pitcharena ← Back to home

Privacy Notice

Last updated: 7 October 2026

This Privacy Notice explains how Yellowlake Technologies and Services Private Limited, trading as SalesUP (“SalesUP”, “we”, “us”) collects, uses and shares personal data when you use Pitch Arena (the “Service”) at https://pitcharena.club, or contact us about hiring SDRs. We are the controller (and, under India’s Digital Personal Data Protection Act 2023, the “data fiduciary”) of your personal data.

1. Information we collect

  • Account information: your name, email address, organization membership and role, and profile handle.
  • Usage data: practice sessions, scores, XP, streaks, achievements, challenge progress and related activity.
  • Voice data: microphone audio during a practice call, and the call recordings and transcripts we generate so you can be scored and review your calls.
  • Billing data: subscription tier and seat count. Card and payment details are collected and stored by our payment provider, Paddle, not by us.
  • Hiring requests: when a company asks us for an SDR shortlist, the name, work email, company and role it enters in the form.
  • Candidate profiles: if you are an SDR who asks to be put forward for hiring, the profile details you give us (such as location, experience, availability, skills and rate), your call scores, and any intro video you provide.
  • Technical data: authentication cookies/session tokens and basic logs needed to operate and secure the Service. For rate-limiting the public hiring form we store a one-way (SHA-256) hash of your IP address; we do not store the IP address itself.
  • Analytics data: pages viewed and in-app events, collected by PostHog (see “Cookies”).
  • Feedback you send us: the reason you pick and anything you write in our feedback form, stored against your account so we can follow it up with you.

2. How we use your information

  • to provide the Service: run live calls, generate AI prospect responses, score calls and show your history and progress;
  • to manage your account, organization and subscription;
  • to respond to hiring requests and, with the candidate’s consent, introduce SDR candidates to prospective employers;
  • to secure the Service, prevent abuse and enforce fair-use limits;
  • to communicate with you (for example, magic-link sign-in emails and service notices);
  • to ask, occasionally and by email, how you are finding the Service — for example if you have not practised for a while, or after your first few calls. Every one of those emails carries an unsubscribe link, and opting out stops them without affecting your account or any sign-in, team or assessment email; and
  • to maintain and improve the Service.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Legal bases

Where applicable law requires a legal basis, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and to respond to business enquiries such as hiring requests); your consent (for example, to access your microphone, for analytics where required, and to share a candidate profile with employers); and compliance with legal obligations. You can withdraw consent at any time without affecting processing that took place before.

4. AI processing

To power live calls and scoring, your call audio and transcripts are processed by AI and speech providers acting on our behalf, including speech-to-text, text-to-speech, and large-language-model providers. This processing is used to generate the prospect’s responses and your feedback and score. We do not permit these providers to use Your Content to train their own models except as needed to provide the Service to us.

5. Service providers (sub-processors)

We share personal data with trusted providers who process it on our behalf, including:

  • Supabase: Database, authentication and file/recording storage.
  • LiveKit: Real-time voice call transport, call recording, and routing of speech and language models used during a call.
  • OpenRouter: Routes our AI requests (persona authoring, call scoring) to the underlying model providers.
  • Anthropic (Claude): AI prospect responses during calls, and call scoring.
  • Google (Gemini): AI prospect responses during calls, and persona generation.
  • Deepgram: Speech-to-text, and text-to-speech for prospect voices.
  • Rime: Text-to-speech for prospect voices.
  • Cartesia: Text-to-speech for prospect voices.
  • Paddle: Payment processing and Merchant of Record.
  • Resend: Transactional email (magic-link sign-in).
  • PostHog: Product analytics (usage events, linked to your account).
  • Slack: Internal notification of hiring (shortlist) requests to our team.

6. Payments and Paddle

Paddle.com is the Merchant of Record for our paid plans. When you buy a subscription, Paddle collects your name, email, billing address and payment details directly and processes them as an independent controller under the Paddle Privacy Policy. Paddle shares with us only what we need to run your subscription (such as your email, plan, seat count and transaction status). We never see or store your full card number.

7. Sharing within your organization and with employers

Pitch Arena is a team tool. Your name, scores, call history and activity may be visible to administrators of your organization and, where relevant, to teammates (for example, on leaderboards). Public leaderboard entries use your chosen handle. If you are an SDR candidate, we share your profile, scores and intro video with prospective employers only after you have asked us to put you forward.

8. Data retention

  • Account, usage, call recordings and transcripts: until you delete them or ask us to delete your account. We then delete them within 30 days, except backups, which expire on their normal cycle.
  • Hiring requests: until you ask us to delete them.
  • Candidate profiles and intro videos: until you ask us to remove you from Placement.
  • Billing and transaction records: as long as tax and accounting law requires.

9. Security

We use technical and organizational measures (including encryption in transit, access controls and reputable infrastructure providers) to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal-data breach affects you, we will notify you and the relevant authorities as the law requires.

10. International transfers

We are based in India, and our providers may process data in other countries, including the United States and the European Union. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.

11. Your rights

Depending on your location (including under the GDPR, UK GDPR, India’s DPDP Act and US state privacy laws), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, to withdraw consent, and to nominate someone to exercise your rights. You can update your name and handle directly in your account settings. To exercise other rights, contact us at tech@salesup.club. We respond within 30 days and will not treat you differently for exercising your rights. You may also complain to your local data-protection authority (in India, the Data Protection Board of India).

12. Cookies

  • Strictly necessary: authentication and session cookies that keep you signed in. The Service cannot work without them.
  • Analytics: PostHog sets a cookie and uses local storage to measure how the Service is used. You can block or delete these cookies in your browser settings without affecting your use of the Service.

We do not use advertising or cross-site tracking cookies.

13. Children

The Service is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal data from children.

14. Changes to this notice

We may update this Privacy Notice from time to time. We will update the date above and notify account holders of material changes by email or in the app.

15. Contact and grievance officer

For any privacy question, request or complaint, contact our grievance officer at tech@salesup.club, or write to:

Yellowlake Technologies and Services Private Limited (trading as SalesUP)
171/12 Roy Bahadur Road, Behala, Near Union Drug, Kolkata 700034, India