7.1
Definitions. "Customer Data" means everything you and your End Users put into the Service: athlete and family records, schedules, payment records, messages, videos, notes, and your site content. "Usage Data" means technical and analytics information about how the Service is used that does not identify an individual athlete or family.
7.2
You own Customer Data. We claim no ownership. You grant us a worldwide, non-exclusive, royalty-free license to host, copy, process, transmit, display, and back up Customer Data solely to provide, secure, support, and improve the Service, to comply with law, and as you otherwise instruct. This license ends when we delete Customer Data under Section 7.8, except for archival copies we must keep by law.
7.3
Our roles. For Customer Data about your athletes and families, you are the controller (or "business") and we are your processor (or "service provider"). We process Customer Data only on your documented instructions, which include these Terms and your use of the Service, and not for our own purposes except as this Section allows. If you are in the European Economic Area or the United Kingdom, we will sign a data processing addendum, including standard contractual clauses, on request.
7.4
Your responsibilities. You are responsible for having a lawful basis and any required consents and notices for the Customer Data you collect, especially data about minors and health or injury information. You will not upload data you are not permitted to share with us, and you will not use the Service to collect Social Security numbers, full payment card numbers outside Stripe's checkout, or medical records subject to HIPAA.
7.5
Minors. The Service is not directed to children under 13, and no one under 13 may create an account or use the Service directly. Profiles for athletes under 18 must be created by you or by a parent or guardian, not by the athlete. You will not permit or ask a child under 13 to submit information to the Service directly, and you are responsible for obtaining any parental consent the law requires for the athlete information you collect. CoachIQ handles that information on your behalf and does not knowingly collect personal information directly from children under 13. If you learn that a child under 13 has used the Service directly, tell us at
privacy@coachiq.io and we will remove the account.
7.6
Security. We maintain administrative, technical, and physical safeguards designed to protect Customer Data against unauthorized access, use, alteration, and loss. If we confirm a breach of security that affects your Customer Data, we will notify you without undue delay, and in any case within 72 hours of confirming it, and give you the information you reasonably need to meet your own notice obligations.
7.7
Subprocessors. We use third-party providers to run the Service (hosting, payments, messaging, email, analytics, AI models). We remain responsible for them.
7.8
Export and deletion. During your subscription, and for 30 days after it ends, you may request a copy of your Customer Data by emailing
support@coachiq.io, and we will provide it in a machine-readable format within a reasonable time. Beginning 30 days after termination we will delete or de-identify Customer Data within 90 days, except records we must keep for tax, payments, legal, or security reasons, which we keep only as long as required.
7.9
Usage Data and improvement. We may use Usage Data and de-identified, aggregated data to operate, secure, benchmark, and improve the Service, including to develop and evaluate AI-assisted features. We will not use identifiable Customer Data to train models that are used for anyone other than you without your consent.
7.10
Legal requests. If we receive a legal demand for Customer Data we will notify you unless prohibited and will disclose only what we are required to.