Privacy Policy — AscendAI Coach

1. Introduction

This Privacy Policy describes how AscendAI Coach ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use the AscendAI Coach platform and related services.

AscendAI Coach is a product of Corton Labs, a sole proprietorship operated by Anitta Corton, based in Toronto, Ontario, Canada. This policy complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

We are committed to protecting your privacy and handling your data with transparency and care. By using our Service, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of personal data:

Account information: name, email address, hashed password, and profile details you provide at signup.
Payment information: billing name, email address, and transaction records. Payment card details are processed directly and securely by Stripe. We do not store your full card number on our servers.
Usage data: log data, device information, IP address, browser type, pages visited, and interaction patterns within the platform.
Client coaching data: goal information, milestone progress, check-in responses, session notes, and other coaching-related data you enter about your clients.
Support data: messages and attachments you send through our support channels.

2a. Your Clients' Data — Our Role as Data Processor

As a coach using AscendAI Coach, you will enter personal information about your coaching clients into the platform. For this data:

You are the data controller. You decide what client data is collected, why it is collected, and how it is used.
We are the data processor. We process your clients' data only to provide the Service to you, strictly according to your instructions as a subscriber.
We will never use your clients' data for our own marketing, analytics, or AI model training. We will never sell it or share it with third parties except as required to deliver the platform.

Your responsibilities as data controller:

Inform your clients that their personal data is stored and processed through a third-party platform (AscendAI Coach / Corton Labs)
Obtain any consent required under applicable privacy laws before entering client data into the platform
Ensure your coaching practice complies with applicable data protection laws (PIPEDA in Canada, GDPR in the EU/UK, or applicable US state laws)

To request access, correction, or deletion of client data, contact privacy@ascendaicoach.com and we will assist you in fulfilling that request.

3. How We Use Your Information

We use your personal data for the following purposes:

To provide, maintain, and improve the AscendAI Coach platform
To authenticate your identity and secure your account
To process payments and manage subscriptions
To send service-related notifications, security alerts, and account updates
To provide customer support and respond to your inquiries
To analyze aggregate usage patterns and improve product features
To send marketing communications, only with your consent, which you may withdraw at any time
To comply with applicable legal obligations
To detect, prevent, and address fraud, security incidents, or technical issues

We will never sell your personal information to third parties.

4. Legal Basis for Processing

We process your personal data on the following grounds:

(a) Contract: to fulfill our obligations to you as a subscriber
(b) Legitimate interests: to operate, secure, and improve the platform
(c) Legal obligations: to comply with applicable laws including PIPEDA
(d) Consent: for marketing communications and any other processing where consent is required

5. Data Sharing

We do not sell your personal data. We may share it only with the following categories of recipients:

Payment processors: Stripe (stripe.com) processes checkout, subscription billing, and invoicing securely on our behalf. We intend to transition to Lemon Squeezy as our Merchant of Record in the future; you will be notified in advance of any such change.
Hosting and infrastructure providers: services that host our platform and store data (such as Supabase, Vercel, and Cloudflare).
Email delivery providers: services used to send transactional and, where consented, marketing emails (such as Resend).
Analytics providers: tools that provide aggregated, anonymised insights into platform usage.
Professional advisers: legal, accounting, and compliance professionals where necessary.
Authorities: when required by applicable law, court order, or regulatory process.

All third-party providers are contractually required to handle your data securely and only for the purposes we specify.

6. International Transfers

Our infrastructure providers may process your data in countries outside Canada, including the United States and the European Union. Where applicable, we rely on Standard Contractual Clauses (SCCs) or other recognized adequacy mechanisms to ensure your data receives an appropriate level of protection.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Financial and billing records are retained for a minimum of seven (7) years in accordance with Canadian tax law. When data is no longer needed, we securely delete or anonymize it.

If you close your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

Access — request a copy of the personal information we hold about you
Correction — request that inaccurate or incomplete information be corrected
Withdrawal of consent — withdraw consent to our collection or use of your data, subject to legal or contractual restrictions
Complaint — file a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, contact us at privacy@ascendaicoach.com. We will respond within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your data, including:

TLS encryption for data in transit
Encryption at rest for stored data
Hashed passwords
Access controls limiting who can view personal data
Regular security assessments

No system is completely secure. If we detect a breach affecting your data, we will notify you and relevant regulators as required by applicable law.

10. Cookies & Analytics

We use the following types of cookies:

Strictly necessary cookies: required for authentication, session management, and core platform functionality. These cannot be disabled without breaking the Service.
Analytics cookies (consent-based): we use Google Analytics 4 (measurement ID G-JB3KW5JRMD) with IP anonymization enabled to understand aggregate usage of the platform. Google Analytics is loaded only after you accept analytics in our cookie banner. Data is processed by Google LLC and may be transferred to the United States under Standard Contractual Clauses. See Google's Privacy Policy.
Privacy-friendly analytics: we also use Plausible Analytics, which is cookieless and does not collect personal data.

You can withdraw analytics consent at any time by clearing your browser's site data for this domain, or by using your browser's cookie controls. We do not use advertising cookies or cross-site tracking.

11. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform at least 14 days before they take effect. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

Questions or concerns about this Privacy Policy: privacy@ascendaicoach.com.

AscendAI Coach is a product of Corton Labs, Toronto, Ontario, Canada.