Privacy Policy
Last updated: 14 October 2026
1. Who We Are
PitchYourGuestPost is operated by:
István Fábián
Carrer del Laberint 2-4
08005 Barcelona
Spain
Email: support@pitchyourguestpost.com
For personal data processed by PitchYourGuestPost, István Fábián is the data controller.
This Privacy Policy explains how PitchYourGuestPost collects, uses, shares and retains personal data when you use the website and marketplace.
2. Who This Policy Applies To
This Privacy Policy applies to:
- visitors to PitchYourGuestPost;
- registered users;
- Pitchers who submit and purchase reviews of guest-post pitches;
- Reviewers who receive and review pitches;
- people who contact us or interact with our support services.
3. Information We Collect
Depending on how you use PitchYourGuestPost, we may process the following categories of information.
Account information
This may include:
- name;
- email address;
- profile information;
- account identifier;
- authentication and security information;
- account settings.
Authentication is provided using Clerk.
Website listing information
If you participate as a Reviewer, we may process information you provide for your website listings, including information about your website, review preferences, price, review deadline and other profile information.
Information intended to form part of your public website listing may be displayed publicly on PitchYourGuestPost.
Pitch information
When a Pitcher submits a pitch, we process the information contained in that submission.
This may include:
- pitch text;
- links;
- information about the proposed article or collaboration;
- files or other material submitted with the pitch;
- messages exchanged in connection with the pitch;
- Reviewer feedback and verdict.
You should not include unnecessary personal or sensitive information in a pitch.
Transaction information
For paid pitches, we may store information including:
- amount paid;
- currency;
- platform commission;
- Pitcher and Reviewer account identifiers;
- Reviewer email at the time of purchase;
- Reviewer Stripe account identifier;
- Stripe Checkout, payment and charge identifiers;
- Stripe transfer identifiers;
- refund and clawback amounts;
- payment, transfer, refund and reversal timestamps;
- review deadline;
- transaction status.
We do not store your full card number.
Purchase consent information
When you purchase a pitch review, we keep evidence of the contractual consent given at checkout.
This may include:
- your account identifier;
- the versions of the Terms of Service and Refund Policy you accepted;
- IP address;
- browser user-agent;
- date and time of acceptance.
We retain this information to demonstrate what was agreed at the time of purchase and to handle legal or payment disputes.
Reviewer payout information
PitchYourGuestPost uses Stripe Connect to pay Reviewers.
We may store:
- Stripe connected-account identifier;
- Reviewer country;
- Stripe onboarding/status information;
- whether Stripe has enabled transfers;
- whether Stripe has enabled payouts;
- outstanding Stripe requirements;
- dates when Stripe status was checked;
- payout, transfer and clawback records.
Stripe collects identity, bank, tax and verification information directly where required for its services.
PitchYourGuestPost does not ordinarily receive or store Reviewers' full bank-account information, identity documents or tax numbers collected directly through Stripe onboarding.
Communications
We may process:
- messages exchanged between Pitchers and Reviewers through the platform;
- emails sent to or from support;
- customer-support requests;
- complaints;
- reports of illegal or prohibited content;
- communications relating to payments, refunds or account verification.
Technical and usage information
We may process technical information including:
- IP address;
- browser and device information;
- account identifiers;
- pages or features used;
- marketplace events;
- timestamps;
- security logs;
- error and diagnostic information.
4. How We Use Personal Data
We process personal data to:
- create and manage accounts;
- authenticate users;
- operate the Pitcher and Reviewer marketplace;
- deliver pitches to selected Reviewers;
- enable communication between Pitchers and Reviewers;
- process purchases;
- calculate platform commissions;
- transfer Reviewer earnings;
- process refunds and payment reversals;
- recover Reviewer amounts following refunds or chargebacks;
- provide customer support;
- send transactional emails;
- verify and administer Reviewer participation;
- prevent fraud, abuse and security incidents;
- enforce our Terms and marketplace rules;
- moderate content and investigate complaints;
- comply with tax, accounting and regulatory obligations;
- comply with valid legal requests;
- analyse and improve the service where permitted;
- maintain and troubleshoot the platform.
5. Legal Bases for Processing
Where the GDPR applies, we process personal data using one or more of the following legal bases.
Contract
Processing is necessary to provide services you request, including:
- maintaining your account;
- submitting and reviewing pitches;
- processing transactions;
- providing messaging;
- administering Reviewer earnings and payouts.
Legal obligation
We may process and retain information where necessary to comply with legal obligations, including:
- accounting;
- tax reporting;
- marketplace reporting;
- fraud and payment regulations;
- responding to authorities;
- applicable platform and content-moderation laws.
Legitimate interests
We may process information where necessary for legitimate interests such as:
- protecting PitchYourGuestPost against fraud;
- securing accounts and systems;
- preventing abuse;
- resolving disputes;
- maintaining evidence of transactions and agreements;
- improving reliability and functionality;
- enforcing our contractual rights.
Where we rely on legitimate interests, we consider those interests against the rights and interests of affected individuals.
Consent
We rely on consent where required, including for:
- optional marketing communications;
- non-essential cookies;
- analytics or tracking technologies where consent is legally required.
You can withdraw consent at any time.
6. Stripe Payments and Stripe Connect
PitchYourGuestPost uses Stripe to process Pitcher payments and Stripe Connect to transfer Reviewer earnings.
When a Pitcher pays, information may be provided directly to Stripe, including payment information, email address, transaction information and technical or fraud-prevention information.
When a Reviewer completes Stripe onboarding, Stripe may collect information including:
- legal identity;
- address;
- date of birth;
- tax information;
- identity-verification information;
- bank-account information;
- other information required by Stripe or applicable financial regulations.
Stripe processes certain information under its own legal obligations, terms and privacy documentation.
PitchYourGuestPost receives only the information necessary to operate the marketplace and administer the Stripe Connect relationship.
Stripe may also perform fraud, risk and identity checks independently.
7. Reviewer Access to Pitcher Data
When you submit a pitch, the submission is provided to the Reviewer you selected.
This is necessary for the Reviewer to perform the review service.
For personal data a Reviewer receives through a submission, PitchYourGuestPost and the Reviewer generally act as independent controllers for their respective processing.
Reviewers are required under the Reviewer Terms to use Pitcher information only where appropriate for purposes such as:
- assessing the pitch;
- giving a verdict and feedback;
- communicating about the pitch;
- proceeding with an accepted collaboration;
- complying with legal obligations.
Reviewers must not use Pitcher data for unrelated marketing, resale, profiling, AI or machine-learning training, or other unrelated purposes without an independent lawful basis.
Reviewers are responsible for their own compliance with applicable data-protection laws for processing they undertake independently.
8. Messaging
PitchYourGuestPost uses Stream to provide in-platform messaging.
Messages may be stored and processed to:
- provide communication between users;
- operate the service;
- provide customer support;
- investigate abuse or disputes;
- enforce our Terms;
- comply with legal obligations.
Do not use the messaging system to share unnecessary sensitive personal information.
9. Transactional Emails
We use Resend to send service-related emails.
These may include:
- new-pitch notifications;
- completed-review notifications;
- refund notifications;
- payout-reversal notifications;
- Reviewer verification notifications;
- security and account messages;
- important legal or service notices.
These messages are necessary to operate the platform and are separate from optional marketing communications.
Newsletters and product updates
When you create an account, we add your email address to our mailing list, run on MailerLite, to send occasional news and product updates about PitchYourGuestPost. Every email has an unsubscribe link, and unsubscribing does not affect your account or the transactional messages above. If you subscribe through a newsletter form on the website, we first ask you to confirm your address.
10. Analytics
We use PostHog to understand how PitchYourGuestPost is used and to improve the service.
Analytics events may include actions such as:
- creation of a pitch;
- acceptance or rejection of a pitch;
- refunds;
- Reviewer payout setup events;
- Reviewer country;
- account or user identifiers associated with platform activity.
Where use of analytics technologies requires consent, they are controlled according to your cookie preferences.
11. Error Monitoring and Security
We use BetterStack for operational monitoring and error reporting.
Technical warnings or errors may contain information such as:
- timestamps;
- technical request information;
- error details;
- internal identifiers;
- information necessary to diagnose payment or application problems.
We use this information to maintain platform reliability and security.
12. Cookies
PitchYourGuestPost uses cookies and similar technologies.
CookieScript is used to manage cookie information, preferences and consent.
Necessary technologies may be used to provide essential functionality such as authentication, security and operation of the website.
Non-essential cookies or technologies, including analytics or advertising technologies where applicable, are used according to the preferences you select through CookieScript.
You can review or change your preferences using the Cookie Settings option available on the website.
The cookie banner’s “Show details” view lists each cookie we use, what it is for and how long it lasts.
13. Reviewer Tax and Marketplace Reporting
PitchYourGuestPost may be required under applicable law to collect, verify, retain or report information concerning Reviewers and their marketplace earnings.
This can include reporting obligations under EU marketplace-reporting rules such as DAC7.
Information that may be required for these purposes can include:
- legal name;
- address;
- date of birth;
- country and tax residence;
- tax identification number;
- VAT identification number where applicable;
- financial-account identifier;
- amounts earned;
- number of paid reviews;
- platform commissions and fees.
Some information may be collected or verified directly by Stripe.
If information held by Stripe is not sufficient to meet PitchYourGuestPost's own legal obligations, we may request additional information from the Reviewer.
Where required by law, relevant information may be provided to the Spanish tax authorities or other competent authorities.
Spanish tax guidance confirms that operators may have reporting obligations for sellers providing personal services through digital platforms, including seller identity, quarterly consideration and platform fees. Agencia Tributaria
14. Other Service Providers
We currently use service providers including:
- Clerk — authentication and account management;
- Stripe — payments, Stripe Connect, identity verification and payouts;
- Stream — marketplace messaging;
- Resend — transactional email;
- PostHog — product analytics;
- BetterStack — monitoring and error reporting;
- CookieScript — cookie consent and preference management;
- MailerLite — newsletters and product update emails;
- Reddit — advertising measurement, only if you accept advertising (targeting) cookies; and
- Railway — hosting, databases and file storage.
Providers may process information on our behalf or, depending on the service and legal context, as independent controllers.
We only provide service providers with information reasonably necessary for the services they provide.
15. International Data Transfers
Some service providers may process information outside Spain or the European Economic Area.
Where data-protection law requires safeguards for an international transfer, appropriate mechanisms may be used, such as:
- an adequacy decision;
- Standard Contractual Clauses;
- another legally recognised transfer mechanism.
16. How Long We Keep Information
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, payment, security and dispute requirements.
In particular:
Account and profile information
Normally retained while your account remains active.
When your account is deleted, information that is no longer required is deleted or anonymised, subject to legal and operational retention requirements.
Pitch and messaging information
Retained while reasonably required to provide the marketplace service, manage transactions, resolve disputes and comply with legal obligations.
Payment and payout records
Payment, transfer, commission, refund, reversal and related financial records may be retained after account deletion where necessary for:
- accounting and tax obligations;
- payment reconciliation;
- outstanding payouts;
- refunds and clawbacks;
- fraud prevention;
- chargebacks and disputes;
- establishment, exercise or defence of legal claims.
Purchase consent records
Records showing which contractual terms you accepted may be retained after account deletion where necessary to establish or defend contractual and legal rights.
Tax and regulatory records
Information required for statutory reporting or recordkeeping is retained for the period required by applicable law.
Deleting an account therefore does not necessarily delete all records relating to completed financial transactions.
The GDPR allows retention where data remains necessary for legal obligations or the establishment, exercise or defence of claims; deletion rights are not absolute. The AEPD likewise describes retention by reference to the purpose and potential resulting liabilities. AEPD
17. Account Deletion
You may request deletion of your PitchYourGuestPost account.
Where possible, personal information that is no longer required will be deleted or anonymised.
However, PitchYourGuestPost may retain information that must or reasonably needs to be preserved for:
- financial and tax records;
- outstanding marketplace transactions;
- refunds;
- Reviewer transfers;
- chargebacks;
- fraud investigations;
- contractual evidence;
- regulatory reporting;
- legal claims.
Where financial records remain after deletion, we may remove the direct link to the deleted user account where appropriate while retaining the transaction record itself.
18. Security
We use reasonable technical and organisational measures designed to protect personal data against:
- unauthorised access;
- accidental loss;
- alteration;
- disclosure;
- misuse.
No internet service can guarantee absolute security.
You are responsible for keeping your account credentials secure.
19. Automated Fraud Checks
Stripe and other service providers may use automated systems to detect fraud, abuse, security threats or payment risk.
For example, Stripe may assess a transaction and reject or require additional authentication for a payment.
These checks may use information processed directly by Stripe under Stripe's own terms and privacy documentation.
20. Your Data Protection Rights
Where the GDPR applies, you may have rights including the right to:
- access your personal data;
- correct inaccurate personal data;
- request deletion where applicable;
- restrict processing;
- object to certain processing;
- receive certain personal data in a portable format;
- withdraw consent where processing is based on consent.
Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.
These rights are subject to conditions and exceptions under applicable law.
The AEPD identifies access, rectification, deletion, restriction, portability, objection and withdrawal of consent among the rights that controllers must make available. AEPD
21. Exercising Your Rights
To exercise a data-protection right or ask a privacy question, contact:
support@pitchyourguestpost.com
We may need to verify your identity before acting on a request.
We will respond within the timeframe required by applicable law.
22. Complaints
If you believe your personal data has been processed unlawfully, you may lodge a complaint with the competent data-protection authority.
For PitchYourGuestPost's Spanish establishment, the relevant authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).
You may also have the right to complain to another competent supervisory authority in the EU or EEA depending on your circumstances.
23. Children
PitchYourGuestPost's paid marketplace services are intended for users aged 18 or older.
We do not knowingly permit children to purchase or provide paid reviews.
24. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- the service;
- our providers;
- legal requirements;
- security practices;
- data-processing activities.
The current version will be published on this page with its last-updated date.
Where required by law, we will provide additional notice of material changes.
25. Contact
PitchYourGuestPost
Operated by István Fábián
Carrer del Laberint 2-4
08005 Barcelona
Spain