Privacy Policy

1. Information We Collect

Account information

When you create an account, we collect your email address and any profile details you provide (name, business name). This information is used to identify you and power your workspace.

Client and business data

Information you enter about your clients — names, contact details, session notes, check-ins, workout and nutrition programs — is stored and processed solely to provide the Service to you.

Usage and technical data

We may collect information about how you use the Service, including pages visited, features used, session duration, IP address, browser type, and device identifiers. This data helps us improve the product and diagnose issues.

Payment information

Billing is handled by Stripe. We do not store your full card number or CVV. We receive and retain metadata provided by Stripe (e.g., subscription status, customer ID) to manage your account.

2. How We Use Your Information

• Provide, operate, and maintain the Service.
• Manage your account, subscription, and billing.
• Respond to support requests and communicate with you about the Service.
• Monitor and improve product performance and user experience.
• Comply with legal obligations and enforce our Terms.
• Detect and prevent fraud, abuse, or security incidents.

We do not sell your personal data to third parties. We do not use your client data to train AI models or for any purpose other than delivering the Service to you.

3. How We Share Your Information

We share data only as described below:

• Service providers: We use Supabase for database hosting and Stripe for payment processing. These providers process data on our behalf under their own data processing agreements.
• Legal requirements: We may disclose information if required by law, regulation, court order, or to protect the rights, property, or safety of IndigoWave Tech, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

4. Data Retention

We retain your account and business data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your data within 90 days, unless we are required to retain it for legal or compliance purposes.

5. Security

We take reasonable technical and organizational measures to protect your data, including encryption at rest and in transit, access controls, and regular security reviews. However, no system is completely secure and we cannot guarantee the absolute security of your data.

If you become aware of a security vulnerability or incident involving the Service, please contact us immediately at hello@indigowavetech.com.

6. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• Access — request a copy of the data we hold about you.
• Correction — request that we correct inaccurate data.
• Deletion — request that we delete your data (subject to legal requirements).
• Portability — request your data in a machine-readable format.
• Objection — object to certain processing activities.

To exercise any of these rights, contact us at hello@indigowavetech.com. We will respond within 30 days.

7. Cookies and Tracking

The Service uses cookies and similar technologies to maintain your session, remember preferences, and analyze usage. Session cookies are essential for the Service to function. Analytics cookies help us understand how the product is used.

You can configure your browser to refuse cookies, though some parts of the Service may not function correctly without them.

8. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

9. International Transfers

Your data may be stored and processed in countries other than your own. By using the Service, you consent to such transfers. We take steps to ensure adequate protections are in place when transferring data internationally.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact

For questions or concerns about this Privacy Policy or our data practices, contact us:

IndigoWave Tech — Momentum
hello@indigowavetech.com