Your Data Rights

You own your data. Comment Coach gives you full control over the personal information we hold about you. This page explains your rights and how to exercise them.

1. Self-Service (Instant)

You can exercise most data rights directly from your account, no waiting required:

2. Rights Under GDPR (EU/EEA Residents)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:

• Right of Access — Request a copy of all personal data we hold about you
• Right to Rectification — Correct inaccurate or incomplete personal data
• Right to Erasure — Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing — Limit how we use your data while a dispute is resolved
• Right to Data Portability — Receive your data in a structured, machine-readable format (JSON)
• Right to Object — Object to processing based on legitimate interest
• Right to Withdraw Consent — Withdraw consent at any time (does not affect prior processing)

Our legal basis for processing is your consent (provided at signup) and legitimate interest (operating the service).

3. Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know — What personal information we collect and how we use it
• Right to Delete — Request deletion of personal information we've collected
• Right to Opt-Out — Opt out of the sale or sharing of personal information
• Right to Non-Discrimination — Equal service regardless of exercising your rights

We do not sell or share your personal information. There is nothing to opt out of.

4. Children's Data (COPPA)

Comment Coach is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will promptly delete it.

5. How to Submit a Request

For any data rights request that cannot be fulfilled through self-service:

1. Email contact@comment.coach with the subject line "Data Rights Request"
2. Include the email address associated with your account
3. Describe the specific right you wish to exercise

We will verify your identity and respond within 30 days (GDPR) or 45 days (CCPA/CPRA). If we need additional time, we will notify you of the extension and the reason.

6. What Happens When You Delete Your Account

When you delete your account, the following data is permanently removed:

• Account information (name, email, password hash)
• All subjects, paragraphs, and comments
• All coaching history and scores
• All shared links (immediately become inaccessible)
• All reactions and feedback on your shared content
• All notifications
• Research threads
• All transcripts from live capture and uploaded audio, and text extracted from uploaded images and PDFs
• Subscription data (Stripe customer link — Stripe retains billing records per their policy)

This action is irreversible. We recommend exporting your data first.

7. Contact

For data rights questions or requests:

Email: contact@comment.coach

You can also manage your data directly in Settings.