PitPuppet

Privacy Policy

Last updated November 10, 2026

This policy explains what PitPuppet collects, why, who helps us process it, and the choices you have. We collect only what we need to make your ads and run your account, and we never sell your data.

What we collect

  • Your account: your email address and your password, which we store only as a secure hash, and the instructions you save for all your ads.
  • Your ads: the product links, descriptions, documents and photos you submit, your instructions for each ad, the product details we read from them (title, brand, description, what the seller says about the product, and photos), the scripts and images we generate, the finished videos, and any rating or comment you leave on them.
  • Your messages: what you send us from the contact page, and our replies.
  • Your plan and purchases: your subscription’s status, plan and renewal dates, and the add-on packs you buy, as our payment provider reports them. We never see or store your card details.
  • Your agreements: which versions of our Terms and this policy you agreed to, and when.
  • Technical records: server logs used to keep the service running and fix problems.

Why we use it

  • to make your ads and email them to you;
  • to run your account, your free ads and your plan’s ad allowance;
  • to answer your messages and send emails about your account (confirmations, password resets);
  • to find and fix problems, and to improve our ads by reviewing how they were made and your ratings of them;
  • to prevent abuse. We compare email addresses to spot repeated free-trial accounts, and an AI checks each ad against our terms. An account that keeps sending ads that break them can’t make ads for a while.

We don’t send marketing emails, and we don’t use your ads to train AI models.

Who helps us

We share data only with the services we need to run PitPuppet:

  • fal.ai runs the AI models that write, film and edit your ads, including models from providers such as Anthropic and Google, and stores the photos and documents you upload and the generated images and videos.
  • Firecrawl reads the documents you upload, and the product pages our server can’t read by itself.
  • Lemon Squeezy takes payments for plans and add-ons as the merchant of record. Its own privacy policy covers the payment details you give it.
  • Resend delivers our emails to you.
  • Railway hosts our servers and database, in the United States.
  • Cloudflare Turnstile checks that a person, not an automated script, is signing up. It sees technical details of your browser and connection when you open the sign-up page.

To read a product page, our server visits the link you submit, like a browser would. Some of these services are in the United States, so your data may be processed there.

Your ads’ files

Finished ads are stored at private, hard-to-guess web addresses so the link in your email keeps working. Anyone you share that address with can watch the ad. The photos and documents you upload, and working files from the filming, expire automatically, usually after about a week.

Cookies

We use two cookies: one that keeps you logged in, and one that remembers whether you chose the light or dark theme. We don’t use analytics, advertising or tracking cookies.

How long we keep it

We keep your account, ads and messages while your account exists. An ad you delete from your account disappears for you, but we keep it, and its video, until you ask us to remove it. When you ask us to delete your account or ads, we delete them and their videos within 30 days, except records we must keep by law. Deleting your account also deletes your messages, your purchase records and the record of what you agreed to.

When your account is deleted, we keep a scrambled code made from your email address and the number of free ads you used, so free ads can’t be claimed twice. The code can’t be read as your email address, and we use it only to prevent abuse.

Lemon Squeezy keeps its own payment records.

Your choices

You can ask us for a copy of your data, to correct it, or to delete your account and ads, by writing to mail@pitpuppet.com from your account’s email address. We answer within 30 days. Depending on where you live, you may also have the right to complain to your data protection authority.

Children

PitPuppet is for adults. We don’t knowingly collect data from anyone under 18.

Changes

If we change this policy, we’ll update the date at the top and email you about important changes before they take effect. The next time you use PitPuppet, we’ll ask you to agree to the new version before you keep using it.

Contact

Questions about your privacy? Write to mail@pitpuppet.com.