Privacy Policy

1. Who we are

Coach Sage AI is an AI coaching service trained on Peter Sage's teachings. This policy explains what personal data we collect and how it is handled. (The official data-controller entity and contact are to be confirmed by counsel.)

2. Data we collect

• Account: your email address and authentication metadata (via Supabase Auth).
• Profile: goals, focus areas, and milestones you provide during onboarding.
• Chat content:the messages you send and the AI's responses, stored as your conversation history.
• Memory: durable facts, goals, progress, and preferences the Service summarizes from your conversations to personalize coaching.
• Consent records: which legal / safety documents you accepted, the version, and the time.
• Billing: subscription tier and status (handled by Stripe; we do not store your full card number).
• Usage & feedback: message counts for plan limits, and any feedback you submit.

3. Processors / subprocessors

• Supabase for database hosting, authentication, and storage of your account, profile, chat, memory, consent, and billing-status data.
• Anthropic for large-language-model inference that generates coaching responses, under a data-processing agreement (DPA) with zero data retention. Inference is not routed to the EU (data-residency Option A).
• Stripe for payment processing for subscriptions.
• ElevenLabs for text-to-speech for the cloned-voice feature (when you use voice).

4. Retention & deletion

We keep your data while your account is active. You can delete your account at any time from your account page; this removes your profile, conversations, messages, memory, consent records, entitlement, and feedback, and deletes your authentication record. Your email address is also removed from our internal billing-link records (it is replaced with an irreversible placeholder). We retain a small number of non-identifying billing/transaction records (such as payment-event identifiers, with your email scrubbed) and records held by our payment processor (Stripe) where required for legal, tax, or accounting reasons; the precise retention schedule is to be finalized by counsel.

5. Your rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA/CPRA in California), you may have the right to access, export, correct, or delete your personal data, and to object to or restrict certain processing. You can export all of your data as JSON and delete your account yourself from the account page. We do not sell your personal data.

6. Cookies & authentication

We use cookies strictly to keep you signed in (session/authentication tokens). We do not use them for third-party advertising.

7. Contact

Privacy questions: privacy@petersage.com (placeholder, to be confirmed).