Privacy Policy

This explains what A Friend in Media collects, why, and what you can do about it. The operator is Becky Coles Media, and you can reach us at admin@BeckyColes.com.

What we collect.

• Account details: your email, your first and last name and organization if you give them, and a password or Google sign-in.
• Your stories: everything you enter and everything the coach creates for you, including your story basics, answers to the coach's questions, briefs, angles, pitches, interview prep, one-pagers and notes.
• Purchase records: what you bought, when, and its status (active, refunded or disputed). Payments are processed by Stripe. We do not see or store your full card number.
• Usage records: a count of coach requests tied to your account, used to apply usage limits and catch abuse.

How we use it. To run your account, save your work, sign you in, process your purchase, apply usage limits, answer your support emails, and keep the service secure. We do not sell your information.

AI processing. When you use the coach, the story details you have entered are sent to an AI service to generate the response. The coach runs through the Lovable AI Gateway, whose entry point is hosted in the EU. Requests are passed on to AI model providers that Lovable contracts with, and those providers’ servers are in the United States, so your information may be processed outside Canada. Lovable lists Microsoft (Azure AI Foundry), Amazon Web Services (Bedrock) and Google Cloud (Vertex AI) among its sub-processors. Lovable’s agreements with those providers limit their use of your content to delivering the service and do not allow them to train on it. Neither Lovable nor the providers publish how long they keep request content. Do not enter anything you would not want processed this way, such as health details or private information about other people.

Who else handles your data. The services that run the app: hosting and database (Google Cloud, Amazon Web Services and Supabase, through Lovable), Stripe for payments, Google if you choose Google sign-in, and the AI service above. Your data may be stored and processed in the European Union, the United Kingdom and the United States, so it may be subject to the laws of those places. They process data for us and for their own security obligations under their own terms.

Saved on your device. If you use the tool before signing in, your story is kept in your browser. When you sign in, it is moved into your account. Your saved work stays in your account until you delete it.

Deleting your data. On the Account page, you can permanently delete your account. That removes your sign-in, stories, usage records, purchase records and profile from the app, and clears what the app saved in your browser. It cannot be undone. Stripe and your bank keep their own payment records under their own rules, and we may keep what the law requires us to keep, such as accounting records. We keep purchase and accounting records for six years, as Canadian tax rules generally require.

How long we keep things. We keep your information while your account is open. When you delete your account, it is deleted as described above.

Cookies and browser storage. The app keeps only what it needs to work. When you sign in, your sign-in session is saved in your browser's storage so you stay signed in, until you sign out or delete your account. If you start a story before signing in, it is saved in your browser until you sign in, then moved into your account and removed from the browser. The app also remembers your scroll position for the current browser tab, which clears when you close the tab. Our hosting sets two short-lived cookies: one keeps your visit on the same version of the site for up to a day, and one, from Cloudflare, helps block automated traffic for about 30 minutes. On the purchase page, Stripe sets two cookies to help prevent payment fraud: one lasts about a year and the other about 30 minutes. Visitor counts for the site are measured without cookies. The app does not use advertising or tracking cookies.

Children. The tool is for adults and organizations. It is not meant for anyone under 18.

Your rights. You can ask to see, correct or delete your information by emailing admin@BeckyColes.com from the address on your account.

Changes. If we change this policy in a meaningful way, we will tell account holders by email and update the date above.