Privacy Policy

Last updated: September 19, 2026

This policy explains what personal data Stay Keen collects, why, and what your rights are. The data controller is Vintrex Labs, operating from Italy, reachable at admin@vintrexlabs.com. We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. What we collect

  • Account data — name, email address, avatar, timezone, location (if you add one), and whether you use Stay Keen as a learner, a coach, or both. Signing in with Google or LinkedIn shares your name, email, and profile photo from that provider.
  • Coach profile data — headline, bio, skills, rates, availability, work history, and anything else a coach chooses to publish. Coach profiles are public.
  • Bookings and sessions — who booked whom, when, the topic, duration, and price.
  • Session recordings, transcripts, and notes — only when recording is enabled (you can turn it off account-wide or per session). Enabled sessions are recorded audio-only, transcribed, and summarised into session notes shared with both participants.
  • Messages — chats and file attachments between learners and coaches, stored privately.
  • Reviews and reports — reviews you write, and reports you file about users or coaches (report contents are confidential and never shared with the person reported).
  • Payment data — handled by Stripe. We never see or store full card numbers; we keep only what Stripe shares for operating the platform (e.g. card brand, last four digits, payment status, payout status).
  • Technical data — standard server logs and the essential cookies described in the Cookie Policy. We do not run advertising or analytics trackers.

2. Why we process it (legal bases)

  • Performing our contract with you — running your account, matching learners and coaches, hosting calls, processing bookings and payments, sending transactional emails (confirmations, reminders, unread-message notices).
  • Consent — session recording and transcription; you can withhold or withdraw it via the recording settings at any time.
  • Legitimate interests — keeping the platform safe (reviewing reports, preventing fraud and abuse), improving the product, and defending legal claims.
  • Legal obligations — accounting and tax records for payments.

3. Who processes data for us

We share personal data only with the processors needed to run Stay Keen:

  • Our EU-based cloud platform provider — database, authentication, and file storage.
  • Stripe — payments and coach payouts. Stripe acts as an independent controller for payment data under its own privacy policy.
  • Daily.co — video call infrastructure and (when enabled) call recording.
  • AI providers (Anthropic / OpenAI) — transcripts of recorded sessions are processed to generate session notes. Transcript excerpts are sent for processing only; they are not used by these providers to train their models under our API terms.
  • Resend — transactional email delivery.
  • Vercel — application hosting.

Some processors are located outside the EEA. Where that is the case, transfers rely on adequacy decisions or Standard Contractual Clauses. We never sell personal data.

4. What others can see

Coach profiles (including reviews) are public and may be indexed by search engines. Learner activity is not public: your bookings, messages, recordings, and notes are visible only to you and the other participant. Coaching requests you post are visible to coaches on the platform and via share links you create.

5. Retention

We keep data for as long as your account exists. Payment records are retained as long as tax and accounting law requires. When you delete your account, personal data is deleted or anonymised within 30 days, except what we must keep by law or need to resolve an open dispute. You can request deletion at admin@vintrexlabs.com.

6. Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. Write to admin@vintrexlabs.com and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in Italy, the Garante per la Protezione dei Dati Personali).

7. Security

Data is encrypted in transit, access is restricted with row-level security, recordings and attachments live in private storage accessed via short-lived signed links, and payment credentials never touch our servers. No system is perfectly secure — if we learn of a breach affecting your data we will notify you as the GDPR requires.

8. Children

Stay Keen is for adults. We do not knowingly process data of anyone under 18.

9. Changes

If this policy changes materially we will announce it on the platform before the change takes effect.

See also: Terms of Service · Cookie Policy