Coach Data Processing Terms

1. Roles and permitted instructions

The Coach determines the purposes of their coaching records and is responsible for their own client agreement, lawful collection, notices, and any required permissions. The Coach instructs LaunchSite to store, organize, display, export, and delete those records and perform the features the Coach or authorized client requests within the service. Instructions must comply with the wellness-only restrictions. LaunchSite remains responsible for processing it determines for its own account administration, billing, security, support, and agreement records.

2. Data and duration

Processing covers the clients and authorized users in the Coach's workspace and the categories described in our Privacy Policy and Consumer Health Data Privacy Policy, including intake answers, coaching messages, labs, photos, wearable information, and coaching records where supplied. Processing continues for the requested service and the documented deletion, retention, and dispute-handling purposes described there.

3. Confidentiality and security

LaunchSite limits personnel access to authorized work, requires confidentiality, and maintains access controls and private file delivery. The Coach controls authorized team access and must safeguard their account. The Coach must not instruct us to use client information for an unrelated purpose or send it to another recipient without the necessary authority. These terms do not permit regulated medical workflows or use requiring a BAA.

4. Providers and optional connections

The Coach authorizes the providers and processing described in our subprocessor register for the enabled service. LaunchSite requires applicable data-processing protections when engaging processors. Connected services selected directly by the Coach or client may have separate terms and responsibilities. The Coach must review those services before enabling them and obtain purpose-specific permissions where required. Contact privacy@launchsite-os.com to raise a provider concern or request information about a change.

5. Requests and incidents

LaunchSite will assist the Coach with applicable access, correction, export, deletion, withdrawal, and incident obligations concerning the records we process for them. Notify privacy@launchsite-os.com promptly of a request or suspected unauthorized access. We may verify authority before disclosing records or acting on a request. We remain responsible for requests concerning our own processing and do not require a client to resolve those solely with their Coach.

6. Return, deletion, and evidence

Authorized users can request copies or deletion through the app and support. Deletion work may continue after account access ends. Active records, provider work, protected agreement evidence, and backup or version retention have separate completion states. A documented legal retention requirement or hold may limit deletion of a specific record; it does not authorize indefinite retention of an entire health history. We will explain a relevant exception and the available request path.

7. Instructions that cannot be followed

If an instruction conflicts with the permitted service or applicable data protection requirements, LaunchSite may refuse or suspend that processing and explain the issue. Contact privacy@launchsite-os.com for information reasonably needed to assess our processing, resolve a concern, or arrange return and transition. Neither party may use these terms or a consent record to waive rights that the law does not allow to be waived.