Legal
Last updated: June 2026
RefCoach is operated by David Resch (sole trader). For the personal data you provide to us through the service, we act as the data controller.
We don't sell your data, and we don't share it with advertising networks.
Data is stored on Lovable Cloud (Supabase infrastructure, EU region by default). Uploaded videos sit in a private bucket and are only reachable via your account or expiring share links. We use industry-standard technical and organisational measures including encryption in transit and at rest, scoped database access, and row-level security to keep your data separated from other users'.
Some of our processors (e.g. Google) may process data outside the EEA/UK. Where that happens, transfers are protected by Standard Contractual Clauses or an equivalent legal mechanism.
We keep your content for as long as your account is active. When you delete your account, your content is deleted within 30 days, except where we are legally required to retain it (e.g. billing records, which Paddle retains under tax law).
Under GDPR and equivalent laws you have the right to: access your data, correct it, erase it, restrict or object to processing, port it to another service, withdraw consent where we rely on it, and lodge a complaint with your supervisory authority. You can delete your account and export your data from Settings, or contact us via the in-app feedback widget. We respond within one month.
Share links you generate are accessible to anyone who has the link (Pro users can add a password and expiry). Don't share links with people who shouldn't see the report.
We use essential cookies and local storage to keep you signed in and to remember your preferences. No analytics, tracking, or advertising cookies. Paddle may set its own cookies during checkout, governed by their privacy notice.
We'll post updates here and update the "Last updated" date above. Material changes will be notified in-app or by email.