Last updated: October 2026
BankingPitch collects the minimum data necessary to provide our service: your name, email address, and role within your organisation. Deal data you input (company names, financial parameters, sector information) is processed to generate pitch book content and is stored securely in our database.
Your data is used exclusively to: generate pitch book content via AI, maintain your account and session, provide audit trails for compliance, and improve our service. We do not sell, share, or distribute your data to third parties. Deal information is never used to train AI models.
All data is stored in encrypted PostgreSQL databases. Passwords are hashed using bcrypt with 12 salt rounds. Sessions use signed JWT tokens. API communications are encrypted via TLS. Access is controlled through role-based permissions with five tiers: Analyst, Associate, VP, MD, and Admin.
We always use the cookies needed to keep you signed in and protect your session. Those are essential and do not need consent. We also use PostHog for anonymous product analytics (which pages and features are used), but only if you choose “Accept analytics” when asked. If you decline, no analytics script is loaded and nothing is sent. You can change your choice at any time with the “Cookie settings” link in the footer of our public pages.
Deal data and audit logs are retained for the duration of your account. When a user account is deleted by an administrator, all associated deals, templates, and audit entries are permanently removed. You may request data deletion by contacting support@bankingpitch.com.
Under GDPR and applicable data protection laws, you have the right to access, rectify, or delete your personal data. You may also request a copy of your data in a portable format. To exercise these rights, contact your organisation's administrator or email support@bankingpitch.com.
For privacy-related enquiries, contact us at privacy@bankingpitch.com.