This Privacy Policy explains how I, Peter Durlacher, collect, use, and share information when you use peterdurlacher.comand the coaching services offered through it (together, the “Services”). It's a companion to my Terms of Service. If something here conflicts with the Terms on a privacy-specific point, this Policy controls.
I run this practice as an individual, currently based in Vienna, Austria, serving clients who are mostly in the U.S. This Policy is written in plain language and covers what I actually collect and do with it. It isn't a substitute for legal advice about a specific privacy regime (like GDPR or a U.S. state privacy law) - if you have questions about your rights under a specific law, email me and I'll do my best to help, and involve counsel where it matters.
1. Information I Collect
Account information. When you create an account, I collect your email address and, if you set one up, a passkey (a cryptographic credential managed by your device/browser - I never see or store your biometric data itself, only the public key your device gives me). You may also be able to sign in with a one-time code sent to your email.
Booking and calendar information. When you book a session, I collect the details you provide (name, email, time zone, and whatever you tell me about what you want to work on). Scheduling may draw on calendar availability through Google Calendar so we can find a time that works.
Payment information.Payments are processed by Stripe. I don't store your full card number - Stripe handles that. I do keep records of what you purchased, your credit balance, and transaction history so I can manage billing and support.
Session content. During video coaching sessions, I may use live transcription and AI-assisted note-taking (running on a local, self-hosted model, not a third-party AI vendor) to generate a summary of what we discussed. With your separate consent for a given session, I may also record it. Transcripts, notes, and any recordings are stored so I can prepare for future sessions and track your progress.
Communications. If you email me, subscribe to the newsletter, or submit feedback through the Site, I keep that correspondence and whatever you shared in it.
Usage data.The Site uses Google Analytics (via gtag) to understand aggregate traffic - things like which pages get visited and roughly how people found the Site. I don't use this to build individual profiles of you for advertising.
Cookies.I use a small number of cookies: a session cookie to keep you logged in, a non-sensitive “hint” cookie so the Site knows whether to show a login prompt, and standard analytics cookies from Google Analytics.
2. How I Use Information
- To provide, schedule, and bill for Coaching Services;
- To prepare for sessions and track continuity across our work together;
- To send booking confirmations, receipts, and (if you've opted in) the newsletter;
- To respond to support requests and feedback;
- To keep the Site and account system secure (for example, detecting suspicious login activity);
- To understand aggregate Site usage and improve content; and
- To comply with legal obligations, like tax and financial recordkeeping.
I don't sell your personal information. I don't use the content of your coaching sessions to train AI models, and I don't share it with third parties for their own marketing or product purposes. If that ever changes for a specific feature (for example, wanting to use anonymized session patterns to build a better coaching tool), I'll ask for your explicit, opt-in consent first and let you withdraw it at any time.
3. Who I Share Information With
I share information only with the service providers that help me run the Services:
- Stripe - to process payments and manage subscriptions;
- Google (Calendar and Gmail APIs) - to schedule sessions and send booking-related email;
- Google Analytics - for aggregate Site traffic data;
- My hosting and database providers - to run and store the Site and app data.
Session transcription and note generation run on infrastructure I control rather than being routed through a third-party AI vendor. I may also disclose information if required by law, or to protect the rights, safety, or property of myself or others.
4. Data Retention
I keep account and billing records for as long as your account is active and for a reasonable period after, to meet legal and accounting requirements. Session transcripts, notes, and (where applicable) recordings are kept for as long as they're useful to our ongoing work together, and I periodically delete Content that's no longer timely or relevant. You can ask me to delete your account and associated Content at any time (see Section 6), subject to what I'm legally required to retain (for example, financial records).
5. Security
I take reasonable technical and organizational measures to protect your information, including encrypted connections, hashed/passkey-based authentication rather than stored passwords where possible, and access controls on session data. No system is perfectly secure, though, and I can't guarantee absolute security.
6. Your Choices and Rights
- Access and correction. You can ask me for a copy of the information I hold about you, or ask me to correct it.
- Deletion. You can ask me to delete your account and associated Content, subject to legal retention requirements (like financial records).
- Newsletter. Every newsletter email includes an unsubscribe link, or you can email me directly.
- Session recordings. Recording only happens with your specific, per-session consent, and you can decline at any time.
- Analytics. You can use your browser's cookie controls or an ad-blocker/tracker-blocker to limit Google Analytics.
If you're located in the EU, UK, or a U.S. state with its own privacy law (like California), you may have additional rights under that law (such as data portability or the right to opt out of certain processing). Email peter@peterdurlacher.comand I'll work with you on any request, escalating to legal counsel where the request requires it.
7. International Data
I'm based in Austria and my service providers (Stripe, Google, my hosting provider) operate infrastructure in various countries, including the United States. By using the Services, you understand your information may be processed outside your home country.
8. Children's Privacy
The Services are for adults 18 and older. I don't knowingly collect information from anyone under 18. If you believe a minor has provided me with personal information, please contact me and I'll delete it.
9. Changes to This Policy
I may update this Policy from time to time. If I make a material change, I'll post the update here and, where appropriate, let you know directly. Continued use of the Services after an update means you accept the revised Policy.
10. Contact
Questions about this Policy or your information? Email peter@peterdurlacher.com.