Privacy Policy

CryoCove ("we," "us," or "our") operates the website cryocove.com and provides health and wellness coaching services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We take your privacy seriously. Please read this policy carefully. By using CryoCove, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information You Provide

When you create an account, book a consultation, or subscribe to our coaching service, we collect information you voluntarily provide, including:

• Account data: Name, email address, and password (stored as a secure hash — we never store plaintext passwords)
• Payment information: Payment details processed securely through Stripe. We do not store your full credit card number, CVV, or other sensitive payment data on our servers.
• Wellness profile data: Health goals, wellness assessments, coaching notes, protocol preferences, and progress tracking information you share during your coaching engagement.
• Communications: Messages, feedback, and any information you provide through our contact forms or email correspondence.

Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and usage, including:

• Usage analytics: Page views, session duration, referral sources, and interactions with site features (collected via Vercel Analytics).
• Device information: Browser type, operating system, screen resolution, and general location (country/region level).
• Log data: IP address, access times, and pages viewed.

Account Information

When you create an account, we store your name, email address, and a securely hashed version of your password. We never store your password in plain text.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: Providing, personalizing, and improving your wellness coaching experience, including creating personalized protocols and tracking your progress.
• Communication: Sending you booking confirmations, session reminders, coaching updates, and responding to your inquiries.
• Billing: Processing payments, managing subscriptions, and sending invoices through Stripe.
• Improvement: Analyzing usage patterns to improve our website, coaching methods, and overall service quality.
• Newsletter: Sending our weekly wellness newsletter if you opt in. You can unsubscribe at any time.
• Legal compliance: Meeting our legal obligations and enforcing our terms of service.

3. Third-Party Services

We use trusted third-party services to operate CryoCove. Each provider has their own privacy policy governing how they handle your data:

• Stripe (Payment Processing): Handles all payment transactions securely. Your payment information is processed directly by Stripe and is subject to Stripe's Privacy Policy.
• Vercel (Hosting & Analytics): Hosts our website and provides privacy-friendly analytics. Subject to Vercel's Privacy Policy.
• Resend (Transactional Email): Delivers account emails, booking confirmations, and newsletters. Subject to Resend's Privacy Policy.

We do not sell, rent, or trade your personal information to any third party. We only share data with the service providers listed above to the extent necessary to operate our platform.

4. Cookies and Tracking

We use a minimal number of cookies to provide and improve our service:

• Session cookies: Essential cookies that keep you logged in and maintain your session. These are strictly necessary for the service to function.
• Analytics cookies: Used by Vercel Analytics to understand how visitors interact with our website. These collect anonymized usage data and do not track you across other websites.

We do not use advertising cookies or cross-site tracking. You can configure your browser to refuse cookies, though this may affect your ability to log in and use certain features.

5. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained while your account is active and for 30 days after deletion request to allow for account recovery.
• Wellness and coaching data: Retained while your account is active. Deleted upon account deletion request.
• Payment records: Retained for 7 years as required by tax and financial regulations.
• Analytics data: Anonymized and aggregated; not tied to your personal identity.

To request deletion of your data, contact us through our contact page or email privacy@cryocove.com. We will process your request within 30 days.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption for all data in transit
• Secure password hashing (passwords are never stored in plaintext)
• Stripe PCI-compliant payment processing
• Regular security reviews of our infrastructure

While we work hard to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

CryoCove is designed for adults aged 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in certain jurisdictions). If we learn that we have collected information from a child under the applicable age, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@cryocove.com.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have certain rights regarding your personal information:

All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data portability: Request your data in a structured, machine-readable format.
• Opt out: Unsubscribe from marketing communications at any time.

European Economic Area (GDPR)

If you are in the EEA, you have additional rights under the General Data Protection Regulation, including the right to restrict processing, object to processing, and withdraw consent. Our legal basis for processing your data is: (a) your consent, (b) performance of a contract (providing coaching services), and (c) our legitimate business interests.

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know: You can request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request deletion of your personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• Sale of data: We do not sell your personal information. Period.

To exercise any of these rights, email privacy@cryocove.com or use our contact page. We will respond within 30 days (or sooner where required by law).

9. International Data Transfers

Our services are hosted in the United States via Vercel. If you access CryoCove from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer. We take steps to ensure your data is treated securely and in accordance with this privacy policy regardless of where it is processed.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website.

We encourage you to review this policy periodically. Your continued use of CryoCove after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at: