Privacy Policy

1. Who we are

Worth the Pitch is operated by Evolve AI Institute, LLC ("Worth the Pitch," "we," "us," or "our"), based in Cypress, Texas. We help professional speakers find calls for speakers, decide which are worth pursuing, and prepare proposals. This policy explains how we handle personal information when you use worththepitch.com, our web app, public speaker pages, and emails (the "Service"). We are the controller of the personal information described here, except where we say otherwise.

2. Information we collect

Information you give us

• Account information: your name, email address, and password. We store your password only as a one-way hash, and we encrypt your name and email in our database.
• Speaker profile: your title, bio, topics, audiences, industries, city or region, fee expectations, travel and virtual preferences, goals, target conferences, talks, and headshot.
• Documents for Profile Autopilot: a bio, CV, one-sheet, or pasted text (PDF, DOCX, or text) that you upload so we can build your profile.
• Proposals and pipeline: drafts, edits, application status, fees, travel value, reminders, and notes.
• Speech practice recordings (if you use this add-on and consent): video and audio of you rehearsing, the transcript, and the feedback we generate. See Section 5.
• Communications: messages you send us and your email preferences.
• Weekly call emails (if you sign up without an account): your email address and the topic you follow. We encrypt the address, send nothing until you confirm, and include a one-click unsubscribe link in every email.
• Affiliate information (if you join our affiliate program): your PayPal payout email, tax form information such as name, address, and taxpayer identification number (W-9 or W-8BEN), and referral and commission records. We use tax information only to pay you, withhold tax when required, and file required tax reports.

Information others give us

• Organizers who send a booking inquiry through a speaker page give us their name, email, and message. Organizers who submit a call for speakers give us event details and contact information.
• Payment processors (Stripe and PayPal) tell us your plan, payment status, the last four digits and brand of a card, and a customer reference. We never receive your full card number.
• Affiliates may refer you to us. We learn which affiliate referred you through a referral link or code.

Information we collect automatically

• Security and log data: IP address, browser type, sign-in attempts, error records, and request times, used for security, rate limiting, abuse prevention, and troubleshooting.
• Usage data: features you use, such as match refreshes and drafts, to enforce plan limits and improve the Service.
• Page-view counts: daily counts of views of your public speaker page and directory listing. These counts do not identify visitors.
• Cookies and local storage: see Section 10.

Information from public sources

Our crawler reads public web pages and feeds that announce calls for speakers. It identifies itself and honors robots.txt. These pages sometimes include an organizer's name or work email. We use that information only to describe the opportunity and link to it.

Browser extension

The optional Worth the Pitch autofill extension for Chrome and Edge works only on a page where you open it. When you press Fill, it reads the labels of the form's questions in your browser to place your answers, and that page content stays on your device. When you press Read this form, it sends the text of the visible questions on that page to us so we can match your draft to them. The extension does not collect browsing history, never reads password fields, and never submits a form for you. Connecting it creates an access key limited to the extension; we store only a one-way hash of that key, it expires after 180 days without use, and you can disconnect it at any time in Settings.

3. How we use information

Purpose	Information used	Legal basis (EEA/UK)
Create and run your account, match you with opportunities, explain scores, and draft proposals you request	Account, profile, documents, proposals, pipeline	Performance of our contract with you
Publish your speaker page and directory listing when you choose to	Profile, headshot, talks	Contract; your choice to publish
Deliver organizer inquiries to you	Organizer name, email, message	Legitimate interests (connecting organizers with speakers they contacted)
Speech practice feedback	Recordings, transcript	Your explicit consent
Billing, taxes, and affiliate commissions	Billing records, affiliate and tax information	Contract; legal obligation
Send account, security, and billing emails	Name, email	Contract; legitimate interests
Send digests, deadline reminders, and product updates you have enabled	Name, email, matches	Contract; consent where required
Keep the Service secure, prevent fraud and abuse, and enforce our Terms	Log data, IP address, account data	Legitimate interests; legal obligation
Maintain and improve the Service using aggregated or de-identified statistics	Usage data	Legitimate interests
Comply with law and respond to lawful requests	Any relevant information	Legal obligation

If we de-identify information, we keep it in de-identified form, do not attempt to re-identify it, and require recipients to do the same.

4. AI processing

We use OpenAI's API to score matches, read application forms, build profiles from your documents, create text embeddings for matching, draft proposals and messages, and (if you use it) transcribe and analyze speech practice sessions. To do this, we send OpenAI the parts of your profile, talks, documents, recordings, and the opportunity details needed for the task.

• No training. OpenAI processes this data as our service provider under its business terms and data processing agreement. Under those terms, OpenAI does not use data sent through its API to train its models. We do not opt in to any training or data-sharing program, and we do not use your content to train any AI model ourselves.
• Provider retention. For most features, OpenAI may keep API inputs and outputs for up to 30 days to detect abuse and then deletes them. For speech practice, we send audio and frames only to OpenAI services covered by a zero data retention arrangement, under which OpenAI does not store them after returning the result. If that arrangement becomes unavailable, we will stop sending audio and frames until we tell you what will change and ask for your consent again.
• Embeddings are text only. We create embeddings from text, such as topics and talk descriptions. We do not run facial recognition on, or create face templates from, your headshot or any other image.
• No significant automated decisions. Match scores and "Worth it" verdicts are suggestions to help you choose where to apply. They do not accept or reject you, set your fee, or decide any booking. You and the organizers make those decisions. You can adjust the minimum score or ignore it, and you can ask us at privacy@worththepitch.com to explain or review a score.
• Search. Searches we run through the Brave Search API and You.com use topic keywords only and contain no personal information about you.

5. Speech practice and biometric information

Speech practice is an optional paid add-on. This section explains exactly what happens to your recordings. It is also our publicly available written policy on retention and destruction of recordings for purposes of biometric privacy laws.

Consent comes first

Before your first recording, we show you a consent screen that explains what we collect, why, who receives it, and how long we keep it. Declining leaves your account and every other feature unchanged. You agree by checking a box that is unchecked by default and typing your name, which serves as your electronic signature and written release. You cannot record until you agree. We store the date, time, version of the consent text, and your typed name. Your camera and microphone also stay off until your browser asks you for permission.

What happens when you record

1. Your browser records video and audio of you rehearsing.
2. We send the audio to our AI provider (OpenAI) to create a text transcript.
3. We send the transcript and a sample of still frames from the video to OpenAI to generate coaching feedback on pacing, filler words, clarity, eye contact, posture, and gestures. To assess eye contact, posture, and gestures, the AI model analyzes your face and body in those frames, including features such as the direction of your gaze.
4. We show you the written feedback.

Our commitments

• No identification. We use the analysis only to write your feedback. We do not use it to identify you, verify who you are, or match you to anyone else. We do not keep a face template, voiceprint, or any other measurement of your face or voice; the AI analysis returns only written coaching feedback. We do not run face recognition on headshots or any other images.
• Single purpose. We use recordings only to produce the feedback you asked for.
• Fast deletion. Your video stays on your own device and is never uploaded. We delete the audio and sampled still frames automatically within 24 hours after the analysis finishes. We store them in a location that is excluded from our backups. You can delete a recording sooner at any time. Our AI provider does not store them after returning the result, as described in Section 4. If analysis fails, we delete the recording within 24 hours after the failure.
• Your feedback. We delete each transcript and its feedback on the earliest of these dates: when you delete them, when your account deletion grace period ends, or 3 years after that session.
• Never sold or used for training. We do not sell, lease, or trade recordings, biometric identifiers, or biometric information, and we never use them, or allow our providers to use them, to train AI models.
• Limited disclosure. Recordings are handled only by OpenAI, to generate your feedback, and by our hosting provider, which stores them until deletion. Your consent authorizes these disclosures. We disclose recordings to anyone else only where required by law or valid legal process.
• Protected. We protect recordings with the same or greater care we use for other confidential information, including encryption in transit and at rest.

Biometric privacy laws

Some laws, including the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), the Illinois Biometric Information Privacy Act (740 ILCS 14), and similar laws in Washington, Colorado, and other states, regulate biometric identifiers such as a record of face geometry or a voiceprint. The analysis of your face and voice in speech practice may be treated as the capture of a biometric identifier under those laws. We therefore treat speech practice as covered by them and follow their requirements for notice, written consent, limited disclosure, secure storage, a public retention schedule, and prompt destruction. Under this policy, any speech practice recording is destroyed within 24 hours after analysis, and in every case no later than the date the purpose for collecting it has been satisfied.

You may withdraw consent at any time with the Withdraw consent button at the bottom of the Stage Coach page. Withdrawing stops new recordings and deletes any raw recordings we still hold and all of your speech practice transcripts and feedback. Before you confirm, we offer you a chance to download your feedback.

Other people. Record only yourself. If someone else appears in the frame or can be heard, stop and record again. If you tell us, or we learn, that another person was recorded, we delete that recording promptly.

6. Public speaker pages and the directory

Your speaker page and directory listing are private until you publish them. When published, the information you choose to show, such as your name, headshot, bio, topics, city or region, and talks, is public. Anyone on the internet can view it, including event organizers, and search engines can index it. You can unpublish at any time, and we then remove the page from our site and from caches we control. We cannot control copies that others made while the page was public, or how quickly search engines update.

7. Organizers and booking inquiries

The inquiry form on each speaker page includes a short notice that links to this policy. When an organizer sends an inquiry, we store their name, email, and message and deliver them to that speaker by email and in the app. The speaker receives this information and handles it under their own practices. We keep inquiries while the speaker's account is open, unless the speaker deletes them or the organizer asks us to delete them. Organizers who submit a call for speakers give us event and contact details, which we use to review and list the call. Organizers may use the rights in this policy by contacting privacy@worththepitch.com.

8. How we share information

We share personal information only as described here.

Service providers (processors)

Provider	What they do	Information involved
OpenAI	AI drafting, scoring, form reading, profile building, text embeddings, speech practice transcription and analysis	Profile, talks, documents, proposals, opportunity details, speech practice audio, frames, and transcripts
Stripe	Card payments and subscription billing	Name, email, payment details (collected directly by Stripe), billing records
PayPal	PayPal payments and affiliate payouts	Name, email, payment details (collected directly by PayPal), payout information
Resend	Email delivery	Name, email, email content
Brave Search API, You.com	Web search for calls for speakers	Topic keywords only; no personal information
InMotion Hosting	Web and database hosting in the United States	All data stored in the Service

Our contracts with these providers limit their use of personal information to performing services for us and require confidentiality and appropriate security. Stripe and PayPal also act as independent controllers for some payment data, such as fraud prevention and their own legal obligations, under their own privacy notices.

Other disclosures

• The public and organizers, at your direction: when you publish your speaker page, copy a draft into an organizer's form, or reply to an organizer.
• Affiliates: if an affiliate referred you, the affiliate sees a referral record with the date, plan, and commission amount. We do not give affiliates your name, email address, or other contact details.
• Legal and safety: to comply with law, valid legal process, or government requests; to enforce our Terms; or to protect the rights, property, or safety of you, us, or others.
• Business transfers: in a merger, acquisition, financing, or sale of assets, subject to this policy's protections. We will notify you before your information becomes subject to a different policy.

9. No sale and no targeted advertising

We do not sell personal information, we do not share it for cross-context behavioral advertising, we do not use it for targeted advertising, and we do not show ads. We have not done so in the past 12 months. We do not knowingly sell or share personal information of anyone under 18. Paying affiliates for referrals does not involve giving them your personal information.

10. Cookies and local storage

We use a small number of first-party cookies and browser storage items. We use no advertising cookies and no third-party analytics cookies. Stripe and PayPal may set their own cookies on their checkout pages to prevent fraud.

Name	Type	Purpose	Duration
speaker_saas_session	Cookie, strictly necessary	Keeps you signed in and links to a security token that protects forms against cross-site request forgery (CSRF)	Until you sign out or the session expires
wtp_aff	Cookie, functional	Records which affiliate referred you, so the right affiliate is credited and your first-invoice discount applies. Contains only a referral code.	90 days
wtp_topic	Local storage	Remembers the topic filter you chose on public pages	Until you clear it
wtp_listen_rate	Local storage	Remembers your preferred audio playback speed	Until you clear it

For visitors in the EEA, UK, and Switzerland, we set the wtp_aff cookie only after you agree to it. You can block or delete cookies in your browser settings. If you block the session cookie, you cannot sign in.

11. Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale of personal information, sharing for cross-context behavioral advertising, and targeted advertising. Because we do none of these, our practices already match that request. As an extra step, when your browser sends GPC we do not set the affiliate referral cookie. You can still enter a referral code by hand. If you are signed in, we also record the opt-out on your account.

Browsers' "Do Not Track" signals have no common standard. We treat them the same way we treat GPC.

12. How long we keep information

We keep personal information only as long as needed for the purposes in this policy, using this schedule:

Information	How long we keep it
Account, profile, talks, proposals, pipeline	While your account is open. When you delete your account, deletion runs after a 7-day grace period, during which you can cancel it. Free accounts with no sign-in for 24 months may be closed and deleted after 30 days' notice.
Profile Autopilot documents	We extract the text and build your draft. We keep a record of the import (file name and type) and the resulting profile. We do not keep the original file after processing.
Speech practice audio and sampled still frames (video is never uploaded)	Deleted automatically within 24 hours after analysis (or after a failed analysis), or sooner if you delete them. Stored in a location excluded from backups.
Speech practice transcripts and feedback	Until the earliest of: you delete them, your account deletion grace period ends, or 3 years after the session
Weekly call email subscriptions	Until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days, and unsubscribed addresses after 90 days.
Organizer inquiries	While the receiving speaker's account is open, or until deleted
Error and service logs	90 days
Sign-in attempt records (including IP address)	30 days
Rate-limiting counters (including IP address)	Minutes to hours, until the limit window expires
Email verification and password reset tokens	Up to 7 days after use or expiry
Copies of crawled public web pages	90 days
Billing, tax, and affiliate payout records, including tax forms	7 years after the transaction or payout, to meet tax and accounting laws
Records of your agreement to our Terms and consents, and privacy request records	Speech practice consent records are deleted when you withdraw that consent. Other records are kept while your account is open and for 4 years afterward, to show that we obtained consent and handled requests properly. These records contain no recordings.
Backups	Deleted data may remain in database backups for up to 30 days until they are overwritten. We do not restore deleted data from backups except to recover from an incident, and we delete it again if we do.

We may keep information longer if the law requires it or to resolve a pending dispute or investigation, and only for as long as needed.

13. Security

We use administrative, technical, and physical safeguards appropriate to the information we hold, including:

• encryption in transit with TLS (HTTPS) for all pages and data transfers;
• encryption at rest of names and email addresses in our database using AES, with keys stored separately from the data;
• one-way hashing of passwords with a modern, salted algorithm such as bcrypt or Argon2;
• encryption of affiliate taxpayer identification numbers and speech practice recordings;
• access controls that limit personal information to people who need it for their work;
• CSRF protection, rate limiting, strict content security policies, and monitoring for abuse.

No system is perfectly secure. Please use a unique password and tell us right away at privacy@worththepitch.com if you suspect a problem.

14. Data breach notification

If we determine that a breach of system security has exposed your sensitive personal information (as Texas law defines it, such as your name together with a financial account number or government identification number), we will notify you as quickly as possible and within the time the law requires. We follow the same timeline for a breach involving speech practice recordings or account passwords. For Texas residents, that is no later than 60 days after we determine the breach occurred (Tex. Bus. & Com. Code § 521.053). If a breach affects at least 250 Texas residents, we will notify the Texas Attorney General as soon as practicable and no later than 30 days after that determination. If a breach requires notice to more than 10,000 people, we will also notify the nationwide consumer reporting agencies. We will meet the notice requirements of other states and countries where affected people live, including notice to European supervisory authorities within 72 hours where the GDPR requires it. We may delay notice only if law enforcement asks us to because notice would impede an investigation.

15. Your rights and choices

Every user can do the following, wherever they live:

• Access and portability: download all of your account data as a JSON file from Settings.
• Correction: edit your profile, talks, proposals, and account details in the app, or ask us to correct anything else.
• Deletion: schedule account deletion from Settings, or email privacy@worththepitch.com. We may keep limited information when the law requires it, such as billing records.
• Email choices: turn digests, reminders, and product updates on or off in Settings, or use the unsubscribe link in any marketing or digest email. We will still send essential account, security, and billing messages.
• Consent withdrawal: withdraw speech practice consent at any time from the Stage Coach page.
• Unpublish: take down your speaker page or directory listing at any time.

To make a request by email, write to privacy@worththepitch.com from your account email. We verify requests by confirming control of the account email and may ask for more information if needed. You may use an authorized agent where the law allows; we may ask the agent for proof of authority and ask you to confirm your identity. We will not discriminate against you for exercising your rights.

16. Texas residents

The Texas Data Privacy and Security Act (TDPSA) gives Texas residents the right to:

• confirm whether we process your personal data and access it;
• correct inaccuracies;
• delete personal data you provided or that we obtained about you;
• obtain a copy of your data in a portable, readily usable format; and
• opt out of the sale of personal data, targeted advertising, and profiling that produces legal or similarly significant effects. We do not engage in any of these.

Sensitive data. We process sensitive data only with your consent. Speech practice is the only feature designed to involve information that could be sensitive, and it requires your separate consent as described in Section 5. We do not ask for sensitive information such as health, religion, sexual orientation, or citizenship status in your profile. If you choose to include it in your bio or documents, we use it only to build and display the profile you ask for, and you can remove it at any time.

What we disclose and to whom. The categories of personal data we process and our purposes are in Sections 2 and 3. We disclose personal data to the categories of third parties listed in Section 8: service providers (AI, payment, email, and hosting), the public and organizers when you publish or send something, and authorities when the law requires. We do not sell personal data or use it for targeted advertising.

How to exercise your rights. Use the tools in Settings or email privacy@worththepitch.com with the subject "Texas Privacy Request." We will not ask you to create an account to make a request. We will respond within 45 days. If reasonably necessary, we may extend that once by an additional 45 days and will tell you why within the first 45 days. Requests are free up to twice a year.

How to appeal. If we decline your request, you may appeal by emailing privacy@worththepitch.com with the subject "Privacy Appeal" within a reasonable time after our decision. We will respond in writing within 60 days, explain our decision, and tell you what we did. If we deny your appeal, you may contact the Texas Attorney General at texasattorneygeneral.gov or by calling (800) 621-0508.

17. Residents of other US states

Residents of California, Colorado, Connecticut, Virginia, Utah, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and other states with comprehensive privacy laws may have rights similar to those above, to the extent those laws apply to us. These may include rights to know, access, correct, delete, and port personal information, to opt out of sale, sharing, targeted advertising, and certain profiling, to limit use of sensitive personal information, and to appeal a denial.

• Categories collected in the past 12 months: identifiers (name, email, IP address); professional information (profile, talks, fees); commercial information (plan and billing records); internet activity (log and usage data); audio and visual information (speech practice recordings, headshots); and inferences (match scores). Sources, purposes, and recipients are described in Sections 2, 3, and 8.
• Sensitive personal information: we use it only for the purposes permitted by law, such as providing the Service you request, and not to infer characteristics about you.
• Sale and sharing: we do not sell or share personal information and have not done so in the past 12 months.
• Nevada: we do not sell covered information as defined by Nevada law.

To exercise these rights, use Settings or email privacy@worththepitch.com. If we deny your request, you can appeal as described in Section 16, and you may contact your state attorney general.

18. Visitors from the EEA, UK, and Switzerland

Evolve AI Institute, LLC, 9011 White Laurel Ln, Cypress, TX 77433, is the controller of your personal data. Our legal bases are listed in Section 3. You have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time without affecting earlier processing. You may also lodge a complaint with your local data protection authority.

International transfers. We and our providers store and process data in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions, and on additional safeguards such as encryption. You can request a copy of the relevant safeguards at privacy@worththepitch.com.

[EU/UK REPRESENTATIVE, IF REQUIRED]

19. Children

The Service is for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it promptly. If you believe a minor has given us information, contact privacy@worththepitch.com.

20. Changes to this policy

We may update this policy as the Service or the law changes. We will post the new version with an updated date. For material changes, we will email you at least 30 days before they take effect. We will ask for your consent before using personal information in a materially different way than we disclosed when we collected it, where the law requires consent.

21. Contact us

Evolve AI Institute, LLC, doing business as Worth the Pitch
9011 White Laurel Ln, Cypress, TX 77433
Privacy questions and requests: privacy@worththepitch.com
Legal notices: legal@worththepitch.com