The short version. This summary is for convenience. The full policy below controls.
- We collect what you give us to build your speaker profile, find matches, and draft proposals, plus basic security and usage data.
- We do not sell your personal information, share it for targeted advertising, or show you ads.
- We send your profile and opportunity details to OpenAI to score matches and draft text. Your content is not used to train AI models, by us or by OpenAI.
- Speech practice needs your separate consent. Raw recordings are deleted automatically within 24 hours after analysis, and we never use them to identify you.
- Your speaker page is public only when you publish it.
- You can export your data as JSON, correct it, or delete your account from Settings at any time. We honor Global Privacy Control signals.
1. Who we are
Worth the Pitch is operated by Evolve AI Institute, LLC ("Worth the Pitch," "we," "us," or "our"), based in Cypress, Texas. We help professional speakers find calls for speakers, decide which are worth pursuing, and prepare proposals. This policy explains how we handle personal information when you use worththepitch.com, our web app, public speaker pages, and emails (the "Service"). We are the controller of the personal information described here, except where we say otherwise.
2. Information we collect
Information you give us
- Account information: your name, email address, and password. We store your password only as a one-way hash, and we encrypt your name and email in our database.
- Speaker profile: your title, bio, topics, audiences, industries, city or region, fee expectations, travel and virtual preferences, goals, target conferences, talks, and headshot.
- Documents for Profile Autopilot: a bio, CV, one-sheet, or pasted text (PDF, DOCX, or text) that you upload so we can build your profile.
- Proposals and pipeline: drafts, edits, application status, fees, travel value, reminders, and notes.
- Speech practice recordings (if you use this add-on and consent): video and audio of you rehearsing, the transcript, and the feedback we generate. See Section 5.
- Communications: messages you send us and your email preferences.
- Weekly call emails (if you sign up without an account): your email address and the topic you follow. We encrypt the address, send nothing until you confirm, and include a one-click unsubscribe link in every email.
- Affiliate information (if you join our affiliate program): your PayPal payout email, tax form information such as name, address, and taxpayer identification number (W-9 or W-8BEN), and referral and commission records. We use tax information only to pay you, withhold tax when required, and file required tax reports.
Information others give us
- Organizers who send a booking inquiry through a speaker page give us their name, email, and message. Organizers who submit a call for speakers give us event details and contact information.
- Payment processors (Stripe and PayPal) tell us your plan, payment status, the last four digits and brand of a card, and a customer reference. We never receive your full card number.
- Affiliates may refer you to us. We learn which affiliate referred you through a referral link or code.
Information we collect automatically
- Security and log data: IP address, browser type, sign-in attempts, error records, and request times, used for security, rate limiting, abuse prevention, and troubleshooting.
- Usage data: features you use, such as match refreshes and drafts, to enforce plan limits and improve the Service.
- Page-view counts: daily counts of views of your public speaker page and directory listing. These counts do not identify visitors.
- Cookies and local storage: see Section 10.
Information from public sources
Our crawler reads public web pages and feeds that announce calls for speakers. It identifies itself and honors robots.txt. These pages sometimes include an organizer's name or work email. We use that information only to describe the opportunity and link to it.
Browser extension
The optional Worth the Pitch autofill extension for Chrome and Edge works only on a page where you open it. When you press Fill, it reads the labels of the form's questions in your browser to place your answers, and that page content stays on your device. When you press Read this form, it sends the text of the visible questions on that page to us so we can match your draft to them. The extension does not collect browsing history, never reads password fields, and never submits a form for you. Connecting it creates an access key limited to the extension; we store only a one-way hash of that key, it expires after 180 days without use, and you can disconnect it at any time in Settings.
3. How we use information
| Purpose | Information used | Legal basis (EEA/UK) |
|---|---|---|
| Create and run your account, match you with opportunities, explain scores, and draft proposals you request | Account, profile, documents, proposals, pipeline | Performance of our contract with you |
| Publish your speaker page and directory listing when you choose to | Profile, headshot, talks | Contract; your choice to publish |
| Deliver organizer inquiries to you | Organizer name, email, message | Legitimate interests (connecting organizers with speakers they contacted) |
| Speech practice feedback | Recordings, transcript | Your explicit consent |
| Billing, taxes, and affiliate commissions | Billing records, affiliate and tax information | Contract; legal obligation |
| Send account, security, and billing emails | Name, email | Contract; legitimate interests |
| Send digests, deadline reminders, and product updates you have enabled | Name, email, matches | Contract; consent where required |
| Keep the Service secure, prevent fraud and abuse, and enforce our Terms | Log data, IP address, account data | Legitimate interests; legal obligation |
| Maintain and improve the Service using aggregated or de-identified statistics | Usage data | Legitimate interests |
| Comply with law and respond to lawful requests | Any relevant information | Legal obligation |
If we de-identify information, we keep it in de-identified form, do not attempt to re-identify it, and require recipients to do the same.
4. AI processing
We use OpenAI's API to score matches, read application forms, build profiles from your documents, create text embeddings for matching, draft proposals and messages, and (if you use it) transcribe and analyze speech practice sessions. To do this, we send OpenAI the parts of your profile, talks, documents, recordings, and the opportunity details needed for the task.
- No training. OpenAI processes this data as our service provider under its business terms and data processing agreement. Under those terms, OpenAI does not use data sent through its API to train its models. We do not opt in to any training or data-sharing program, and we do not use your content to train any AI model ourselves.
- Provider retention. For most features, OpenAI may keep API inputs and outputs for up to 30 days to detect abuse and then deletes them. For speech practice, we send audio and frames only to OpenAI services covered by a zero data retention arrangement, under which OpenAI does not store them after returning the result. If that arrangement becomes unavailable, we will stop sending audio and frames until we tell you what will change and ask for your consent again.
- Embeddings are text only. We create embeddings from text, such as topics and talk descriptions. We do not run facial recognition on, or create face templates from, your headshot or any other image.
- No significant automated decisions. Match scores and "Worth it" verdicts are suggestions to help you choose where to apply. They do not accept or reject you, set your fee, or decide any booking. You and the organizers make those decisions. You can adjust the minimum score or ignore it, and you can ask us at privacy@worththepitch.com to explain or review a score.
- Search. Searches we run through the Brave Search API and You.com use topic keywords only and contain no personal information about you.
5. Speech practice and biometric information
Speech practice is an optional paid add-on. This section explains exactly what happens to your recordings. It is also our publicly available written policy on retention and destruction of recordings for purposes of biometric privacy laws.
Consent comes first
Before your first recording, we show you a consent screen that explains what we collect, why, who receives it, and how long we keep it. Declining leaves your account and every other feature unchanged. You agree by checking a box that is unchecked by default and typing your name, which serves as your electronic signature and written release. You cannot record until you agree. We store the date, time, version of the consent text, and your typed name. Your camera and microphone also stay off until your browser asks you for permission.
What happens when you record
- Your browser records video and audio of you rehearsing.
- We send the audio to our AI provider (OpenAI) to create a text transcript.
- We send the transcript and a sample of still frames from the video to OpenAI to generate coaching feedback on pacing, filler words, clarity, eye contact, posture, and gestures. To assess eye contact, posture, and gestures, the AI model analyzes your face and body in those frames, including features such as the direction of your gaze.
- We show you the written feedback.
Our commitments
- No identification. We use the analysis only to write your feedback. We do not use it to identify you, verify who you are, or match you to anyone else. We do not keep a face template, voiceprint, or any other measurement of your face or voice; the AI analysis returns only written coaching feedback. We do not run face recognition on headshots or any other images.
- Single purpose. We use recordings only to produce the feedback you asked for.
- Fast deletion. Your video stays on your own device and is never uploaded. We delete the audio and sampled still frames automatically within 24 hours after the analysis finishes. We store them in a location that is excluded from our backups. You can delete a recording sooner at any time. Our AI provider does not store them after returning the result, as described in Section 4. If analysis fails, we delete the recording within 24 hours after the failure.
- Your feedback. We delete each transcript and its feedback on the earliest of these dates: when you delete them, when your account deletion grace period ends, or 3 years after that session.
- Never sold or used for training. We do not sell, lease, or trade recordings, biometric identifiers, or biometric information, and we never use them, or allow our providers to use them, to train AI models.
- Limited disclosure. Recordings are handled only by OpenAI, to generate your feedback, and by our hosting provider, which stores them until deletion. Your consent authorizes these disclosures. We disclose recordings to anyone else only where required by law or valid legal process.
- Protected. We protect recordings with the same or greater care we use for other confidential information, including encryption in transit and at rest.
Biometric privacy laws
Some laws, including the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), the Illinois Biometric Information Privacy Act (740 ILCS 14), and similar laws in Washington, Colorado, and other states, regulate biometric identifiers such as a record of face geometry or a voiceprint. The analysis of your face and voice in speech practice may be treated as the capture of a biometric identifier under those laws. We therefore treat speech practice as covered by them and follow their requirements for notice, written consent, limited disclosure, secure storage, a public retention schedule, and prompt destruction. Under this policy, any speech practice recording is destroyed within 24 hours after analysis, and in every case no later than the date the purpose for collecting it has been satisfied.
You may withdraw consent at any time with the Withdraw consent button at the bottom of the Stage Coach page. Withdrawing stops new recordings and deletes any raw recordings we still hold and all of your speech practice transcripts and feedback. Before you confirm, we offer you a chance to download your feedback.
Other people. Record only yourself. If someone else appears in the frame or can be heard, stop and record again. If you tell us, or we learn, that another person was recorded, we delete that recording promptly.
6. Public speaker pages and the directory
Your speaker page and directory listing are private until you publish them. When published, the information you choose to show, such as your name, headshot, bio, topics, city or region, and talks, is public. Anyone on the internet can view it, including event organizers, and search engines can index it. You can unpublish at any time, and we then remove the page from our site and from caches we control. We cannot control copies that others made while the page was public, or how quickly search engines update.
7. Organizers and booking inquiries
The inquiry form on each speaker page includes a short notice that links to this policy. When an organizer sends an inquiry, we store their name, email, and message and deliver them to that speaker by email and in the app. The speaker receives this information and handles it under their own practices. We keep inquiries while the speaker's account is open, unless the speaker deletes them or the organizer asks us to delete them. Organizers who submit a call for speakers give us event and contact details, which we use to review and list the call. Organizers may use the rights in this policy by contacting privacy@worththepitch.com.
8. How we share information
We share personal information only as described here.
Service providers (processors)
| Provider | What they do | Information involved |
|---|---|---|
| OpenAI | AI drafting, scoring, form reading, profile building, text embeddings, speech practice transcription and analysis | Profile, talks, documents, proposals, opportunity details, speech practice audio, frames, and transcripts |
| Stripe | Card payments and subscription billing | Name, email, payment details (collected directly by Stripe), billing records |
| PayPal | PayPal payments and affiliate payouts | Name, email, payment details (collected directly by PayPal), payout information |
| Resend | Email delivery | Name, email, email content |
| Brave Search API, You.com | Web search for calls for speakers | Topic keywords only; no personal information |
| InMotion Hosting | Web and database hosting in the United States | All data stored in the Service |
Our contracts with these providers limit their use of personal information to performing services for us and require confidentiality and appropriate security. Stripe and PayPal also act as independent controllers for some payment data, such as fraud prevention and their own legal obligations, under their own privacy notices.
Other disclosures
- The public and organizers, at your direction: when you publish your speaker page, copy a draft into an organizer's form, or reply to an organizer.
- Affiliates: if an affiliate referred you, the affiliate sees a referral record with the date, plan, and commission amount. We do not give affiliates your name, email address, or other contact details.
- Legal and safety: to comply with law, valid legal process, or government requests; to enforce our Terms; or to protect the rights, property, or safety of you, us, or others.
- Business transfers: in a merger, acquisition, financing, or sale of assets, subject to this policy's protections. We will notify you before your information becomes subject to a different policy.
9. No sale and no targeted advertising
We do not sell personal information, we do not share it for cross-context behavioral advertising, we do not use it for targeted advertising, and we do not show ads. We have not done so in the past 12 months. We do not knowingly sell or share personal information of anyone under 18. Paying affiliates for referrals does not involve giving them your personal information.
10. Cookies and local storage
We use a small number of first-party cookies and browser storage items. We use no advertising cookies and no third-party analytics cookies. Stripe and PayPal may set their own cookies on their checkout pages to prevent fraud.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| speaker_saas_session | Cookie, strictly necessary | Keeps you signed in and links to a security token that protects forms against cross-site request forgery (CSRF) | Until you sign out or the session expires |
| wtp_aff | Cookie, functional | Records which affiliate referred you, so the right affiliate is credited and your first-invoice discount applies. Contains only a referral code. | 90 days |
| wtp_topic | Local storage | Remembers the topic filter you chose on public pages | Until you clear it |
| wtp_listen_rate | Local storage | Remembers your preferred audio playback speed | Until you clear it |
For visitors in the EEA, UK, and Switzerland, we set the wtp_aff cookie only after you agree to it. You can block or delete cookies in your browser settings. If you block the session cookie, you cannot sign in.
11. Global Privacy Control and Do Not Track
We honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale of personal information, sharing for cross-context behavioral advertising, and targeted advertising. Because we do none of these, our practices already match that request. As an extra step, when your browser sends GPC we do not set the affiliate referral cookie. You can still enter a referral code by hand. If you are signed in, we also record the opt-out on your account.
Browsers' "Do Not Track" signals have no common standard. We treat them the same way we treat GPC.
12. How long we keep information
We keep personal information only as long as needed for the purposes in this policy, using this schedule:
| Information | How long we keep it |
|---|---|
| Account, profile, talks, proposals, pipeline | While your account is open. When you delete your account, deletion runs after a 7-day grace period, during which you can cancel it. Free accounts with no sign-in for 24 months may be closed and deleted after 30 days' notice. |
| Profile Autopilot documents | We extract the text and build your draft. We keep a record of the import (file name and type) and the resulting profile. We do not keep the original file after processing. |
| Speech practice audio and sampled still frames (video is never uploaded) | Deleted automatically within 24 hours after analysis (or after a failed analysis), or sooner if you delete them. Stored in a location excluded from backups. |
| Speech practice transcripts and feedback | Until the earliest of: you delete them, your account deletion grace period ends, or 3 years after the session |
| Weekly call email subscriptions | Until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days, and unsubscribed addresses after 90 days. |
| Organizer inquiries | While the receiving speaker's account is open, or until deleted |
| Error and service logs | 90 days |
| Sign-in attempt records (including IP address) | 30 days |
| Rate-limiting counters (including IP address) | Minutes to hours, until the limit window expires |
| Email verification and password reset tokens | Up to 7 days after use or expiry |
| Copies of crawled public web pages | 90 days |
| Billing, tax, and affiliate payout records, including tax forms | 7 years after the transaction or payout, to meet tax and accounting laws |
| Records of your agreement to our Terms and consents, and privacy request records | Speech practice consent records are deleted when you withdraw that consent. Other records are kept while your account is open and for 4 years afterward, to show that we obtained consent and handled requests properly. These records contain no recordings. |
| Backups | Deleted data may remain in database backups for up to 30 days until they are overwritten. We do not restore deleted data from backups except to recover from an incident, and we delete it again if we do. |
We may keep information longer if the law requires it or to resolve a pending dispute or investigation, and only for as long as needed.
13. Security
We use administrative, technical, and physical safeguards appropriate to the information we hold, including:
- encryption in transit with TLS (HTTPS) for all pages and data transfers;
- encryption at rest of names and email addresses in our database using AES, with keys stored separately from the data;
- one-way hashing of passwords with a modern, salted algorithm such as bcrypt or Argon2;
- encryption of affiliate taxpayer identification numbers and speech practice recordings;
- access controls that limit personal information to people who need it for their work;
- CSRF protection, rate limiting, strict content security policies, and monitoring for abuse.
No system is perfectly secure. Please use a unique password and tell us right away at privacy@worththepitch.com if you suspect a problem.
14. Data breach notification
If we determine that a breach of system security has exposed your sensitive personal information (as Texas law defines it, such as your name together with a financial account number or government identification number), we will notify you as quickly as possible and within the time the law requires. We follow the same timeline for a breach involving speech practice recordings or account passwords. For Texas residents, that is no later than 60 days after we determine the breach occurred (Tex. Bus. & Com. Code § 521.053). If a breach affects at least 250 Texas residents, we will notify the Texas Attorney General as soon as practicable and no later than 30 days after that determination. If a breach requires notice to more than 10,000 people, we will also notify the nationwide consumer reporting agencies. We will meet the notice requirements of other states and countries where affected people live, including notice to European supervisory authorities within 72 hours where the GDPR requires it. We may delay notice only if law enforcement asks us to because notice would impede an investigation.
15. Your rights and choices
Every user can do the following, wherever they live:
- Access and portability: download all of your account data as a JSON file from Settings.
- Correction: edit your profile, talks, proposals, and account details in the app, or ask us to correct anything else.
- Deletion: schedule account deletion from Settings, or email privacy@worththepitch.com. We may keep limited information when the law requires it, such as billing records.
- Email choices: turn digests, reminders, and product updates on or off in Settings, or use the unsubscribe link in any marketing or digest email. We will still send essential account, security, and billing messages.
- Consent withdrawal: withdraw speech practice consent at any time from the Stage Coach page.
- Unpublish: take down your speaker page or directory listing at any time.
To make a request by email, write to privacy@worththepitch.com from your account email. We verify requests by confirming control of the account email and may ask for more information if needed. You may use an authorized agent where the law allows; we may ask the agent for proof of authority and ask you to confirm your identity. We will not discriminate against you for exercising your rights.
16. Texas residents
The Texas Data Privacy and Security Act (TDPSA) gives Texas residents the right to:
- confirm whether we process your personal data and access it;
- correct inaccuracies;
- delete personal data you provided or that we obtained about you;
- obtain a copy of your data in a portable, readily usable format; and
- opt out of the sale of personal data, targeted advertising, and profiling that produces legal or similarly significant effects. We do not engage in any of these.
Sensitive data. We process sensitive data only with your consent. Speech practice is the only feature designed to involve information that could be sensitive, and it requires your separate consent as described in Section 5. We do not ask for sensitive information such as health, religion, sexual orientation, or citizenship status in your profile. If you choose to include it in your bio or documents, we use it only to build and display the profile you ask for, and you can remove it at any time.
What we disclose and to whom. The categories of personal data we process and our purposes are in Sections 2 and 3. We disclose personal data to the categories of third parties listed in Section 8: service providers (AI, payment, email, and hosting), the public and organizers when you publish or send something, and authorities when the law requires. We do not sell personal data or use it for targeted advertising.
How to exercise your rights. Use the tools in Settings or email privacy@worththepitch.com with the subject "Texas Privacy Request." We will not ask you to create an account to make a request. We will respond within 45 days. If reasonably necessary, we may extend that once by an additional 45 days and will tell you why within the first 45 days. Requests are free up to twice a year.
How to appeal. If we decline your request, you may appeal by emailing privacy@worththepitch.com with the subject "Privacy Appeal" within a reasonable time after our decision. We will respond in writing within 60 days, explain our decision, and tell you what we did. If we deny your appeal, you may contact the Texas Attorney General at texasattorneygeneral.gov or by calling (800) 621-0508.
17. Residents of other US states
Residents of California, Colorado, Connecticut, Virginia, Utah, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states with comprehensive privacy laws may have rights similar to those above, to the extent those laws apply to us. These may include rights to know, access, correct, delete, and port personal information, to opt out of sale, sharing, targeted advertising, and certain profiling, to limit use of sensitive personal information, and to appeal a denial.
- Categories collected in the past 12 months: identifiers (name, email, IP address); professional information (profile, talks, fees); commercial information (plan and billing records); internet activity (log and usage data); audio and visual information (speech practice recordings, headshots); and inferences (match scores). Sources, purposes, and recipients are described in Sections 2, 3, and 8.
- Sensitive personal information: we use it only for the purposes permitted by law, such as providing the Service you request, and not to infer characteristics about you.
- Sale and sharing: we do not sell or share personal information and have not done so in the past 12 months.
- Nevada: we do not sell covered information as defined by Nevada law.
To exercise these rights, use Settings or email privacy@worththepitch.com. If we deny your request, you can appeal as described in Section 16, and you may contact your state attorney general.
18. Visitors from the EEA, UK, and Switzerland
Evolve AI Institute, LLC, 9011 White Laurel Ln, Cypress, TX 77433, is the controller of your personal data. Our legal bases are listed in Section 3. You have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time without affecting earlier processing. You may also lodge a complaint with your local data protection authority.
International transfers. We and our providers store and process data in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions, and on additional safeguards such as encryption. You can request a copy of the relevant safeguards at privacy@worththepitch.com.
[EU/UK REPRESENTATIVE, IF REQUIRED]
19. Children
The Service is for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it promptly. If you believe a minor has given us information, contact privacy@worththepitch.com.
20. Changes to this policy
We may update this policy as the Service or the law changes. We will post the new version with an updated date. For material changes, we will email you at least 30 days before they take effect. We will ask for your consent before using personal information in a materially different way than we disclosed when we collected it, where the law requires consent.
21. Contact us
Evolve AI Institute, LLC, doing business as Worth the Pitch
9011 White Laurel Ln, Cypress, TX 77433
Privacy questions and requests: privacy@worththepitch.com
Legal notices: legal@worththepitch.com