Privacy Policy

This Privacy Policy describes how Alamarq LLC d/b/a CoachCore ("CoachCore," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the CoachCore platform (the "Platform"). We try to describe our practices clearly because privacy promises can create legal obligations.

1. Information We Collect

1.1 Information You Provide

Account Information:

• Name, email address, phone number
• Password (encrypted and not accessible to us)
• Profile information (bio, photo, credentials for coaches)
• Business information (for coaches connecting payment accounts)

Booking and Payment Information:

• Lesson booking details (date, time, location, lesson type)
• Payment information (processed by Stripe; we do not store credit card numbers)
• Refund requests and transaction history

Content You Create:

• Lesson notes, comments, and messages
• Photos and videos uploaded to lessons
• Reviews and ratings
• Progress tracking data

Support Communications:

• Messages you send to our support team
• Feedback and survey responses

1.2 Information Collected Automatically

Usage Information:

• Pages you visit on the Platform
• Features you use and actions you take
• Time, frequency, and duration of your activities
• Device information (browser type, operating system, IP address)
• Approximate location derived from device or network information
• Cookie identifiers and similar online identifiers when analytics are enabled

Cookies and Analytics:

1.3 Information from Third Parties

Stripe:

• Payment processing status and transaction details
• We do not receive your full credit card information

OAuth Authentication (if applicable):

• Basic profile information if you sign in via Google or other providers

Google Calendar Integration:

• We use Google Calendar API to sync lesson schedules with your calendar
• We only access calendar data necessary to create and manage lesson events
• You can revoke calendar access at any time via Google Account Settings
• Revoking access will prevent automatic calendar syncing but will not affect existing CoachCore bookings
• We do not access, read, or modify calendar events not created by CoachCore

Google Analytics:

• Google Analytics helps us measure aggregate usage, page performance, and feature adoption unless you opt out
• Google may receive online identifiers, device information, browser information, approximate location, pages viewed, and interactions with the Platform
• We do not send Google Analytics your payment card details, lesson notes, private messages, uploaded lesson media, or sensitive account content
• We do not use Google Analytics for targeted advertising or ad personalization

2. How We Use Your Information

2.1 Provide Platform Services

• Create and manage your account
• Process bookings and payments
• Facilitate communication between coaches and students
• Display coach profiles and availability
• Track lesson progress and history

2.2 Improve the Platform

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new features and services
• Conduct research and testing

2.3 Communicate with You

• Send booking confirmations and reminders
• Notify you of account activity (comments, reviews, refunds)
• Respond to your inquiries and support requests
• Send important Platform updates and policy changes

2.4 Safety and Security

• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Protect the rights and safety of users
• Comply with legal obligations

2.5 Marketing (with consent)

• Send promotional emails about new features (you can opt out)
• We do not use Google Analytics for targeted advertising
• We do not sell personal information for money

3. How We Share Your Information

3.1 With Other Users

Public Information:

• Coach profiles (name, bio, photos, reviews) are publicly visible
• Student names are visible to coaches when booking lessons
• Comments and reviews are visible to relevant parties

Private Information:

• Lesson notes are only shared between coach and student
• Contact information is only shared as necessary for lessons
• Payment details are not shared with other users

3.2 With Service Providers

We share information with trusted third parties who help us operate the Platform:

Stripe (Payment Processing):

• Payment information to process transactions
• See Stripe's Privacy Policy: https://stripe.com/privacy

AWS (File Storage):

• Photos and videos uploaded to lessons
• Stored securely in AWS S3 with signed URLs

Email Service (if applicable):

• Email address and name to send transactional emails

Google Analytics (Analytics Provider):

• Online identifiers and usage information unless you opt out of analytics
• Used to measure and improve Platform performance and adoption
• Not used by us for targeted advertising or ad personalization

3.3 Sale, Sharing, and Targeted Advertising

• We do not sell personal information for money
• We do not knowingly sell or share personal information of users under 16
• We do not use sensitive personal information to infer characteristics about you for advertising
• Some state privacy laws (including California's CPRA and Texas's TDPSA) define "sale," "sharing," or "targeted advertising" broadly enough to include disclosures to analytics providers — even when no money changes hands — because those providers may use the data for their own commercial purposes
• When you allow Google Analytics, we share online identifiers and usage data with Google. Google may use that data subject to its own privacy policy. We do not control Google's downstream use of that data
• To reduce risk: Google Analytics is opt-in only, ad personalization is disabled in our tag, and we honor Global Privacy Control (GPC) as a request to opt out of both analytics collection and any potential "sharing" as defined by applicable state law

3.4 For Legal Reasons

We may disclose information if required by law or in good faith belief that disclosure is necessary to:

• Comply with legal obligations (subpoenas, court orders)
• Protect the rights, property, or safety of CoachCore, users, or the public
• Investigate fraud, security issues, or Terms violations

3.5 Business Transfers

If CoachCore is acquired or merged with another company, your information may be transferred to the new entity. We will notify you before your information is subject to a different privacy policy.

4. Data Retention

• Active Accounts: We retain your information as long as your account is active
• Deleted Accounts: After you delete your account, we generally retain account data for 30 days to allow for account recovery and resolve disputes
• Financial and Legal Records: We may retain transaction, tax, fraud-prevention, security, and dispute records longer when required or permitted by law
• Backups: Deleted information may remain in encrypted backups for a limited period until backups rotate out of active use
• Analytics: Analytics information is retained according to our Google Analytics retention settings and is used in aggregate reporting where practical

5. Your Privacy Rights

5.1 Access and Correction

• You can access and update your account information through account settings
• You can request a copy of your personal data by contacting us

5.2 Deletion

• You can delete your account at any time through account settings
• Certain information may be retained as described in Section 4

5.3 Opt-Out of Marketing

• You can opt out of promotional emails by clicking "unsubscribe" in any marketing email
• You cannot opt out of transactional emails (booking confirmations, account notifications)

5.4 Analytics Opt-Out and Browser Signals

• We do not respond to legacy "Do Not Track" browser signals because there is no accepted standard for how to respond
• We honor Global Privacy Control (GPC) as a request to reject analytics cookies and to opt out of any sale or sharing of your personal information under applicable state law
• You can reject or allow Google Analytics through the "Privacy choices" control on the Platform at any time
• We do not use Google Analytics for targeted advertising or ad personalization
• To install Global Privacy Control in your browser, visit globalprivacycontrol.org

5.5 GDPR Rights (for EU Users)

If you are in the European Union, you have additional rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain uses of your data
• Right to Withdraw Consent: Withdraw consent for data processing (where applicable)

To exercise these rights, contact us at legal@coachcore.io

5.6 U.S. State Privacy Rights

Depending on where you live and whether a state law applies to CoachCore, you may have the right to:

• Know: Request disclosure of personal information we collect, use, and share — including the categories, specific pieces, sources, purposes, and third parties involved
• Delete: Request deletion of your personal information (subject to exceptions for legal obligations, fraud prevention, and completing transactions)
• Correct: Request correction of inaccurate personal information
• Portability: Request a copy of personal information in a portable, readily usable format where required
• Opt-Out of Sale/Sharing: Opt out of the sale or sharing of personal information, including for cross-context behavioral advertising or profiling — see Section 3.3 for how
• Limit Sensitive Information: Limit certain uses or disclosures of sensitive personal information to only what is necessary to provide services
• Non-Discrimination: Exercise your rights without receiving discriminatory treatment (we will not deny service, charge different prices, or provide lower quality because you exercised a privacy right)
• Appeal: If we deny your request, you may appeal by emailing legal@coachcore.io with "Privacy Appeal" in the subject line. We will respond to appeals within 60 days. If your appeal is denied, you may contact your state attorney general.

6. Data Security

We implement reasonable security measures to protect your information:

• Encryption: Passwords are encrypted; data is transmitted over HTTPS
• Access Controls: Limited employee access to personal data
• Regular Security Audits: We review and update security practices
• Third-Party Security: We vet service providers for security compliance

7. Data Breach Notification

In the event of a data breach that is reasonably likely to result in harm to you, we will notify affected users as required by applicable law. Notification will be provided:

• By email to the address associated with your account, and/or by prominent notice on the Platform
• Within the timeframe required by the applicable state law (typically 30–60 days from discovery, or without unreasonable delay)
• Including a description of what information was involved, what happened, and steps you can take to protect yourself

We will also notify applicable state authorities as required by law. If you suspect unauthorized access to your account, contact us immediately at legal@coachcore.io.

8. International Data Transfers

CoachCore is based in the United States. If you access the Platform from outside the U.S., your information may be transferred to and processed in the U.S. and other countries where our service providers operate.

For EU users, we rely on Standard Contractual Clauses approved by the European Commission for international data transfers.

9. Children's Privacy

CoachCore is not directed to children under 13. We do not knowingly collect personal information directly from children under 13 without verifiable parental consent. Accounts for students under 13 must be created and managed by a parent or legal guardian. If you believe we have collected information from a child under 13 without required consent, please contact us at legal@coachcore.io, and we will take appropriate steps to delete it.

Students aged 13-17 may use the Platform with parental consent. Parents/guardians are responsible for their child's use of the Platform. We do not knowingly sell or share personal information of users under 16.

10. Third-Party Links

The Platform may contain links to third-party websites or services (e.g., coach social media profiles). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us: