Privacy Policy

Last updated: March 21, 2026

1. Introduction

Steeled Inc. ("we", "us", "our"), a Delaware Corporation, operates CoachStackHub.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting the privacy and security of our users and the clients they serve. By using CoachStackHub, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in hashed form)
• Professional title and coaching credentials
• Business name and address (if applicable)
• Billing information (name, address, payment method)

2.2 Coaching Data

In the course of using the Service, you may provide:

• Session notes and transcripts
• Client records and profiles
• Coaching programs, templates, and curricula
• Progress tracking data and assessments
• Communication logs and scheduling information
• Uploaded files, documents, and media

2.3 Usage Data

We automatically collect certain information when you interact with the Service:

• Feature usage analytics and interaction patterns
• Device information (type, operating system, browser)
• IP address and approximate geographic location
• Pages visited, time spent, and navigation paths
• Referring URLs and search terms
• Error logs and performance data

2.4 Payment Information

Payment processing is handled by Stripe, our third-party payment processor. We do not store credit card numbers, CVVs, or full payment card details on our servers. We retain only a transaction reference, the last four digits of your card, card type, and billing address for record-keeping purposes. Please review Stripe's Privacy Policy for details on how they handle your payment data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain CoachStackHub, including all core features such as client management, scheduling, and program delivery.
• AI-Powered Features: To generate session summaries, coaching insights, progress analytics, and other AI-assisted outputs that enhance your coaching practice.
• Billing & Account Management: To process payments, manage subscriptions, issue invoices, and handle billing inquiries.
• Communications: To send service-related notifications, account updates, security alerts, and (with your consent) marketing communications about new features and offerings.
• Security & Fraud Prevention: To detect, prevent, and respond to security incidents, fraud, abuse, and technical issues.
• Service Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the Service.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.

4. AI Data Processing

CoachStackHub uses artificial intelligence to process coaching data and generate insights. Here is how AI interacts with your data:

• Session notes and client data are processed by AI models to generate summaries, identify patterns, and provide coaching suggestions.
• AI-generated insights are produced for your individual use only. Your data is not shared with other users or used to generate insights for anyone other than you.
• Your data is NOT used to train AI models. We do not use your coaching data, session notes, client records, or any other user content to train, fine-tune, or improve underlying AI models.
• AI processing occurs on secure, encrypted infrastructure with strict access controls.
• You may opt out of AI features at any time through your account settings. Opting out will disable AI-powered summaries, suggestions, and insights, but all other platform features will remain fully functional.

5. Data Sharing

We do not sell your personal data. We share your information only in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating the Service, including:

• Stripe: Payment processing and billing management.
• Cloud Hosting Providers: Secure data storage and infrastructure.
• Email Service Providers: Transactional and marketing email delivery.
• Analytics Providers: Aggregated usage analytics to improve the Service.

All service providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

5.2 Legal Requirements

We may disclose your information when required to do so by law, in response to a valid subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5.4 Aggregate and Anonymized Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you. This data may be used for industry research, analytics, marketing, or other business purposes.

5.5 We NEVER Sell Personal Data

Steeled Inc. does not sell, rent, or trade your personal information to third parties for their marketing or commercial purposes. This applies to all users regardless of jurisdiction.

6. Your Rights (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to certain legal exceptions.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at dpo@coachstackhub.ai. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

7. Your Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. However, you have the right to direct us not to sell your personal information if our practices change in the future.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing or quality of service for exercising your rights.

California residents may submit requests by contacting us at privacy@coachstackhub.ai. We will verify your identity before processing any request and respond within 45 days.

8. Canadian Users (PIPEDA)

If you are located in Canada, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Consent-Based Processing: We collect, use, and disclose your personal information only with your knowledge and consent, except where permitted or required by law.
• Access and Correction: You have the right to access the personal information we hold about you and to request corrections if it is inaccurate or incomplete.
• Limited Collection: We limit the collection of personal information to what is necessary for the purposes identified.
• Accountability: Steeled Inc. is responsible for personal information under its control and has designated individuals to be accountable for compliance.

If you have a privacy complaint, you may contact us first at privacy@coachstackhub.ai. If your complaint is not resolved to your satisfaction, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

9. Australian Users (Privacy Act)

If you are located in Australia, we handle your personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs):

• Australian Privacy Principles: We comply with all 13 APPs governing the collection, use, disclosure, storage, and security of personal information.
• Access and Correction: You have the right to access the personal information we hold about you and to request corrections if it is inaccurate, out-of-date, incomplete, irrelevant, or misleading.
• Cross-Border Disclosure: Before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure the recipient complies with the APPs or is subject to substantially similar privacy protections.
• Direct Marketing: You may opt out of receiving direct marketing communications from us at any time.

If you wish to make a complaint about our handling of your personal information, please contact us at privacy@coachstackhub.ai. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. International Data Transfers

CoachStackHub is operated from the United States, and your personal data is primarily processed and stored in the United States.

For users in the European Economic Area (EEA) and the United Kingdom, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection for international transfers. We also implement supplementary measures where necessary, including encryption and access controls.

We maintain appropriate safeguards to ensure that your personal data receives a level of protection consistent with the requirements of applicable data protection laws, regardless of where it is processed.

11. Data Retention

• Active Accounts: Your personal data and coaching data are retained for as long as your account remains active and you continue to use the Service.
• Deleted Data: When you delete specific data or close your account, we will purge your personal data from our active systems within 90 days. Residual copies in backup systems may persist for a limited period but are not actively processed.
• Legal Obligations: We may retain certain data for longer periods where required by law, regulation, or legitimate business purposes (such as financial record-keeping, tax compliance, or dispute resolution).
• Anonymized Data: Aggregated or anonymized data that can no longer identify you may be retained indefinitely for analytics and service improvement purposes.

12. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256 encryption) to prevent unauthorized access.
• SOC 2 Compliance: Our infrastructure and processes are designed to meet SOC 2 Type II standards for security, availability, and confidentiality.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and address potential threats.
• Access Controls: We enforce strict role-based access controls, multi-factor authentication for internal systems, and the principle of least privilege for all employees and contractors who access user data.
• Incident Response: We maintain a documented incident response plan and will notify affected users and relevant authorities in the event of a data breach as required by applicable law.

13. Cookies & Tracking

13.1 Essential Cookies

These cookies are strictly necessary for the Service to function. They include session management cookies, authentication tokens, and user preference cookies. You cannot opt out of essential cookies as the Service will not function properly without them.

13.2 Analytics Cookies

We use analytics cookies to understand how users interact with the Service, including page views, feature usage patterns, and navigation flows. This data helps us improve the platform. Analytics cookies can be disabled through your browser settings or our cookie consent banner.

13.3 Marketing Cookies

With your explicit consent, we may use marketing cookies to deliver relevant advertisements and measure campaign effectiveness. Marketing cookies are only placed after you provide consent through our cookie consent banner.

13.4 Cookie Consent

When you first visit CoachStackHub, you will see a cookie consent banner that allows you to accept or decline non-essential cookies. You can update your cookie preferences at any time through your account settings.

13.5 Opt-Out

In addition to our cookie consent banner, you can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of the Service. You may also opt out of analytics tracking by using browser extensions such as Google Analytics Opt-out or similar tools.

14. Children's Privacy

CoachStackHub is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@coachstackhub.ai and we will promptly address the matter.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. For material changes, we will provide at least 30 days' prior notice by email to the address associated with your account and by posting a prominent notice on the Service.

We encourage you to review this Privacy Policy periodically. Your continued use of CoachStackHub after the effective date of the revised policy constitutes your acceptance of the changes.

16. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

Steeled Inc.
Email: privacy@coachstackhub.ai
For GDPR-related inquiries: dpo@coachstackhub.ai