Privacy Policy for the PITCHTY Platform

Effective from 1 October 2026.

Key points

MyEnterprise 9 s.r.o. uses personal data to operate Pitchty, present candidates and facilitate contact with employers. For enquiries and to exercise your rights, contact info@pitchty.com.

Your profile and video have different access levels. Authorised signed-in users of active company accounts can see an approved basic profile and video thumbnail even without a subscription; playing the video requires a subscription. An abbreviated name does not guarantee anonymity, particularly if you can be recognised from the thumbnail or video. Who can see what.
We disclose contact details after your approval. We make your phone number, contact email and full display name available to the company whose contact request you approve. The company is responsible as an independent controller for processing for its own recruitment purposes. Recipients and their responsibilities.
You have choices about your data. You can pause your profile, withdraw marketing consent or request account deletion. Pausing alone does not remove access for companies with approved contacts. Deletion in Pitchty does not automatically erase data a company holds outside the Platform. Your controls and account deletion.
Service providers participate in processing. Videos held by Mux are stored in the USA. Providers and transfers outside the EEA.

The following sections explain these points and your rights in more detail.

Contents

1. Who are we and who does this policy cover?

This information concerns the processing of personal data when using the PITCHTY platform, which includes the candidate mobile application and the employer web application (hereinafter the “Platform”). It is intended for job candidates, employers who are individuals, and persons using the Platform on behalf of employers, in particular company account administrators and recruiters.

It also applies to persons who report content on the Platform to us, even if they do not have a user account.

You can find the procedure for deleting a candidate account and related data in the instructions below.

MyEnterprise 9 s.r.o., Company ID No. 24006475, with its registered office at Sokolova 719/2, Karlín, 186 00 Praha 8, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 436766.

This company is the controller of personal data processed for the operation of the Platform (hereinafter the “Controller”). Contact details for enquiries and the exercise of rights by all data subjects: info@pitchty.com.

2. What data do we collect and where does it come from?

2.1 Data common to user accounts and operation of the Platform

email address, name and account identifier, information about email verification and sign-in method;
for registration using an email address and password, the password stored as a cryptographic hash; for external sign-in, the data described below for Google, Facebook and Apple;
sign-in and session data, acceptance of terms, consents granted or withdrawn, and user settings;
the content of service-related communications, requests and notices, and the data needed to handle them;
technical and security records concerning use of the Platform, errors and actions performed, including identifiers, timestamps and, depending on the particular service, device, browser or IP address information.

We obtain data from you, through use of the Platform and, where you choose external sign-in, from the relevant provider. A company account administrator may also provide us with information about an invited user and their role. We obtain information about payments and their status from the payment service provider.

2.2 Cookies and storage in the applications

The employer web application uses technical cookies to recognise a signed-in user and maintain sign-in. They verify the session and access to the account. In the candidate mobile application, session credentials are kept in the device’s secure storage. The mobile application also stores some previously retrieved data locally so that it can display it again more quickly.

Sign-in sessions for candidates and employer application users have a validity period of 180 days, which may be renewed as the application is used. A session may end earlier, for example on sign-out. This validity period does not determine how long we retain the account and other data on our servers; section 6 explains that retention.

You can remove or block cookies in your browser and manage locally stored application data using the options available on your device. Doing so may sign you out or limit application features. Removing local data alone does not delete your account or data on our servers. For that purpose, use the account deletion or rights request procedures.

This section describes storage in the candidate and employer applications. Technical delivery and processing of video by Mux are described under service providers.

2.3 Candidate data

In connection with creating and using a candidate profile, we process, in particular:

display name; before a contact request is approved, the employer sees the first name and the initial of the surname (e.g. Jan N.); if the name consists of a single word, only that name is displayed;
date of birth – to verify the minimum age of 15; it is not displayed to employers;
confirmation of entitlement to work in the Czech Republic;
telephone number and contact email address;
preferred location (a region of the Czech Republic) and selected profile information, such as languages, personal qualities or work availability, for presenting the profile and allowing employers to search for candidates;
video introduction (pitch), its audio and visual components, thumbnails and data relating to its processing and moderation;
contact requests, their messages and status, profile view data and notification settings, including identifiers for delivering push notifications.

For aggregate profile view statistics, we do not record which specific employer viewed your profile or the IP address associated with the view. We retain statistical data in pseudonymised form.

2.4 Data of employers and persons acting on their behalf

users’ identification and contact details, their association with the employer, their role as company account administrator or recruiter, and membership status;
invited persons’ email addresses, information about invitations sent and accepted, and the assigned role;
company and billing details, in particular name, Company ID No., Tax ID No., address, location, description and logo, where they contain personal data or relate to an individual carrying on business;
data about subscriptions, orders, invoices, payments and their status, including customer and transaction identifiers with the payment service provider;
data about recruitment activity on the Platform, in particular contact requests sent and their messages, selected candidates on the shortlist and internal notes about them;
company notification settings and records of account management and actions performed.

2.5 Sign-in with Google

If you choose to register or sign in with Google, we receive your account identifier, email address, information about its verification, your name and, where applicable, the URL of your profile picture from Google.

We request only permissions for basic identification and sign-in.

2.6 Sign-in with Facebook

If you choose to register or sign in with Facebook, we receive the identifier of your Facebook account for our application and, depending on the information supplied by the provider, your name, email address, information about its verification and the URL of your profile picture. We request only permissions for your basic public profile and email address.

2.7 Sign-in with Apple

If you choose to sign in with Apple in the candidate application, we receive the identifier provided by Apple for your sign-in to the Platform, your email address and information about its verification. We process your name if Apple provides it during authorisation.

If you choose to hide your email address, Apple provides us with a relay address from its “Hide My Email” service instead of your actual address. Apple forwards messages sent to that address according to your settings. We use this address as your account email address and, where applicable, to prefill the contact email in your candidate profile. If you leave it in your profile, we will disclose it to the relevant employer after you approve a contact request. Turning off forwarding with Apple may affect message delivery.

2.8 Use and disclosure of data from external sign-in

External sign-in through Google, Facebook or Apple is voluntary; you may use another registration and sign-in method offered by the application. We do not obtain the passwords for your accounts with these providers.

We store and use data obtained when you sign in with Google, Facebook or Apple to create and recognise your account, sign you in, manage and secure your account, and send related service communications. We may also use your name and contact email address to prefill your candidate profile; you can edit this information.

We also store technical data used to verify sign-in or access granted (sign-in tokens), including information about their validity and the scope of permissions, to the extent provided by the relevant provider.

Data incorporated into your candidate profile are subject to the same disclosure rules as information you enter directly, as set out in section 4 on profile and contact visibility. We do not disclose your account identifiers with these providers or your sign-in tokens to employers.

3. Why do we use data and on what legal bases?

3.1 Purposes of processing

We process your personal data for the following purposes:

Creating, signing in to, managing and securing user accounts.
Presenting candidates through their profiles and video introductions and facilitating contact with potential employers.
Managing company accounts, user roles and invitations to the employer’s team.
Providing recruitment features, in particular contact requests, shortlists and employers’ internal notes.
Managing subscriptions, payments and billing, and fulfilling related legal obligations.
Service-related communications with users, handling their requests and delivering notifications.
Recording candidates’ voluntary choices regarding the potential sending of Pitchty’s own news, tips and offers by email, and managing related consents.
Moderating content, handling notices, ensuring the operation and security of the Platform, diagnosing errors and protecting our rights and the rights of other persons.

Below we set out the legal bases, related purposes and main categories of data. Section 2 describes the specific data involved.

3.2 Performance of a contract or taking steps before entering into a contract

Purposes: creating and operating an account, providing the agreed Platform features, managing subscriptions and related service communications, where you are a party to the contract as an individual. For candidates, this also includes processing data necessary for the agreed service of presenting their profiles and video introductions to authorised employers and facilitating contact approved by the candidate.

Related data: Account and sign-in data, candidate profiles and videos, contact requests and approved contact details, subscription, payment and service communication data.

3.3 Candidate’s voluntary consent to email marketing

Purposes: recording your choice and potentially sending Pitchty’s own news, tips and offers to your account email address. Consent is not a condition of the service. Details, the procedure for withdrawing consent and the current scope of this activity are set out in the section “Pitchty news and offers by email”.

Related data: Account email, marketing choice and records of the wording, grant and ending of consent.

3.4 Legitimate interests

Purposes: managing the relationship with an employer through its representatives and recruiters, their access permissions and team; also ensuring the security and reliable operation of the Platform, preventing misuse, diagnosing errors, and establishing, exercising or defending legal claims.

Related data: Identification and business contact details of employer representatives, their memberships, roles and invitations; technical, security and error records and data needed for legal claims.

3.5 Compliance with legal obligations

Purposes: in particular maintaining and retaining accounting and tax documents, handling data subjects’ rights and fulfilling legal obligations towards competent authorities; also handling notices of illegal content and providing statements of reasons for content restrictions to the extent required by the Digital Services Act (DSA).

Related data: Accounting and billing data, data in rights requests, notices of illegal content and related communications and records.

Providing data necessary for registration, account operation or a specific service ordered is a condition of using them. You decide whether to provide optional information.

4. Who can see your profile, video and contact details?

4.1 Candidate profile visibility

A video introduction is required for publication of a profile. Once approved by a moderator, the basic profile, including an abbreviated name, regions, profile information and a video thumbnail, is available to signed-in authorised users of active company accounts even without a subscription. The video thumbnail may show your face. The display name is not an officially verified identity, and abbreviating the name does not guarantee that the profile is anonymous.

Playing videos and sending new contact requests require an active subscription, including any trial period. We disclose your telephone number, email address and the full display name you entered only to the company whose contact request you expressly approve.

After the subscription ends, previously approved contacts and history remain available to the employer on a read-only basis. Further details are available in the Terms of Use of the PITCHTY Platform for Candidates.

4.2 Access within an employer’s account

The shortlist and internal notes are accessible to authorised users of the relevant employer’s account; they are not displayed to candidates or other employers. Details of use of the employer application are governed by the Terms and Conditions of the PITCHTY Platform for Employers.

5. Who receives data and where is it processed?

5.1 Service providers

Authorised personnel of the Controller and service providers have access to personal data to the extent necessary for the relevant purpose. Where a provider processes personal data on our behalf, it does so under a data processing agreement. Some providers, in particular payment service and external sign-in providers, may also act as independent controllers for their own purposes and legal obligations.

Mux – uploading, storing, technically processing and playing video introductions, creating thumbnails and processing technical data relating to playback, including IP addresses.
Resend – delivering emails to candidates and users of the employer application, including account verification, invitations and service notifications; it processes, in particular, recipients’ addresses, message content and delivery data.
Stripe – processing employers’ payments, subscriptions and billing data. You enter payment details in Stripe’s payment interface; the Controller processes related billing data, identifiers and information about payment outcomes and progress.
Sentry – diagnosing errors and ensuring application reliability through technical information about errors and devices; error records may contain personal data related to the event concerned.
Expo and associated Apple and Google services for mobile notifications – delivering push notifications, which involves processing device delivery identifiers, notification content and delivery data.
Hosting, database, storage and backup providers – technical operation and security of the Platform and retention of data needed to provide the service.

If you choose to sign in with Google, Facebook or Apple, the relevant provider also processes sign-in data under its own privacy terms.

5.2 Employers and their responsibilities

Employers are recipients of candidate profiles and, after approval of a contact request, also of the candidate’s contact details. To the extent that they use the data for their own recruitment purposes, they act as independent controllers. In particular, they are responsible for the legal basis, informing candidates, security and data retention periods in their recruitment activities. You may also exercise rights concerning such processing directly with the relevant employer.

5.3 Other recipients

Your personal data may also be disclosed to third parties where disclosure is required by law (e.g. supervisory authorities, law enforcement authorities or courts), or where personal data are disclosed to protect the Controller’s rights (e.g. lawyers or courts).

5.4 Will your personal data be transferred outside the European Union/European Economic Area?

When using the providers listed above, personal data may also be processed outside the European Union and the European Economic Area, in particular in the USA. This may concern both the provider itself and its subprocessors.

A transfer to a third country must be supported by an appropriate mechanism under data protection law: a European Commission adequacy decision, or appropriate safeguards, in particular standard contractual clauses and any supplementary measures. The EU–US Data Privacy Framework may be used only for a recipient with a valid certification covering the relevant transfer.

When using Mux, videos are stored in the USA. For transfers of data to Mux, Inc., we rely on the European Commission’s adequacy decision under the EU–US Data Privacy Framework, within the scope of that recipient’s valid certification. Mux’s standard terms include a data processing addendum, which provides for the use of standard contractual clauses if that framework ceases to be applicable.

We will provide information about the specific safeguards used and how to obtain a copy at info@pitchty.com.

6. How long do we retain data?

We determine retention periods according to the purpose and type of data:

Candidate account and profile: for as long as the account exists; after a deletion request, we follow the instructions and time limits below. If you do not sign in to your candidate account for 24 months, we may delete the account and erase the data. Deletion may also take place under the conditions in Article 11 of the Terms of Use of the PITCHTY Platform for Candidates.
Email marketing choice and evidence of consent: consent is valid for a maximum of 3 years from the most recent express grant. It ends earlier upon withdrawal, acceptance of a candidate account deletion request for processing, or a change to the account’s verified email address. Signing in or other activity does not extend its validity; granting consent again requires your express choice.

We retain evidence of consent for as long as the consent is valid. If consent has not been used to send emails, we delete evidence containing personal data no later than 30 days after the consent ends, including where it is replaced by new consent. We retain information about your current marketing choice for as long as the account exists. When erasing the account, we also delete this information and evidence of consent containing personal data; the above 30-day period must not extend the time taken to erase the account.
Employer account, memberships and invitations: for as long as necessary to manage the account, the relevant membership or invitation and the contractual relationship with the employer; thereafter, only to the extent and for the period needed to fulfil legal obligations or protect legal claims.
Recruitment records: for as long as needed to handle contact requests and use related recruitment features, or to resolve disputes; internal notes are deleted when a candidate is removed from the shortlist. Erasure of a candidate account also includes removal or anonymisation of their data in related Platform records.
Accounting and tax documents: for the period prescribed by applicable law, even if the account or subscription has already ended.
Operational, security and audit records and request records: for as long as necessary to resolve the event or request, secure the Platform, demonstrate compliance with obligations, or establish, exercise or defend legal claims. The nature of the record, the applicable statutory or limitation period and any ongoing proceedings determine the retention period.

Once the purpose and legal basis for retention no longer apply, we delete or irreversibly anonymise the personal data. Data that must be retained to fulfil a legal obligation or for a legal claim are not, on that basis, used further for ordinary candidate presentation or recruitment.

7. How can you manage your data and account?

Pausing a profile, withdrawing marketing consent, disconnecting external sign-in and deleting an account have different effects. The procedures and their consequences are explained below.

7.1 Pausing and reactivating a candidate profile

You can pause your profile in Settings without deleting your account. The profile will no longer appear in search results, via a shared link or in the usual overview of selected candidates (shortlist). Pausing does not remove existing shortlist entries.

Employers whose contact requests you have approved retain access to your profile and the disclosed information to the extent specified in the Terms. This also applies to requests you approve while your profile is paused.

Details of pausing, handling pending requests and reactivating a profile are governed by Article 3.4 of the Terms of Use of the PITCHTY Platform for Candidates. Account and data deletion are described in the instructions for deleting a candidate account and data.

7.2 Pitchty news and offers by email

During registration or in Settings, you may give us your express and voluntary consent to send Pitchty’s own news, tips and offers to your account email address. We currently do not send marketing emails; we record consent for potential future sending. It does not cover marketing push notifications or a public website newsletter.

To manage your choice and document consent, we record the relevant account and email address, the time and method of granting or ending consent, and the wording presented to you.

You may withdraw consent at any time in Settings without deleting your account and without affecting your use of the service. You may also contact info@pitchty.com and object to processing for direct marketing; we will then stop using the data for that purpose. It will be possible to unsubscribe from every marketing email we may send. Withdrawal of consent does not affect the lawfulness of processing before its withdrawal. Service messages, such as account verification, moderation information or contact request notifications, are separate from marketing and do not depend on marketing consent.

7.3 How can you disconnect sign-in with Google, Facebook or Apple?

You can manage or remove the connection with Pitchty in your account settings with the relevant provider. Details are available in Google’s connected apps settings and in the guides to managing sign-in with Facebook or Apple.

Removing the connection with the provider alone does not delete your Pitchty account or data we have already obtained. If you want them erased, use the candidate account deletion procedure or contact us at info@pitchty.com. Removing the connection may affect your ability to sign in again through that provider.

7.4 How can you delete a candidate account and related data?

Deletion directly in the Pitchty candidate application

Sign in to the Pitchty candidate application.
Open Settings → Account → Delete account.
In the “Confirmation word” field, type exactly SMAZAT.
Press the Delete account button.

Deletion of a candidate account is irreversible.

Request without access to the application

Write to info@pitchty.com, stating that you request deletion of your Pitchty candidate account and related personal data, and provide the email address used to sign in to that account.

We recommend sending the request from the email address associated with the account. However, this is not a condition for submitting a request; if you no longer have access to that address, state this in your message. Do not send us your password.

What happens after a candidate account deletion request is accepted, and what data are removed?

Immediately after a candidate account deletion request is accepted for processing, your candidate profile will be blocked and will no longer be available to employers. No new contact requests can be sent to you, and pending contact requests will be cancelled.

For a request submitted by email, these effects occur after the request has been verified and erasure has been initiated, rather than upon receipt of the email alone.

We will remove your profile and video introduction from the Platform and video storage no later than 10 working days after submission of the request. As part of erasure, we remove or anonymise related candidate data, in particular profile identification and contact details, profile choices, notification settings and identifiers, and personal data in contact requests, internal notes and other related Platform records. We also remove related data obtained from external sign-in and sign-in tokens.

Data in technical backups may remain until the backups are routinely overwritten, for no longer than 30 days. During this period, backups are not used for the ordinary operation of the Platform. We retain data necessary to fulfil a legal obligation or to establish, exercise or defend legal claims only to the extent needed and for the applicable period specified above.

If you also use Pitchty as an employer or its representative, deleting your candidate account does not delete your employer account or cancel the employer’s subscription. Data needed for this separate purpose, including shared sign-in credentials, will be retained.

Deleting a Pitchty account does not, in itself, delete data that an employer has already received and continues to process as an independent controller outside the Platform, or your account with an external sign-in provider. You may also exercise your rights concerning those data with the relevant controller.

Uninstalling the application or signing out alone does not delete your account or personal data stored on the Platform.

7.5 Requests by employers, company account administrators and recruiters

You can request access to, rectification or erasure of personal data at info@pitchty.com or in writing to our registered office. Specify the account, company and data concerned; do not send us your password. Section 9 explains the conditions and response deadlines.

Removing access or deactivating company membership does not, in itself, erase personal data. A request to erase your personal data also does not, in itself, close the company account, remove other members’ access or cancel the employer’s subscription. If you also want to end the subscription, follow the Terms and Conditions for Employers.

When handling a request, we distinguish your personal data from other people’s data and records we continue to retain for the reasons described in section 6. If you also use a candidate account, specify whether your request concerns that account too.

8. How do we protect data?

Access to personal data on the Platform requires verification of sign-in and is restricted according to the user’s permissions for the relevant account or company.

9. What are your rights and how can you contact us?

9.1 Subject to the conditions prescribed by law, you have the following rights

the right to information about the processing of your personal data;
the right of access to personal data, including the right to a copy of your personal data processed by the Controller;
the right to withdraw consent at any time where processing is based on consent;
the right to portability of your personal data to another controller (where these are personal data you provided to the Controller, their processing is automated and is based on your consent or a contract);
the right to rectification or completion of personal data;
the right to erasure (after withdrawal of consent, expiry of the retention period or where personal data are processed unlawfully), or to restriction of processing (where you contest the accuracy of the personal data processed, object to the processing of personal data or request restriction of processing instead of erasure);
the right not to be subject to a decision based solely on automated processing that has legal effects concerning you or similarly affects you.

You may object at any time to processing of personal data based on legitimate interests, on grounds relating to your particular situation. The Controller will not continue such processing unless it demonstrates compelling legitimate grounds that override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims.

You may exercise your rights at info@pitchty.com or in writing to the Controller’s registered office. Candidates may also submit an erasure request directly in the application using the procedure above. In your request, specify the account and processing concerned. Where there are reasonable doubts about your identity, we may request the additional information necessary to verify it.

We handle requests to exercise rights free of charge, subject to the exceptions prescribed by law.

We will inform you of the outcome of your request without undue delay and no later than one month after receiving it. Where necessary due to the complexity or number of requests, this period may be extended by a further two months; we will inform you of the extension and its reasons within the first month. This does not extend the time limits specified above for removing the candidate profile and video.

You also have the right to contact the Office for Personal Data Protection at any time with a submission or complaint.

10. Changes to this policy

The current version is available on the Platform’s website.

We will inform you of material changes to this information reasonably in advance, by email or an in-app notice.

If we intend to process your personal data for a purpose other than the one for which they were collected, we will inform you of the new purpose and its legal basis before starting such processing. If your consent is required for the new processing, we will obtain it in advance.