Privacy Policy

Last updated: May 15, 2026

HSC LLC (“we,” “us,” or “our”) operates HSC Coach, a sales call analysis tool available at myhsccoach.app (the “Service”). This Privacy Policy explains how we collect, use, and protect information when you use the Service.

HSC Coach is a private, invitation-only tool. It is not open to public signup. Access is granted by an account administrator.

1. Information We Collect

1.1 Account Information

When an account is created for you, we collect:

• Full name
• Email address
• Role (manager, virtual assistant, or client owner)
• Encrypted password (we never store passwords in plain text)
• Client business assignments (which businesses you are associated with)

1.2 Call Transcripts and Analysis

When you upload a sales call transcript, we collect:

• The transcript text you submit
• Metadata you provide (which client business, call type)
• AI-generated analysis output (scores, identified failure patterns, coaching recommendations)
• Timestamp of submission

We automatically redact apparent credit card numbers and Social Security numbers from transcripts before storing them. However, you remain responsible for not submitting other sensitive personal information.

1.3 Usage Data

We collect basic technical information to operate the Service:

• IP address
• Browser type and version
• Pages visited within the Service
• Authentication session data (stored in browser cookies)

We do not use third-party analytics, advertising trackers, or behavioral profiling tools.

2. How We Use Information

We use collected information solely to:

• Operate, maintain, and improve the Service
• Generate AI analysis of call transcripts you submit
• Display analysis results to authorized users (you and others associated with the same business)
• Authenticate your identity and protect account security
• Communicate with you about your account (password resets, security notices)
• Comply with legal obligations

We do not sell, rent, or share your information with advertisers, data brokers, or third parties for marketing purposes.

3. Third-Party Service Providers

We use the following third-party services to operate the Service:

• Supabase (database and authentication) — stores your account information and call transcripts in encrypted form
• Anthropic (AI analysis) — processes call transcripts to generate coaching analysis; transcript content is sent to Anthropic’s Claude API
• Vercel (hosting) — hosts the web application

Each of these providers has its own privacy practices and may process data on our behalf. We have selected providers that maintain industry-standard security and privacy protections.

Transcripts you submit are processed by Anthropic’s Claude API to generate analysis. Anthropic processes this data according to its own commercial terms and privacy policy.

4. Access Controls

The Service uses role-based access controls:

• Virtual assistants can only see their own uploaded calls
• Client owners can only see calls from virtual assistants assigned to their business
• Managers can see all calls across all virtual assistants and clients in their organization

We enforce these controls at the database level using row-level security.

5. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. If you wish to have your data deleted, contact us at the address below and we will delete your account and associated data within 30 days, subject to any legal retention requirements.

6. Security

We protect your data through:

• HTTPS encryption for all data in transit
• Encrypted storage of passwords and sensitive data at rest
• Row-level database security to enforce access controls
• Limited employee access to production systems

No system is perfectly secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of certain data uses
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us using the information in Section 11.

8. Children’s Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

9. International Users

The Service is operated from the United States. If you access it from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. Material changes will be communicated to account holders directly.

11. Contact

For questions about this Privacy Policy or to exercise your rights, contact: