Privacy Policy
Last updated: April 6, 2026
1. Introduction
mycoach.ing ("we", "our", "us") operates the MyCoach AI chatbot platform, including chatbot.mycoach.ing, cp.mycoach.ing, and related services. This Privacy Policy explains how we collect, use, store, and share personal data when you use our platform.
2. Data We Collect
2.1 Account Data (Bot Owners)
- Registration: Name, email address, password (hashed with bcrypt)
- Billing: PayPal transaction ID, subscription tier, credit purchases (we do not store credit card numbers)
- Usage: Credits used, credits balance, bots created, documents uploaded, workspace usage
2.2 Training Data (Bot Owners)
- Text content, URLs, and PDF/document files you upload for bot training
- YouTube channel URLs and extracted transcripts
- Website crawl data (pages, content)
- This data is stored as text chunks and vector embeddings
2.3 Conversation Data (Website Visitors)
- Messages: All messages exchanged between visitors and chatbots
- Contact info: Name, email, phone number, and other fields voluntarily provided or auto-extracted from conversations (fields depend on bot owner's plan tier)
- Technical data: IP address, approximate country (via IP geolocation), referrer URL, session ID
- No cookies: The chat widget uses localStorage only (no tracking cookies)
3. How We Use Data
- Provide the Service: Process AI queries, generate responses, store conversations, track credit usage
- Credit Management: Track monthly credit allowances, purchased credits, and usage across features (chat replies, crawling, YouTube imports, article generation)
- Billing: Process payments and add-on purchases via PayPal
- Communication: Send service-related emails (no marketing without consent)
- Security: Detect abuse, enforce rate limits, domain/IP restrictions, protect against fraud
4. Third-Party Data Processors
We share data with the following third-party services for processing:
| Provider | Purpose | Data Shared |
|---|
| OpenAI | AI responses & embeddings (all plans) | Message content, training chunks |
| Anthropic | Claude AI responses (Pro+) | Message content |
| Google | Gemini AI responses (Pro+) | Message content |
| xAI | Grok AI responses (Pro+) | Message content |
| PayPal | Payment processing | Email, transaction amount |
| ip-api.com | IP geolocation | IP addresses (country lookup only) |
5. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account closure.
- Training data: Retained while your account is active. You can delete documents at any time.
- Credit history: Transaction records retained for the life of the account.
- Conversation data: Retained per your subscription plan:
- Free: 7 days
- Starter: 30 days
- Pro: 90 days
- Agency: 1 year
- Enterprise: Unlimited
Conversations are automatically deleted after the retention period via daily cleanup.
- Payment records: Retained for 7 years for legal/tax compliance.
6. Data Security
- All data in transit is encrypted via TLS/SSL
- Passwords are hashed using bcrypt
- API keys are stored encrypted at rest
- Database access is restricted by IP and credentials
- Bot embedding restricted by domain lock and IP whitelist (Starter+)
- We do not sell your data to third parties
7. Your Rights (GDPR / CCPA)
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Export your data in a machine-readable format (CSV export available on Starter+)
- Objection: Object to processing of your data
- Restriction: Request limited processing of your data
To exercise these rights, contact hello@mycoach.ing. We will respond within 30 days.
8. Bot Owner Responsibilities
As a bot owner, you are a data controller for the conversation data collected by your chatbots. You are responsible for:
- Informing your website visitors that an AI chatbot is in use
- Disclosing data collection practices (including lead capture fields) in your own privacy policy
- Complying with applicable privacy laws (GDPR, CCPA, etc.) in your jurisdiction
- Responding to data subject requests from your website visitors
9. Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or data requests:
Email: hello@mycoach.ing
Platform: chatbot.mycoach.ing