Privacy Notice

The Other Projects LLC is the controller of personal data used to operate Coachwatch accounts, marketplace workflows, support, safety, and staging administration, except where a named provider acts as an independent controller under its own notice. A coach may also have independent responsibilities for information they receive to deliver coaching.

This notice covers the Coachwatch website, OAuth linking, staging marketplace, Discord-based delivery workflow, coaching records, and related support operations. Provider websites and communities have their own notices.

We collect data you provide, data returned by linked providers with your authorization, technical data generated when the service runs, and marketplace records created by the staging workflow.

• Account and OAuth data: provider identifiers, Discord username and display name, avatar, email where supplied, guild membership, relevant Discord roles, Twitch identity or subscription eligibility, Battle.net identifier and ownership-link status, OAuth scopes, token metadata, and connection timestamps.
• Profile and eligibility data: country code, age-band selection, role, coaching application answers, public coaching name, experience and verification status, account status, and preferences.
• Coaching data: offers and versions, prices, reservations, quotes, orders, goals, questions, availability, rank, role, hero, replay-code metadata, encrypted delivery inputs, Discord room references, fulfillment records, team attestations, stream and recording choices, reviews, support cases, and safety reports.
• Payment and marketplace metadata: Stripe customer or connected-account references where used, test Checkout Session and PaymentIntent identifiers, payment and payout status, fees, discounts, refunds, disputes, transfer records, country capability evidence, and reconciliation or audit records. Coachwatch does not receive or store full card numbers.
• Technical and security data: IP-derived or hashed security signals where enabled, user agent, session and necessary-cookie identifiers, request and event identifiers, timestamps, logs, fraud signals, feature flags, audit events, error details, and provider webhook metadata.
• Public game data: BattleTag-derived or public OverFast profile data such as rank, role, hero, and playtime summaries when a user requests a lookup.

The legal basis depends on the data, purpose, and law that applies. We use data only where a basis is available and reassess this before any real-money launch.

• Contract and steps at your request: create and secure an account, provide OAuth connections, produce quotes, process staging orders, coordinate Discord delivery, record policy acceptance, and provide requested support.
• Legitimate interests: test and improve the marketplace, prevent fraud and abuse, secure accounts and providers, maintain auditability, moderate content, resolve disputes, measure service reliability, and protect users and the platform, balanced against affected rights.
• Consent: optional OAuth links, public streaming or recording choices, clips, voice or BattleTag display, and other processing where consent is the appropriate basis. Consent can be withdrawn for future processing, although prior lawful processing and necessary records may remain.
• Legal obligations and legal claims: comply with valid law-enforcement or regulatory requests, accounting and tax duties when applicable, sanctions or provider requirements, and establish, exercise, or defend legal claims.

We share only what is reasonably needed for the requested workflow, security, support, legal compliance, or provider operation. A buyer and coach receive the order information needed to coordinate and deliver coaching. Streamed content may become public only according to the selected format and recorded permissions.

We may disclose data to professional advisers, authorities, or transaction counterparties where lawfully required, to protect rights and safety, or as part of a reviewed corporate transaction. We do not sell staging personal data.

The following providers may process staging data for the stated purposes. Their exact role, region, and production terms must be reviewed before launch, and a provider may also act as an independent controller for its own service.

• Discord: sign-in, community membership, identity, private coaching-room delivery, and communications.
• Twitch: optional OAuth identity and community-discount eligibility.
• Stripe: test checkout, fraud tooling, connected-account onboarding, payment, refund, dispute, transfer, and payout metadata.
• Supabase: hosted Postgres, authentication-related infrastructure where configured, and private object storage.
• Vercel: web hosting, delivery, runtime logs, and product analytics where enabled.
• Railway: application, worker, or bot hosting and operational logs where deployed.
• Inngest: durable background jobs, event orchestration, retries, and related operational metadata.
• Battle.net / Blizzard: optional account linking, identity or account-ownership verification, and Blizzard-hosted services.
• OverFast: requested retrieval of public Overwatch profile and career data.

Coachwatch uses strictly necessary cookies and comparable storage for sign-in, session continuity, request integrity, security, load handling, and saved interface preferences. These technologies are required for the service requested by the user and are not presented through a fake consent banner.

Staging may use limited first-party operational measurement and Vercel product analytics where configured. Before introducing any non-essential advertising, cross-site tracking, or optional analytics that requires consent, Coachwatch must provide the required information and controls.

We use proportionate technical and organizational safeguards intended to reduce unauthorized access, loss, alteration, or disclosure. Measures include access controls, least-privilege service roles, encryption or keyed protection for selected credentials and coaching inputs, private storage, provider-signature verification, append-only audit records, environment separation, and monitoring.

No service is perfectly secure. Staging users should not submit secrets, full payment credentials, government identifiers, medical information, or other sensitive data unless expressly requested through an approved secure flow. Report suspected compromise to support@coachwatch.gg.

We retain staging data only for as long as reasonably needed for the purpose collected, security, testing, dispute handling, legal obligations, and the establishment or defence of claims. Retention depends on record type, account status, provider limitations, active orders, financial or legal holds, backup cycles, and whether data can be safely deleted or anonymized.

OAuth tokens are removed or invalidated when a connection is unlinked where supported, subject to provider behavior and necessary security records. Staging resets may delete data without the continuity expected from a production service. Immutable audit, policy-acceptance, transaction, and dispute records may be retained longer where integrity or law requires it.

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about processing; withdraw consent for future processing; and complain to a competent data-protection authority. These rights may be limited by identity verification, another person’s rights, legal obligations, security, active disputes, or lawful retention needs.

Send requests to support@coachwatch.gg. We may ask for information reasonably needed to verify the account and request. Where applicable, you may complain to the Personal Data Protection Service of Georgia or another authority with jurisdiction over your location.

Coachwatch and its providers may process data in Georgia, the European Economic Area, the United States, and other countries where the listed providers operate. Those countries may have different data-protection laws.

Where transfer restrictions apply, we will use an available lawful mechanism and supplementary safeguards as required, such as an adequacy decision, approved contractual clauses, provider transfer terms, encryption, or data minimization. Transfer arrangements require counsel and provider review before a real-money launch.

Coachwatch may use automated rules to check eligibility, availability, security signals, discounts, checkout gates, or suspicious activity. Staging is not intended to make solely automated decisions that produce legal or similarly significant effects. Material launch decisions and appeal paths require further review.

Coachwatch may collect an age-band selection to apply product eligibility rules, including purchase restrictions where minors are not enabled. If we learn that data was collected in a way that is not appropriate for the user’s age or local law, we may restrict the account and delete or isolate the data where appropriate, while preserving records required for safety or law.

We may publish a new version of this notice as staging changes. The page shows the source version, effective date, and SHA-256 content hash. A policy database record is publication metadata, not proof of legal approval.

The Other Projects LLC is located at Top of the Hill, Tago, Khulo, Georgia. Contact support@coachwatch.gg for privacy questions, requests, or concerns.