Legal

Privacy policy

Last updated: 31 Aug 2026

Questions and grievances: Pitch · team@pitchpandas.com

In one paragraph

PitchPandas is an events platform for startup communities in Chandigarh, Mohali and Panchkula. Your verified email address is your account — it is how we know an attendee is a real person, which is the whole point of the platform. We collect what running an event needs and what you choose to put on your profile. No profile is publicly visible today. We do not sell anything, we do not advertise, and we do not track you across other websites.

1 · What we collect, and why

Always — you cannot use PitchPandas without these:

Your email address

It is your account, verified by a one-time code — or by Google, if you sign in that way. Sign-in codes are the only email the product sends you today. No other user can see your address.

Your name

Door staff have to find you on a list. Seen by organizers of events you register for, and on guest lists where the event allows one (§4).

Your registrations, and whether you turned up

Running the door, and the reliability record (§3).

Only if you provide them: a phone number (optional — nothing requires one), your city, a headline, a startup name, what you are looking for, a short bio, an avatar. All optional; where the app does not yet offer an edit screen, ask us and we will change or remove them for you.

If you sign in with Google: we store the identifier Google gives us so we can recognise you next time. Your email address is your identity here either way.

Automatically:

Session cookies, so you stay signed in. Strictly necessary; no analytics cookie, no advertising cookie, no third-party cookie.
Server logs, briefly — deliberately redacted: phone numbers, tokens, one-time codes and QR credentials are never written to a log.
Your IP address, held in memory for a few minutes to stop one computer overwhelming the service. Never written to our database.

What we deliberately do not collect: no location tracking, no advertising identifier, no cross-site tracking, no contact-list upload, no payment information — PitchPandas takes no money.

2 · What we use it for

Creating and securing your account, and sending you sign-in codes.
Running events you register for — the list at the door is your name and your registration.
Building the verified attendance record described in §3.
Answering messages you send us.

And what we do not do yet: no reminder, follow-up or introduction message goes to attendees today, on any channel. Introduction suggestions are a separate choice that is off by default, and nothing sends them yet. When any of that launches, this page changes first.

3 · The reliability record

PitchPandas records whether you turned up to events you registered for. This is the core of the product, and you should understand it before you use it.

What is recorded

That you registered; that you checked in, and whether by QR scan or by hand; that you cancelled, and whether early or late; that you did not come. Every entry is append-only — we do not quietly rewrite history, and neither can we: the database refuses it for every role, our own included.

What others see

Organizers of an event you register for see a label — “New”, “Building History”, “Reliable”, “Highly Reliable”, “Reconfirmation Required”. Never a score. Never your no-shows. Never your record at anyone else’s events. Negative detail is not shown to anybody but you.

What it affects

How many events you can hold a spot at simultaneously. Miss one without telling anybody and you temporarily hold fewer.

If it is wrong

A correction is added as a new record, with a reason and the person who made it — the original stays visible. A correction can never mark you as scan-verified, which is what stops anybody manufacturing a record. Write to us and we will show you your record in full.

4 · Who can see what

No profile is publicly visible today. The data model has a public-profile option; it is off for everybody and there is not yet a screen to turn it on. If that screen ships, going public will be your explicit, reversible choice.

Anyone on the internet

Nothing about you — with one exception: if an event you registered for sets its guest list to “public”, your name and avatar appear on that event’s page.

Other attendees of an event you registered for

Your name and avatar on that event’s guest list, when the event allows one. The organizer picks the guest list’s visibility per event — everybody, fellow attendees only (the default), or nobody — and nothing else from your profile is shown there.

Organizers of an event you register for

Your name, your registration, whether you checked in, and the reliability label (§3). Never your email address. Never your phone number.

Door staff at that event

Your name on a list, on a device at the door. Never your contact details.

People you connect with

A connection only ever forms when two people at the same event, both scanned in at the door, scan each other’s code. Connected people see each other’s profile card.

Everyone, if you post

Anything you write in a discussion thread is public, under your name. Threads are public on purpose.

5 · Who else touches it

We do not sell your data. Nothing is shared for advertising. Three companies process it so the service can run:

Supabase

Hosts our database. Mumbai, India.

Google Cloud

Runs our servers and serves the site, from Mumbai (asia-south1). If you sign in with Google, Google also handles that sign-in.

Resend

Delivers our email — your sign-in codes, and notifications to our own team. United States.

No messaging provider — WhatsApp or SMS — is connected today.

6 · How long we keep it

We have not yet set formal retention periods; deciding them is recorded, owed work. What is true today: your profile lives until you ask us to delete it (§7), and the attendance and moderation ledgers are append-only and kept — they are the product, and §7 describes exactly what deletion does to them.

7 · Your rights, and what deletion actually does

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

Show you what we hold

Ask, and we send you an export: your profile, settings, registrations, memberships and vouches. Anything it misses — medals, connections, posts — we pull by hand.

Correct it

Profile fields: in the app where an edit screen exists, otherwise ask us. Attendance: the correction process in §3.

Change a choice

Introduction suggestions and history visibility are separate, reversible choices, off by default. There is no settings screen yet, so ask us and we change them for you.

Delete it

Described below — deletion here is pseudonymisation, and we would rather explain that than promise “we delete everything”.

Complain

To Pitch, team@pitchpandas.com. If we do not resolve it, you can escalate to the Data Protection Board of India.

When you ask us to delete your account, and we have confirmed the request is yours, here is exactly what happens:

Everything on your profile that identifies you is erased in one transaction. Your name becomes “Deleted member”; your email, username, phone number, headline, startup, bio, city and avatar are removed; your passport number is retired; your connect code is rotated, so a printed or shared code stops resolving to you.
Your sign-in identities are deleted, so the account can no longer be signed into. A phone number you had added is released, so its next holder can register it fresh.
The attendance ledger is kept, without you in it. That a registration, a check-in or a correction happened stays on record, keyed to an internal identifier that no longer identifies anybody — deliberately, because those records are other people’s numbers too: an organizer’s verified check-in count is computed from them, and the ledger refuses deletion for every role, ours included.
Your posts stay, under the tombstone — those conversations have other people in them. Everywhere you appeared, you appear as “Deleted member”: no name, no initials, no avatar, no city, no tier.

8 · Security

A description of what is actually in place, not a promise of invulnerability:

A phone number, if you add one, is readable by no part of the application at all — the database refuses to hand it out, not just the code.
Every table has row-level security, and authorization is enforced twice — once in the application and again in the database, independently.
Your QR ticket is a random secret: never a link, never in a log, and it reaches your browser only as a picture.
Everything travels over HTTPS, and logs are redacted before they are written.

If something goes wrong in a way that affects you, we will tell you.

9 · Children

PitchPandas is built for people in startup communities and is not directed at children. If you believe a child is using it, write to us and we will act.

10 · Changes

When this policy changes, this page changes and the date at the top moves. The agreement it sits under is the terms of service.

Published 31 Aug 2026 on the founder’s authority, in plain language, ahead of formal legal review; a counsel-reviewed version will replace it. It was written against the code: nothing on this page claims more than the product actually does.