Privacy Policy

This Privacy Policy explains what myCFPCoach ("we", "us") collects when you use mycfpcoach.app (the "Service"), why, and what control you have over it. It should be read alongside our Terms of Service and AI Use Policy.

1. What We Collect

Account information — when you sign in with Google, we receive your name, email address, and profile picture from Google. We never see or store your Google password.

Profile information you provide — display name, bio, and expertise areas you enter yourself.

Content you submit — the talk idea, uploaded document (PDF/DOCX/PPTX/TXT), conference name, and any CFP or Sessionize link you enter to generate a coached proposal, plus any proposal you choose to save.

Usage & abuse-prevention data — your IP address, request timestamps, and generation outcomes (success/error/rate-limited), used only to enforce hourly/daily usage limits and investigate abuse. We also use Vercel Web Analytics for aggregate, privacy-respecting traffic metrics (no cross-site tracking cookies).

Approximate location— the homepage map's "Near You" view starts from a rough, city-level location our hosting provider (Vercel) derives from your IP address on every request — the same kind of signal any site gets just by being visited, not a separate lookup we perform. It's used only to sort that one list and place one pin on the map; nothing about it is stored or sent anywhere beyond rendering that page. If you tap "Get my exact location", your browser asks you directly for real GPS-grade location (the standard browser permission prompt) to replace that rough guess with a precise one — used the same way, for that view only, and just as unstored.

API keys — if you create one for the MCP integration, we store only its SHA-256 hash, never the plaintext key (which is shown to you once, at creation).

2. How We Use It

• To operate the Service — research conferences, generate coached proposals, and track your submissions;
• To enforce free-tier and signed-in usage limits, and to detect and prevent abuse;
• To maintain the anonymized outcomes dataset used to check whether the coach's own fit-score predictions match real conference decisions;
• To operate, secure, and improve the Service generally.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Who We Share It With

We share data only with the service providers needed to run myCFPCoach, each acting on our behalf:

• Anthropic — receives your idea/document text and conference name to generate a coached proposal. See our AI Use Policy for how this data is (and isn't) used by the model provider.
• Supabase — hosts our database and authentication; access to your rows is restricted by row-level security so only you (or our service role, for rate-limiting and abuse checks) can read them.
• Google — provides sign-in identity only; we don't receive your Google password or access your other Google data.
• Vercel — hosts the application and provides aggregate analytics.
• Sessionize — only if you paste a Sessionize feed URL, we make a read-only request to that public feed to pull accepted-talk data for research. We don't send your personal data to Sessionize.

We may also disclose information if required by law, or to protect the rights, safety, or property of myCFPCoach, our users, or the public.

4. Data Retention

We're in beta and retention is intentionally limited — always keep your own copy of anything you want to keep long-term. Specifically:

• Generation logs (used for rate-limit enforcement) are retained only as long as needed for that purpose.
• Saved proposals, talks, and submissions persist until you delete them or your account.
• Outcomes-dataset rows are retained even after you delete a talk or your account (the underlying reference is set to null, not the row itself) — this is deliberate: it's anonymized research data on whether the coach is calibrated, not personal data tied back to you once your account is gone.

5. Your Rights & Choices

You can review and edit your profile at any time from your profile page. To delete your account and associated personal data, or to request a copy of what we hold about you, email support@mycfpcoach.app— we'll act on verified requests within a reasonable time.

6. Children's Privacy

The Service isn't directed at anyone under 18, and we don't knowingly collect information from children. If you believe a child has provided us data, contact us and we'll delete it.

7. International Data

Our infrastructure (Supabase, Vercel, Anthropic) may process and store data in the United States and other countries. By using the Service, you consent to this transfer and processing.

8. Security

We use industry-standard measures — including Supabase row-level security so users can only read their own data, and hashed (never plaintext) API keys — but no method of transmission or storage is 100% secure, and we can't guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time; the "Last updated" date above will reflect the most recent revision.

10. Contact

Questions about this Policy or your data? Email support@mycfpcoach.app.