1. Information We Collect
When you use PitchMint, we collect the following information:
- Account Information: Name, email address, company name, and business details you provide during registration and onboarding.
- Prospect Data: Contact information you upload or enter for your sales prospects, including names, email addresses, job titles, and company information.
- Email Content: Email drafts, sent emails, and AI-generated content created through our platform.
- Usage Data: Information about how you interact with our service, including pages visited, features used, and actions taken.
- Payment Information: Billing details processed through our payment provider (Cashfree). We do not store full payment card details on our servers.
2. How We Use Your Information
- To provide and maintain our email outreach platform
- To generate AI-powered personalized emails and research insights using data you provide within PitchMint (prospect info, company details)
- To send emails on your behalf to your designated prospects
- To detect replies to your outreach emails and update prospect statuses accordingly
- To track email performance metrics (opens, clicks, replies)
- To process payments and manage your subscription
- To send you service-related notifications and updates
We do not use any data obtained from Google APIs for advertising, market research, AI/ML model training, or any purpose unrelated to providing the core functionality of PitchMint.
3. Google User Data & Gmail Integration
PitchMint offers an optional Gmail integration that allows you to send outreach emails directly from your Gmail account and automatically detect when prospects reply. This section specifically addresses how we handle data obtained through Google APIs.
3.1 What Google Data We Access
When you choose to connect your Gmail account, we request access to the following scopes:
- Gmail Send (
gmail.send): Allows PitchMint to send outreach emails from your Gmail account on your behalf. We only send emails that you have explicitly composed or approved through our platform. - Email Address (
userinfo.email): Used to identify your Google account and display your connected Gmail address in your settings.
Note: PitchMint does not request read access to your Gmail inbox. We do not read, scan, or access your emails. Reply detection is handled through email engagement tracking (open and click metrics) and manual status updates within the PitchMint dashboard.
3.2 How We Use Google Data
Your Google data is used exclusively for the following purposes:
- Sending Emails: We use the Gmail API to send outreach emails that you create, schedule, or approve through PitchMint. We never send unsolicited emails without your action.
- Engagement Tracking: We track email opens and clicks using standard email tracking pixels and link redirects. This data is used to score prospect engagement and surface interested leads in your dashboard. We do not read your Gmail inbox to detect replies.
- Account Identification: We display your connected Gmail address in your Settings page so you can verify which account is connected.
We do not use your Google data for advertising, market research, AI/ML model training, or any purpose unrelated to the core functionality of sending outreach emails through PitchMint.
3.3 How We Store Google Data
- OAuth Tokens: We securely store your Gmail OAuth refresh token and access token in our database (Supabase, hosted on AWS). These tokens are stored in encrypted columns with row-level security, ensuring only your account can access them.
- Gmail Address: Your connected Gmail address is stored in your user profile for display purposes.
- Engagement Data: We store email open counts, click counts, and timestamps. This data powers the engagement scoring system that helps you identify interested prospects. No email content from your Gmail inbox is stored.
3.4 How to Disconnect & Delete Google Data
You can disconnect your Gmail account and delete all associated Google data at any time:
- From PitchMint: Go to Settings → Email Configuration → Gmail and click "Disconnect Gmail." This immediately deletes your OAuth tokens from our database.
- From Google: Visit Google Account Permissions and revoke PitchMint's access. This invalidates all tokens on Google's side.
- Account Deletion: If you delete your PitchMint account, all Google OAuth tokens and associated data are permanently deleted within 30 days.
3.5 Google API Services User Data Policy Compliance
PitchMint's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google data to provide the email sending and reply detection functionality you explicitly requested. We do not use Google data to improve AI models, train machine learning systems, or for any purpose beyond providing the core application features.
- We do not transfer Google data to third parties, except as necessary to provide the service (e.g., sending the email via Gmail API), with your explicit consent, or for legal/security reasons.
- We do not use Google data for serving advertisements.
- We do not allow humans to read your Google data, unless you provide affirmative consent for specific messages, it is necessary for security purposes, or it is required by law.
4. Data Storage and Security
Your data is stored securely using Supabase (hosted on AWS infrastructure) with row-level security policies enforcing strict data isolation between users. Sensitive credentials such as SMTP passwords and OAuth tokens are encrypted using AES-256-GCM encryption before storage. All data transmission uses HTTPS/TLS encryption.
5. Data Sharing
We do not sell your personal data. We share information only with:
- Service Providers: Resend (email delivery), Groq and Google (AI processing for email personalization), Cashfree (payments), Supabase (database), Google Gmail API (email sending and reply detection when Gmail is connected).
- Legal Requirements: When required by law, court order, or governmental regulation.
We never sell, rent, or trade your data — including any data obtained from Google APIs — to any third party for any reason.
6. Your Rights (GDPR / CCPA)
You have the right to:
- Access: Request a copy of all personal data we hold about you, including any Google-related data.
- Rectification: Update or correct inaccurate data via your Settings page.
- Deletion: Request complete deletion of your account and all associated data, including Google OAuth tokens.
- Portability: Export your prospect data and email history.
- Objection: Opt out of data processing for specific purposes.
- Revoke Google Access: Disconnect your Gmail at any time from Settings or from your Google Account Permissions.
- Do Not Sell: We do not sell personal information (CCPA compliance).
To exercise these rights, contact us at privacy@novamintnetworks.in.
7. Email Compliance
PitchMint is designed to comply with CAN-SPAM, GDPR, and CCPA regulations. All outreach emails sent through our platform include an unsubscribe mechanism. We process unsubscribe requests immediately and permanently stop all email communications to unsubscribed contacts.
8. Cookies
We use essential cookies for authentication and session management. We may use analytics cookies (PostHog) to understand usage patterns. You can control cookie preferences through your browser settings.
9. Data Retention
We retain your data for as long as your account is active. Upon account deletion, we remove all personal data — including Google OAuth tokens and any Gmail-related information — within 30 days, except where retention is required for legal or compliance purposes.
10. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via email or in-app notification. Continued use of PitchMint after changes constitutes acceptance of the updated policy.