Privacy Policy

We have tried to keep this readable. The essentials:

• Your conversations are stored in your own browser, not on our servers. Clearing your browser data deletes them.
• We send your messages to Anthropic to generate each coaching reply. That is the only way the product can work.
• We never see your card details. Payment runs entirely through Systeme.io.
• We hold very little else — your email address, which coaches you have access to, and standard server logs.
• We do not sell your data, and we do not use your conversations to train AI models.

The sections below say the same thing with the detail a policy needs.

Oelean is an AI coaching service for Agile professionals, at https://coaching.oelean.com.

For data protection purposes we are the controller of the personal data described here.

Privacy enquiries: contact@oelean.com

Information you give us

• Your email address, when you unlock a coach. We use it to confirm your access and to contact you about your subscription.
• Your access code, entered on the same form. Codes are checked by recalculating them — we do not keep a list of them.
• What you write to a coach. Covered in detail in the next section.
• Anything you send us by email, if you contact support.

Information collected automatically

• Standard server logs — IP address, browser type, the pages requested and when. These come from hosting the site and are used to keep it running and secure.
• Rate limiting counters, keyed to your IP address and email, to stop abuse of the sign-in form and the coaching endpoint. These are held in memory and are not permanent records.

What we do not collect

We do not currently run analytics, advertising or third-party tracking on this site. There are no advertising cookies, no tracking pixels and no session recording. If that ever changes, this policy will be updated before it does.

This is the part most people want to understand, so it gets its own section.

Your history lives in your browser. When you chat with a coach, the conversation is saved in your browser's local storage on that device. It is not written to a database on our servers. It does not follow you to another device. Clearing your browser data, or using "New conversation", deletes it permanently — including from our reach, because we never had a copy.

Each message is sent to Anthropic to generate a reply. When you send a message, that message and the earlier turns of that conversation are transmitted to Anthropic, which runs the AI model behind every coach. Anthropic processes it to produce the response and returns it to you. See Anthropic's privacy policy for how they handle it.

We do not store your conversations on our servers. Messages pass through our server to reach Anthropic and are not written to a database. Our error logs record technical failures — status codes and error types — not the content of your messages.

We do not use your conversations to train AI models.

Please be thoughtful about what you share. Coaching works better with real detail, but you rarely need names. Describing people by role — "a developer", "my product manager", "the finance director" — gets you the same quality of coaching without putting identifiable information about your colleagues into a third-party system. If your employer has rules about what may be shared with AI tools, those rules apply here.

We use exactly one cookie.

• `oelean_access` — set when you unlock a coach. It records your email address and which coaches you have access to, and is cryptographically signed so it cannot be altered or forged. It is marked HTTP-only, so scripts running in your browser cannot read it, and it expires after 60 days.

It is strictly necessary to provide a service you have asked for, so it does not require consent. Signing out deletes it.

We set no analytics, advertising or tracking cookies.

Your chat history is kept in local storage, which is related but separate: it stays on your device and is never transmitted to us automatically.

We use a small number of third parties to run the service. Each handles data only as needed to provide their part of it.

• Anthropic — Generates the coaching replies. Receives the messages you send to a coach. Privacy policy
• Systeme.io — Handles checkout, subscriptions and billing. Holds your name, email and order history. Privacy policy
• Vercel — Hosts the website and serves it to your browser. Processes request logs and IP addresses. Privacy policy

We do not sell personal data, and we do not share it with anyone for their own marketing.

If you are in the UK or EU, we rely on these lawful bases under the UK GDPR and EU GDPR:

• Performance of a contract — holding your email and access entitlements, and processing your messages, so we can give you the service you paid for.
• Legitimate interests — keeping the service secure and available (server logs, rate limiting), and preventing abuse. We have considered your rights and think this is proportionate; it is limited to what running the service requires.
• Legal obligation — retaining billing records for as long as tax and accounting law requires.

We do not rely on consent for anything described here, because we do not do anything here that requires it.

• Your access cookie — 60 days, then it expires and you sign in again.
• Your chat history — until you clear it. It is on your device, under your control.
• Your email address and order history — held in Systeme.io for as long as you are a customer, and afterwards for as long as tax and accounting rules require (typically six years).
• Server logs — retained for a short period by our hosting provider for security and diagnostics, then discarded.
• Support emails — kept while we deal with your query and for a reasonable period afterwards.

If you are in the UK or EU you have the right to:

1. 01Access the personal data we hold about you.
2. 02Correct anything inaccurate.
3. 03Delete your data, where we have no overriding reason to keep it.
4. 04Restrict or object to how we process it.
5. 05Portability — receive your data in a usable format.
6. 06Withdraw consent, where consent is what we relied on.

To exercise any of these, email contact@oelean.com. We will respond within one month.

Two practical notes. Your chat history is already entirely under your control — we cannot produce or delete it for you because we do not hold it. And if you are unhappy with how we have handled a request, you can complain to your national data protection authority; in the UK that is the Information Commissioner's Office.

The site is served over HTTPS. Your access cookie is HTTP-only and cryptographically signed, so it cannot be read by scripts or tampered with. Access codes are never sent to the browser, and are verified by recalculation rather than stored in a list. Sign-in attempts and coaching requests are rate limited.

No system is perfectly secure, and we would rather say so than imply otherwise. If you believe you have found a vulnerability, please email contact@oelean.com and we will take it seriously.

Our service providers, including Anthropic and our hosting provider, may process data outside the UK and European Economic Area — principally in the United States.

Where that happens, transfers are covered by appropriate safeguards, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.

Oelean is a professional tool intended for people in the workplace. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

If we change how we handle your data, we will update this page and move the date at the top. For anything significant — a new category of data, a new processor, or a materially different use — we will tell existing customers by email rather than relying on you to notice.

Questions about anything here, or about data we hold:

contact@oelean.com

Oelean