Skip to main content
Looking for your coaching portal? Sign in here

Privacy Policy

Effective October 7, 2026

This policy explains what personal information SpikeForge collects, how we use and share it, how long we keep it, and the choices you have.

1. Who we are and what this policy covers

SpikeForge is operated by Auxova LLC, doing business as SpikeForge (“we,” “us”). This policy explains how we handle personal information on spikeforge.com, on the practice websites and portals we host for coaching practices (“Practices”), and in the emails the platform sends.

Two roles. We decide how to use the information of people who visit our website or sign up for and manage a SpikeForge subscription. For information that a Practice and its coaches put into SpikeForge about their clients and prospects (for example client records, session notes and messages), the Practice decides how it is used and we process it on the Practice’s behalf, under our Terms of Service. If you are a client of a Practice, please contact your Practice first with questions or requests about your information; we will help them respond.

2. Information we collect

Account and profile information: name, email address, password (stored only as a secure hash), phone number, city and state, time zone, profile photo, and the role you have in a Practice. Coach profiles can also include a biography, specialties, credentials, availability and rates.

Practice information: the Practice’s name, branding, website content, services, prices and settings.

Coaching records entered by Practices and their users: client profiles and intake answers, enrollments, bookings and sessions, session notes, goals and action items, messages, feedback, files, and engagement indicators that help a Practice notice when a client may need attention.

Inquiries and bookings from prospects: the name, email, phone number and message you submit when you contact a Practice or book a discovery call.

Billing information: card details are entered directly into Stripe and never reach our servers. Stripe collects the billing name, billing address and any tax ID you provide. We store Stripe’s references, subscription and payment status, and the card brand, last four digits and expiry date.

Usage and device information: IP address, browser and device details, pages visited, sign-in and account activity, and server logs. Cloudflare Turnstile collects browser signals to tell people from bots when you submit a public form.

Email delivery information: whether our emails to you were delivered, bounced or reported as spam.

3. How we use information

  • to provide the Service: create accounts, host Practice websites and portals, schedule sessions, and show each user what their role allows;
  • to bill subscriptions and calculate taxes, and, where enabled, to process client payments for Practices;
  • to send service emails, such as invitations, verification and password emails, booking confirmations and reminders, and subscription notices (confirmations, trial-ending reminders and annual renewal reminders);
  • to protect the Service and its users, including preventing fraud, spam and abuse;
  • to understand usage and improve the Service; and
  • to comply with law and enforce our Terms of Service.

4. How we share information

We do not sell personal information, and we do not use it to show you ads. We share it only as follows:

  • Within your Practice: information is visible to the Practice’s users according to their roles. Practice websites show only what the Practice chooses to publish, such as coach profiles.
  • With service providers who run parts of the Service for us under contract, listed below.
  • For legal reasons: when required by law or legal process, or to protect the rights, safety and security of our users, the public or us.
  • In a business transfer: as part of a merger, acquisition or sale of our business, subject to this policy.

Service providers

  • Vercel: Hosting of the website and application, and storage of uploaded files (United States).
  • Neon: Database hosting (United States).
  • Stripe: Payment processing, subscriptions, invoices and sales tax calculation.
  • Resend: Sending account and notification emails, and reporting whether they were delivered.
  • Cloudflare: Turnstile bot protection on public forms such as sign-up, inquiries and booking.
  • Google: Google Analytics, to understand how the site and application are used.

5. Cookies and similar technologies

We use:

  • a sign-in cookie that keeps you signed in for up to 7 days; the Service does not work without it;
  • browser storage (local and session storage) for things like your active role and a sign-up draft, so a canceled checkout can restore the form;
  • Google Analytics cookies, which measure visits and usage; and
  • Cloudflare Turnstile, which may use browser storage when you complete a public form.

You can block or delete cookies in your browser settings, though you will then be unable to sign in. You can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout.

6. How long we keep information

We keep account and Practice information while the account or subscription is active and while a canceled Practice may still reactivate. Sign-in activity records are deleted after 30 days. When an account is deleted, its records are kept for up to seven years for legal, accounting and dispute purposes and then permanently deleted. Billing records are kept for as long as tax and accounting law requires.

A Practice Lead can ask us to delete the Practice’s data sooner at support@spikeforge.com, unless we must keep it for legal reasons.

7. Security

Information is encrypted in transit over HTTPS and hosted with providers that encrypt data at rest. Each Practice’s data is kept separate by row-level security in our database, and each user sees only what their role allows. Payment card details are handled by Stripe. No system is perfectly secure; if a breach affects your personal information, we will notify you and, where applicable, the Practice, as the law requires.

8. Your choices and rights

You can view and update much of your information in your account. You can also ask us to access, correct, delete or provide a copy of your personal information by emailing support@spikeforge.com. Depending on where you live, you may have additional rights under local law, including the right to appeal our decision on a request. We will verify your request and respond within 30 days, or within the time the law requires. We will not discriminate against you for exercising your rights.

If your information is held for a Practice (for example, you are its client), we will refer your request to that Practice or handle it on its instructions.

Service emails about your account, bookings and subscription are part of the Service. Where an email offers notification preferences, you can change them in your account settings.

9. Children

SpikeForge is not directed to children under 13, and we do not knowingly collect personal information from them. Practices must not use SpikeForge for clients under 13. If you believe a child under 13 has given us personal information, contact support@spikeforge.com and we will delete it.

10. Where information is processed

We are based in the United States, and the Service is hosted in the United States. If you use SpikeForge from another country, your information is transferred to and processed in the United States.

11. Changes to this policy

We will post any update on this page with its effective date and, for material changes, notify Practice Leads by email before they take effect.

12. Contact

Auxova LLC, doing business as SpikeForge. Privacy questions and requests: support@spikeforge.com.