Scope and contact

This notice describes information used by Somatic Training Lab's website and account features. The responsible operator is Somatic Training Lab LLC, St Augustine, FL. Privacy requests may be sent to info@somatictl.com. Effective date: October 27, 2026.

Information the service handles

Depending on the features you use, the service handles your email address, account identifier, profile information and timezone; sign-in and account status; purchased offers and order/refund records; enrollments, lesson progress and playback position; responses to course check-ins or assessments; notification preferences and delivery records; professional applications, relationships, and sharing choices; and records of legal acceptance and privileged account actions. A professional application may contain professional or credential information supplied by the applicant.

Course responses may reveal sensitive information about personal experience or wellbeing. Provide only what is relevant to the feature. Do not put emergency requests or information about other people into course responses. Support messages sent by email are handled separately through the support mailbox.

Hosting, security, email, and media providers may process connection information such as IP addresses, browser details, request times, and delivery information to operate and protect their services. Payment processing is intended to use Stripe when enabled; STL's application is designed to retain order and provider references rather than full payment-card details.

Why information is used

Information is used to authenticate accounts, deliver requested training, preserve enrollment and progress records, provide selected reports and professional-sharing features, process purchases or refunds when enabled, honor communication choices, respond to support requests, investigate misuse, and meet applicable recordkeeping obligations. Assessment responses support the requested training features; they are not represented as a clinical diagnosis.

Providers and storage

The current website uses Supabase for accounts and application data and Vercel for web hosting. Bunny.net provides protected course audio. Google Workspace sends authentication confirmation and password-reset emails for Supabase. Stripe is configured for test checkout; live payments remain disabled. Optional reminder email delivery is not currently verified as operational.

These providers process the information needed for their respective functions. The policy does not promise that information remains solely on your device or within a particular country. The current local website also connects to the hosted account database; using it does not create an offline-only account.

Professional sharing

Your course records are not automatically shared with a professional just because you have an account or follow a referral link. Sharing depends on an accepted relationship, the available professional's verified status, and your current consent for the selected categories. Review the separate Data-Sharing Consent. Revoking consent stops future access through the service within the revoked scope; it cannot retrieve a report already downloaded by an authorized recipient.

Cookies and other uses

The current website uses account/session storage needed for sign-in and security. Course responses are not used for advertising under this notice.

Choices, retention, and deletion

Account settings allow changes to supported profile fields, account-data export, voluntary deactivation, and a request for deletion review. Deactivation limits account access and sharing; it does not automatically erase records. A deletion request is reviewed rather than treated as immediate deletion. Some records may need to remain for completed transactions, disputes, security, legal obligations, or other justified retention purposes; backups may follow a separate lifecycle.

Use supported settings to change optional notifications and sharing. Contact support to request access, correction, deletion, or other privacy rights available where you live. We may need to verify your identity without requesting unnecessary information. Rights, exceptions, and response deadlines depend on applicable law; this notice does not limit rights provided by applicable law.

Security, age scope, and changes

The service uses authenticated access and access controls, but no internet service can promise absolute security. The service is for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can review and address it. Report suspected unauthorized access to support. If legally required, affected people and authorities will be notified of qualifying security incidents. Material changes to this notice will be identified with a new version and effective date.