or InMail and leaves it on screen; Connect, Invite and Send are always your press. Four permissions: storage (settings and drafts, on your machine), downloads (your CSV exports), alarms (callback timers) and offscreen. Offscreen lets a call run in a hidden page of the extension’s own, so it survives you moving between LinkedIn tabs. It can talk to PitchWhip’s own server and to Lemon Squeezy for licences. Google is added only if you switch on the optional Sheets and Calendar sync. When you place a call from PitchWhip, the call itself runs between your browser and Twilio, our telephony provider, so the audio does not detour through us. It never asks to read your history, your tabs or any other site.
Call audio and recording
Call mode, on your own phone, makes no audio file at all. Live transcription runs on your computer. If your account admin turns it on, Chrome turns the call into text on the device itself, so no call audio is sent to Google, to PitchWhip or to anyone else to be transcribed. The first time, Chrome downloads its speech files (about 150 MB) from Google; that download carries no audio and no words. The text (not the audio) then goes through PitchWhip to Anthropic for live suggestions and the call summary. Calls you dial from PitchWhip are carried by our telephony provider, Twilio, and are recorded only if an account admin switches recording on. It is off by default. When it is on, the rep making the call chooses whether the person called hears an automated announcement, unless the account admin requires it on every call. A recording is held at Twilio, where the rep who made the call or the account admin can play or delete it. It is deleted automatically at the end of the period the account admin chooses: 90 days after the call unless they choose 1 year, 2 years or until deleted. A transcript stays on the rep’s device unless an admin switches on transcript saving, which stores it for the same period for that rep and the admin.
Breach (72 hours)
If we suffer a breach that affects your data we will tell you and, where required, the regulator without undue delay and within 72 hours of becoming aware. Notices our payment, data and email providers send to our servers are signature-checked before anything is written.
Sub-processors
Cloudflare (cloud data), Vercel (site and portal), Anthropic (script and brief generation, transient), Lemon Squeezy (payments; we never see card numbers) and Resend (sign-in codes and campaign email, EU region). Twilio carries calls you dial and holds any recording until it is deleted. Our contact-data provider is identified by category for commercial confidentiality and named in the sub-processor schedule at contract stage. Live transcription runs on your computer and sends Google no call audio. The Sheets and Calendar sync run under your own relationship with Google. Changes are notified with 30 days’ notice.
DPA
Our Data Processing Agreement (Article 28 UK GDPR and EU GDPR) applies to every customer automatically and we’ll countersign a copy on request. Our public documents are written to UK GDPR, EU GDPR and US state privacy laws including the CCPA; for other regimes, send your questionnaire and we’ll answer it against your jurisdiction.
ICO registration
PitchWhip Ltd is registered in England and Wales, company number 17389184, and registered with the UK Information Commissioner’s Office, reference ZC223705. We’re a young company and don’t yet hold SOC 2 or ISO 27001 and won’t pretend otherwise; send your security questionnaire to hello@pitchwhip.com and it gets the same candour.
The full documents are the reference.
Vendor questionnaires go to hello@pitchwhip.com. We complete them promptly, and we’ll take a security or DPIA call with your team if that’s faster.