Privacy policy

Draft for legal review — must match actual processing on this site (contact pipeline, logs, analytics) before launch.

Who we are

This page describes the marketing site at steel.coach (the “Site”). The Steel AI training application is hosted separately; account and workout data are governed by the app’s own terms and policies when you use app.steel.coach.

What this Site collects

The contact form collects the email address, subject line, and message body you submit. Submissions are sent by email to an operator inbox configured on the server (SMTP). Technical data that servers and mail systems typically log may include timestamps, client IP address, delivery status, and message identifiers. Do not send passwords or payment card numbers through the contact form.

Fonts and third parties

This Site may load fonts from Google Fonts (Google LLC). Google may receive technical data such as your IP address as part of that request. If you need to avoid that transfer (for example in the EU or UK), consider self-hosting fonts or adjusting the deployment — align this paragraph with your counsel and the final head includes.

Cookies

Visiting the Contact page may set a small session cookie (for CSRF protection on the form). It is not used for advertising. Update this section if you add analytics, advertising tags, or change session behaviour.

Retention

Contact submissions are delivered to the configured mailbox; retention follows your mail provider’s and your organisation’s policies for inbound mail and backups. Server logs (if enabled) should be rotated or purged per your ops practice — define concrete periods with legal review.

Your rights

Depending on your jurisdiction, you may have rights to access, rectify, or delete personal data. Describe the request channel (e.g. contact email) after legal sign-off.

Changes

We will update this policy when processing changes and revise the “Last updated” date below.

Last updated: pending legal review.