Privacy policy
Your calendar and presentations are work data. Here is what PitchTailor accesses, why, and how you can control it.
Who is responsible
PitchTailor is operated by Lamona Technology AB, the controller of personal data processed to operate this service. Contact us at hi@lamona.tech for privacy questions or requests. This policy applies to the website, public demo, and authenticated prototype.
What we collect
- Account information: your name, email address, sign-in provider and account identifiers.
- Calendar information, when you connect a calendar: event titles, descriptions, dates, times, locations, meeting links, attendee names and email addresses, and event identifiers needed to identify meetings and add approved presentation links. We store provider access and refresh tokens to maintain your connection.
- Presentation information: uploaded PowerPoint files, extracted slide text, your company website and presentation brief, generated decks, language versions, and approval history.
- Organization information: membership, invitations, settings, permissions, and usage allowances.
- Technical information: essential authentication cookies, request and error logs, and security information such as IP addresses. If billing is enabled, we also process subscription identifiers and status; payment details are handled by Stripe.
How we use it
We use these details to sign you in, show upcoming meetings, identify prospect companies from meeting information, personalize and translate presentations, host decks, and add a presentation link to an event after you approve it. We also use necessary technical data to maintain the service, prevent abuse, troubleshoot problems, and measure usage allowances.
The public website preview reads the public website you enter to obtain branding and presentation copy. It does not require access to your calendar. Sample calendars and sample prospect information are illustrative.
Calendar permissions and control
You choose whether to connect Google Calendar or Microsoft Outlook and grant the requested permissions. Read access supports meeting preparation. Write access supports adding an approved presentation link to an event. Google read access also lets you view calendars already shared with your connected Google account, within the sharing permissions set by their owners or your organization. Availability-only access shows busy intervals without meeting details. Shared calendars are view-only in PitchTailor. This does not grant organization-wide access or change calendar sharing permissions; each teammate connects their own calendar for presentation preparation and approved updates.
You can revoke PitchTailor’s access through your Google Account’s third-party connections settings or your Microsoft account’s application permissions. Revoking access stops future authorized calendar access; it does not delete data already stored by PitchTailor or remove links previously added to events. Email us to request removal of stored data.
AI processing and service providers
When you request AI generation, tailoring or translation, relevant presentation text, your brief, public website information, and selected meeting context may be sent to Claude through Amazon Web Services Bedrock to produce that result. Do not upload material you are not authorized to process. AI output needs your review.
We use Supabase for authentication, database and file storage; Vercel for hosting; Google and Microsoft for calendar connections; AWS Bedrock for configured AI features; and Stripe when paid billing is enabled. These providers process data to deliver their respective services under their applicable terms and agreements. Data may be processed outside your country; where required, we use applicable transfer safeguards, including contractual protections.
Sharing presentations
An approved hosted presentation can be opened by anyone who has its link. Adding that link to a calendar event can make it available to the event’s attendees and others who can see the event description. Calendar providers may notify attendees about an event update. Review a deck for confidential information before approving or sharing it. Private template uploads are not made public by uploading them.
Google API data: limited use
PitchTailor’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google calendar information is used only to provide the meeting preparation and presentation features you authorize.
We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Human access to Google user data is limited to your explicit consent for specific support, necessary security investigations, or legal obligations. Service providers receive only the data needed for the authorized features.
Storage and retention
We retain account, organization, template and generated presentation data while needed to provide your account and its saved work. We retain technical logs only for operational and security needs and any legally required records for the required period. When you request deletion, we remove data we no longer need, subject to legal obligations and backup expiry. Shared copies, calendar event descriptions, and downloaded files outside PitchTailor are not removed by deleting your account.
We use access controls and encrypted connections. Calendar provider tokens are encrypted before storage and uploaded templates are held in private storage. No service can guarantee absolute security.
Your rights and requests
Depending on applicable law, you can request access, correction, deletion, restriction, portability, or object to processing. We rely on providing the requested service for account and product processing, your authorization for connected calendar access, and legitimate interests for security and essential operations. You can withdraw calendar authorization at any time. Contact hi@lamona.tech from your account email to request account or file deletion; we may verify your identity before acting. You may also complain to your local data protection authority, including the Swedish Authority for Privacy Protection (IMY).
Changes
We update this policy as the prototype develops. The date above identifies the current version. We will give appropriate notice of material changes and seek further consent when required.