Privacy Policy

At CoachifyMe, we take your privacy seriously. This Privacy Policy outlines the types of information we collect and how we use, share, and protect your personal data.

Data Collected

We may collect the following types of data:

• Account information (name, email address, profile photo via Google OAuth)
• Profile details you provide (phone, company, title, bio, timezone, language)
• Billing and payment information (processed and stored by Stripe; we store only Stripe customer references, not raw card data)
• Payout and tax information for platform creators (bank account details and tax IDs are encrypted at rest)
• Usage data (pages visited, features used, session duration)
• AI interaction data (prompts you submit, AI-generated responses, assessment answers, learning path data)
• Authentication tokens (stored as HTTP-only cookies; never accessible to JavaScript)
• CSRF protection tokens (short-lived, session-scoped)
• IP address hash (for anonymous AI credit tracking — raw IP is never stored)
• Google Calendar event data (when you connect Google Calendar for coaching appointments)
• Google Drive file metadata (when document storage integration is enabled)
• Agreement acceptance records (which terms you accepted, when, and from which IP address)

How We Use Your Data

We use your data to provide and operate the CoachifyMe platform, process payments, schedule coaching appointments, power AI features (content generation, AI chat, assessments, personalized learning paths, and AI Coach Digital Twin), communicate service updates and billing information, prevent fraud, and comply with applicable law. AI interaction data is transmitted to our AI providers (OpenAI, Anthropic, Google) for inference only — we do not authorize these providers to use your data to train their models beyond what is required to fulfill the API request.

Third Parties

We may share your data with the following third-party services to help provide and improve our platform:

• Stripe — payment processing, subscription billing, and payout infrastructure. Stripe is PCI-DSS Level 1 certified. Your payment method details are stored by Stripe, not on CoachifyMe servers.
• PayPal — alternative payment processing where enabled by platform administrators.
• OpenAI — AI model inference for text generation, image generation, audio transcription, text-to-speech, embeddings, and content moderation.
• Anthropic — AI model inference for text generation and structured content output.
• Google (Gemini / Vertex AI) — AI model inference for text generation.
• Google Calendar API — scheduling and appointment management when the Google Calendar integration is enabled.
• Google Cloud Storage — file storage for platform content and media assets.
• Google Cloud DNS / Certificate Manager — SSL certificate provisioning and DNS management for custom domains.

User Rights

You have the following rights regarding your data:

• Access your personal data — request a copy of the information we hold about you.
• Correct inaccurate data — update your profile information at any time in Account Settings.
• Delete your account and personal data — submit a deletion request via Account Settings or by emailing privacy@coachifyme.com. Note that transaction and billing records required by law are retained.
• Delete your AI conversation history — clear chat history at any time from the AI Chat interface.
• Opt out of AI-based personalization — disable AI-powered learning path generation and AI recommendations in Account Settings.
• Disconnect connected apps — disconnect Google Calendar or Google Drive at any time in Account Settings → Connected apps. Disconnecting asks Google to remove our access to that Google account and deletes the access we held; because Google removes the whole grant, every other connection made with the same Google account stops working too.
• Data portability — request an export of your data in a machine-readable format.
• Lodge a complaint — if you are located in the EU/UK, you have the right to lodge a complaint with your local data protection authority.

Data Retention

We retain your account data for as long as your account is active. AI conversation history is retained for 12 months by default and can be deleted on request. Billing and transaction records are retained for 7 years as required by applicable law. You may request deletion of non-legally-required data at any time.

Cookies

We use strictly necessary cookies for authentication (HTTP-only session tokens) and CSRF protection. We do not use third-party advertising or tracking cookies. Authentication cookies expire with your session or after 7–30 days depending on your ‘Remember Me’ preference.

Data Protection

We implement various security measures to protect your data from unauthorized access, disclosure, or alteration. However, no internet-based system can be 100% secure, so we encourage you to take appropriate steps to protect your own information.

Contact Us

If you have any questions about this Privacy Policy or your data, contact us at privacy@coachifyme.com.