Privacy Policy

This Privacy Policy describes how Drew Bedard ("we", "us", or "our") collects, uses, and protects your personal information when you use Pitcher Plan (the "Service").

1. Who We Are

Drew Bedard is the data controller for the personal data processed through Pitcher Plan. If you have questions about this policy or your data, contact us through the Service.

2. Information We Collect

• Account information: name, email address, and login credentials provided when you register.
• Usage data: how you interact with the Service, including pitcher plans created, features used, and session activity.
• Device and log data: IP address, browser type, operating system, and device identifiers.
• Support messages: communications sent to us for customer support or inquiries.
• Payment-related data: our payment processor, Paddle, handles payment details directly. We do not store full credit card numbers.

3. How We Use Your Information

• Contract performance: to provide the Service, manage your account, and deliver weekly pitcher plans.
• Legitimate interests: to improve the Service, prevent fraud, and ensure security.
• Consent: for marketing communications (where you have opted in).
• Legal obligation: to comply with applicable laws and regulations.

4. Data Sharing

We share your data with the following categories of recipients:

• Service providers: hosting, analytics, and customer support tooling.
• Merchant of Record: Paddle.com acts as our reseller for all purchases. Paddle processes payments, subscription management, tax compliance, and invoicing on our behalf.
• Professional advisers: legal and accounting professionals, where necessary.
• Authorities: when required by law or to protect our rights.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account or data is no longer needed, we will delete or anonymise it within a reasonable period, unless legal obligations require longer retention.

6. Your Rights

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data. You may also have the right to data portability and to object to certain processing. To exercise these rights, contact us through the Service.

If you are in the UK or EEA, you have additional rights under the GDPR, including the right to complain to your local supervisory authority. We will respond to requests within one month.

7. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.

8. Cookies and Tracking

We use essential cookies to operate the Service and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

9. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data during these transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on the Service with an updated effective date.