Privacy, Data Protection & Your Rights
This portal is built around data minimisation: we store the least information needed to verify your ICF mentor coaching hours, and none of your raw coaching recordings.
Who is responsible for your data
Data Controller: Amy Sekhar, PhD, ACC, MCS-ACC • Cripster LLC. All data protection questions and data subject requests go directly to amy@amysekhar.com.
What we store — and what we never store
- No raw audio or video is ever hosted on this portal. Recordings and transcripts remain inside your private RaeNotes account; you share a view link only.
- Client pseudonyms only. Session records use initials or an invented name (for example “Client M”), never a client’s real name, employer, or location.
- Profile and intake details, ICF pathway answers, session reflections, RaeNotes share links, attendance, and formative observation scores.
- Consent records with timestamp and IP address, kept as proof of lawful basis.
Third-party processors (the minimal tech stack)
RaeNotes (AWS Cloud)
Raw media and transcript host. Encrypted at rest with AES-256; SOC 2 Type II. Your recordings live here, never on this portal.
Supabase (PostgreSQL)
Authenticated database holding reflections, attendance, and competency scores. Row-Level Security is enforced on every table.
Cal.com
Scheduling integration for 1:1 mentoring sessions.
PayPal
Payment processing. PCI-DSS compliant; we never see your card details.
Google Workspace
Audit-certified storage of signed agreements and formal completion logs.
AI training guarantee
Mentee reflections, coaching recordings, transcripts, and mentor feedback are strictly opted out of foundation AI model training. Your coaching work is never used to train anyone’s model.
How long we keep your data
- 12 months in the active web portal for reflections, drafts, and working notes.
- 7 years for official ICF mentor coaching verification logs, attendance registers, and signed agreements — required by international credential auditing standards (GDPR Article 17(3)(b)).
Your rights
You may access, export, correct, restrict, or request erasure of your personal data at any time. Signed-in mentees can do this themselves from the privacy hub; anyone else can email amy@amysekhar.com. You also have the right to lodge a complaint with your local supervisory authority.
Open your data & privacy hub