This document is a protective commercial template, not legal advice. The operating entity, registrations, and final clauses must be reviewed and approved by qualified counsel before public commercial use.
1. Who is responsible
RePitch is a product of Kanz.ai. The Kanz.ai entity identified in your account, order form, invoice, or communication is the controller for account, commercial, and website data. For personal data included in customer uploads or generated materials, the customer normally acts as controller and RePitch acts as processor, subject to the applicable agreement.
2. Data we collect
- Account and identity data, including name, organization, role, email, telephone number, and authentication details.
- Customer content, including brochures, images, brand assets, agent profiles, professional identifiers, prompts, selections, and generated packs.
- Usage and technical data, including device, browser, IP address, timestamps, feature activity, API calls, logs, security events, and approximate location derived from IP.
- Commercial data, including plan, usage, invoices, payment status, support history, and partnership enquiries. Payment card details may be handled directly by a payment provider.
- Integration data received from connected CRMs, portals, AI providers, or other services based on the permissions you grant.
3. How we use data
We use personal data to provide and secure RePitch, create and manage accounts, process content, generate outputs, operate integrations, provide support, bill customers, communicate service information, prevent abuse, monitor reliability, improve features, enforce agreements, comply with law, and establish or defend legal claims.
Where applicable, our legal bases may include performance of a contract, legitimate interests, compliance with legal obligations, consent, and protection of vital or legal interests.
4. AI processing
Customer content may be processed by AI models selected by RePitch or by the customer. Inputs can contain personal data if you include it. Model providers and their processing locations depend on your configuration and plan. Do not submit sensitive or restricted personal data unless expressly supported by your agreement and configuration.
RePitch does not make final decisions about individuals. Customers must provide human review and any notices, consent, or rights required for their use case.
5. Sharing
We may share data with affiliates, hosting providers, AI providers, data vendors, analytics and security providers, payment processors, communication services, professional advisers, and integration partners where necessary for the service. We may also disclose data when required by law, to protect rights and safety, in connection with a corporate transaction, or at your direction.
We do not sell personal data. We do not permit third parties to use customer content for their independent marketing.
6. International transfers
RePitch and its providers may process data outside your country. We use contractual, organizational, and technical safeguards appropriate to the transfer where required. Regional hosting does not necessarily prevent limited cross-border access for support, security, account operations, third-party integrations, or customer-selected AI providers. See the Data Residency page and your order form for binding commitments.
7. Retention
We retain data for as long as needed to provide the service, meet contractual and legal duties, resolve disputes, maintain security, and enforce agreements. Retention varies by data type, plan, configuration, and legal requirement. Deleted data may remain in protected backups until normal backup expiry. We may retain de-identified or aggregated information that no longer identifies an individual.
8. Security
We use administrative, technical, and organizational measures intended to protect data, including access controls, encryption where appropriate, logging, tenant separation, and vendor review. No system is completely secure. Customers are responsible for access configuration, user permissions, source-material handling, connected services, and protection of their own credentials and API keys.
9. Your choices and rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent. Rights may be limited by law, security, confidentiality, or our role as a processor. For data controlled by a RePitch customer, contact that customer first.
Send requests to hello@repitch.net. We may verify identity and authority before responding.
10. Children
RePitch is a business service and is not directed to children. You must not submit personal data about children unless lawful, necessary, and expressly permitted by your agreement.
11. UAE data-protection framework
Where applicable, we seek to align our handling of personal data with the UAE Personal Data Protection Law and other laws that apply to the relevant entity, customer, or processing location. Special regimes may apply in free zones or other jurisdictions. A signed data-processing agreement controls over this summary where applicable.
12. Changes and contact
We may update this policy as RePitch, our providers, or legal requirements change. Material changes will be communicated through reasonable means.
Privacy questions and requests: hello@repitch.net.