Legal

Privacy Policy

Last updated: July 1, 2026  ·  Effective: July 1, 2026

1. Who We Are

CoachOps360 is a team development and coaching platform operated by Pat Mileski, based in Maine, United States. When this policy says "CoachOps360," "we," "us," or "our," it refers to Pat Mileski and the CoachOps360 service.

If you have any questions about this Privacy Policy, you can contact us at: pmileski@gmail.com

2. What Information We Collect

Information You Provide Directly

• Account information: When you sign up, we collect your email address and password (stored securely via Supabase Auth — we never see your actual password).
• Workspace information: Your workspace name and any data you enter into the platform — including team member names, roles, departments, goals, coaching notes, session details, tasks, and job descriptions.
• Payment information: When you subscribe, your payment is processed by Stripe. We do not store your credit card number, expiration date, or CVV. Stripe stores this securely and provides us only with a customer ID and subscription status.
• Uploaded files: If you upload annual performance reviews, these files are stored in Supabase Storage and linked to the relevant team member profile in your workspace.
• Communications: If you contact us by email, we keep records of that correspondence.

Information Collected Automatically

• Usage data: We may collect basic information about how you use the platform, such as which features you use and how often. This helps us improve the product.
• Browser and device data: We may collect your browser type, operating system, and IP address for security and troubleshooting purposes.
• Cookies: CoachOps360 uses session cookies to keep you logged in. We do not use third-party advertising cookies or tracking pixels.

Information from Team Members (PIN Login)

Team members who log in using a workspace ID and PIN do not create a Supabase Auth account. Their name, role, department, and PIN are stored in your workspace by the account administrator (the manager). Team members can view their own data but cannot view other team members' data.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your CoachOps360 account and workspace
• Provide, maintain, and improve the CoachOps360 service
• Process your subscription payments through Stripe
• Send you important account notifications (billing updates, subscription renewals, service notices)
• Respond to your questions and support requests
• Monitor and protect the security of our service
• Comply with legal obligations

We do not use your data to train AI models. We do not sell your data to any third party. We do not display advertising inside CoachOps360.

4. How We Share Your Information

We only share your information in the following limited circumstances:

Service Providers

• Supabase — Our database and authentication provider. All your workspace data is stored in a Supabase PostgreSQL database hosted on AWS (us-east-1). Supabase processes your data on our behalf under their Privacy Policy.
• Stripe — Our payment processor. Stripe handles all payment card data under their own Privacy Policy and PCI DSS compliance standards.
• GitHub Pages — Our hosting provider for the CoachOps360 web application. GitHub may collect standard server logs. See GitHub's Privacy Statement.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If CoachOps360 is acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

We do not share your personal information with any other third parties for their own marketing or business purposes.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription or delete your account, we will delete your workspace data including all team members, goals, coaching notes, sessions, tasks, and uploaded files within 30 days of your request.

Some information may be retained longer where required by law or for legitimate business purposes such as fraud prevention or resolving disputes.

To request deletion of your account and all associated data, contact us at pmileski@gmail.com or use the Delete Account option in your Account Settings within the app.

6. Data Security

We take reasonable measures to protect your information from unauthorized access, use, or disclosure:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are hashed by Supabase Auth — we never store plain-text passwords
• Database access is controlled by Row-Level Security (RLS) policies — each workspace can only access its own data
• Payment card data is handled entirely by Stripe and never touches our servers
• Uploaded files are stored in Supabase Storage with access controls

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on where you are located, you may have certain rights regarding your personal information:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update your name, email, and password directly in Account Settings, or contact us to correct inaccurate data.
• Deletion: You can delete your account and all associated data from Account Settings, or by emailing us.
• Portability: You can request an export of your workspace data by contacting us.
• Opt-out of communications: You can unsubscribe from non-essential emails using the unsubscribe link in any email we send.

To exercise any of these rights, contact us at pmileski@gmail.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect about you and how it is used
• The right to delete your personal information (subject to certain exceptions)
• The right to opt out of the sale of your personal information — we do not sell your personal information
• The right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, email us at pmileski@gmail.com with the subject line "CCPA Privacy Request."

9. Children's Privacy

CoachOps360 is designed for use by businesses and workplace teams. We do not knowingly collect personal information from anyone under the age of 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at pmileski@gmail.com and we will delete it promptly.

10. Third-Party Links

CoachOps360 may contain links to third-party websites or services (such as Stripe's billing portal or Supabase). This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice in the app. Your continued use of CoachOps360 after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: