Effective Date: April 1, 2026 · Last Updated: April 1, 2026
Sanctom ("Sanctom," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our platform, or engage with our services (collectively, the "Services"). Please read this policy carefully. By using our Services, you agree to the terms of this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
1. Who We Are
Sanctom operates a member-based community platform that connects individuals with vetted expert coaches to support personal growth and help members navigate difficult life experiences. Sanctom is incorporated in the United States and operates primarily for US-based members.
For questions about this Privacy Policy or our data practices, contact us at: success@sanctom.io
2. Information We Collect
2.1 Information You Provide Directly
When you create an account, subscribe, or use our Services, you may provide:
Account information: name, email address, username, password
Profile information: biographical details, profile photo, personal preferences
Payment information: credit/debit card details, billing address (processed securely through our payment processor — we do not store full card numbers)
Communications: messages, session notes, feedback, support requests, and any other content you submit through our platform
Application data: information provided when applying to join Sanctom as a member, coach, or partner (collected via Fillout forms)
Referral information: if you participate in our referral program (via Partnero)
2.2 Sensitive Information
Because Sanctom's platform is designed to support individuals through challenging life experiences, some information you choose to share — through sessions with Independent Providers, community interactions, or communications — may be sensitive in nature, including information about your mental health, personal relationships, or life circumstances. We treat this information with heightened care and confidentiality. We do not require you to share sensitive information; if you choose to do so, you do so voluntarily.
Please be aware that Independent Providers on the Sanctom platform — particularly licensed mental health professionals, medical professionals, and attorneys — may have independent legal obligations regarding the information shared with them during sessions. These obligations (including professional confidentiality, mandatory reporting requirements, and in certain cases HIPAA) are the responsibility of the individual Provider and are separate from Sanctom's own privacy practices described in this Policy. Sanctom's Privacy Policy governs how Sanctom handles your data; it does not govern the independent obligations of any Provider.
2.3 Information Collected Automatically
When you access our Services, we and our service providers may automatically collect:
Device and browser information: IP address, browser type and version, operating system, device identifiers
Usage data: pages visited, features used, session duration, click and navigation patterns
Cookies and similar tracking technologies: session cookies, persistent cookies, and analytics identifiers (see Section 7 — Cookies)
Scheduling data: appointment and session timing information collected through our scheduling platform (Cal.com)
2.4 Information From Third Parties
We may receive information about you from:
Payment processors (Authorize.Net) and subscription billing platforms (Recurly) for transaction records
Tax compliance services (Avalara) for applicable tax records
Referral partners, if you arrived via a referral link tracked through Partnero
Coaches and community members, where they provide information in the course of platform use
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Providing and Improving Our Services
Creating and managing your account
Matching you with appropriate coaches
Facilitating session scheduling and community participation
Processing payments and managing subscriptions
Providing customer support
Improving platform features, performance, and user experience
3.2 Communications
We use Customer.io as our unified communications platform to send:
Transactional communications: account confirmations, booking confirmations, receipts, security alerts
Service communications: platform updates, policy changes, important notices
Marketing communications: newsletters, coaching resources, member community updates (with your consent where required by law)
Coaching-related communications: session reminders, follow-ups, community activity notifications
You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by updating your notification preferences in your account settings. Transactional communications cannot be opted out of while your account is active.
3.3 Compliance and Safety
Complying with applicable laws and regulations
Enforcing our Terms and Conditions and other policies
Detecting, investigating, and preventing fraudulent or harmful activity
Protecting the rights, property, and safety of Sanctom, our members, coaches, and the public
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Service Providers
We share information with trusted third-party service providers who assist us in operating our platform and delivering our Services. These providers are contractually required to protect your information and may only use it to perform services on our behalf:
Customer.io — email and communications platform
Recurly — subscription billing and management
Authorize.Net — payment gateway and processing
Avalara — tax compliance and calculation
Cal.com — session scheduling
Shopify — merchandise store
Partnero — referral and affiliate program management
Fillout — application and intake forms
Deel — contractor and HR management (for coaches and employees)
Mercury — business banking (internal financial operations only)
Xero — accounting (internal financial operations only)
4.2 Independent Providers
If you book a session or engage with an Independent Provider through the platform, we share your name, contact information, and relevant profile details with that Provider to facilitate the engagement. Independent Providers are independent contractors, not Sanctom employees or agents. They are bound by their own professional and contractual confidentiality obligations. Licensed Providers (such as therapists, physicians, or attorneys) may be subject to professional confidentiality rules and legal obligations independent of and in addition to any agreement with Sanctom.
Sanctom is not responsible for, and does not control, how Independent Providers use information you share with them directly in the context of sessions or communications conducted outside of Sanctom's platform infrastructure.
4.3 Community Interactions and Provider Content
Information you choose to share in Sanctom's community spaces (group discussions, posts, responses) may be visible to other community members and Independent Providers. Please exercise discretion about the personal information you share in community contexts.
Content published by Independent Providers (courses, videos, articles, posts) is third-party content hosted on the platform. Sanctom does not share your personal information with Providers for content publication purposes; however, your interactions with Provider Content (views, purchases, comments) may be visible to the Provider and to other members depending on platform settings.
4.4 Legal Requirements and Safety
We may disclose your information if we believe disclosure is necessary to: (a) comply with applicable law, regulation, or legal process; (b) enforce our Terms and Conditions; (c) protect the rights, property, or safety of Sanctom, our members, or others; or (d) respond to an emergency that we believe requires disclosure to prevent harm.
4.5 Business Transfers
If Sanctom undergoes a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Services if such a transfer results in a material change to how your information is used.
5. Data Retention
We retain your personal information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, and comply with our legal obligations. Specifically:
Active account data is retained for the duration of your membership plus 7 years following account closure
Payment and billing records are retained for a minimum of 7 years to comply with tax and financial record-keeping requirements
Communications and session data are retained for 7 years following the conclusion of a coaching relationship
Marketing communication records are retained until you opt out or request deletion, plus a reasonable period for compliance verification
When your information is no longer required, we will securely delete or anonymize it.
6. Your Rights and Choices
Depending on your location and applicable law, you may have the following rights regarding your personal information:
Access: Request a copy of the personal information we hold about you
Correction: Request that we correct inaccurate or incomplete information
Deletion: Request that we delete your personal information, subject to certain exceptions (e.g., legal compliance, active subscription obligations)
Portability: Request your information in a structured, commonly used, machine-readable format
Opt-out of marketing: Unsubscribe from marketing communications at any time
Account closure: Close your account at any time through your account settings or by contacting us
To exercise any of these rights, contact us at success@sanctom.io. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
7. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) may afford you additional rights, including:
The right to know what personal information we collect, use, disclose, and sell
The right to delete personal information we have collected from you, subject to exceptions
The right to correct inaccurate personal information
The right to opt out of the sale or sharing of your personal information (note: we do not sell personal information)
The right to limit the use and disclosure of sensitive personal information
The right to non-discrimination for exercising your privacy rights
To submit a California privacy rights request, contact us at: success@sanctom.io. You may designate an authorized agent to submit requests on your behalf; we may require verification of your identity and the agent's authorization.
In the preceding 12 months, Sanctom has not sold or shared personal information for cross-context behavioral advertising purposes.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our Services. Cookies are small text files stored on your device. We use:
Essential cookies: Required for the platform to function (authentication, session management, security). These cannot be disabled.
Analytics cookies: Help us understand how members use the platform so we can improve it. Collected data is aggregated and anonymized where possible.
Marketing cookies: Used to deliver relevant communications and measure campaign effectiveness (via Customer.io).
You may control cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core platform, though some personalization features may be limited.
9. Data Security
We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, access controls limiting data access to authorized personnel, and regular security assessments.
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your information, we will notify you in accordance with applicable law.
10. Children's Privacy
Sanctom's Services are intended exclusively for individuals 18 years of age or older. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18. If we learn that we have collected personal information from a minor, we will promptly delete that information and terminate the associated account. If you believe we may have collected information from a minor, please contact us immediately at: success@sanctom.io.
11. Third-Party Links and Services
Our platform may contain links to third-party websites or integrate with third-party services not operated by Sanctom. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you interact with. We are not responsible for the privacy practices or content of third-party services.
12. International Users
Sanctom's Services are operated and directed at users in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using our Services from outside the United States, you consent to the transfer and processing of your information in the United States.
Note: Sanctom does not currently direct its Services to individuals in the European Union or the United Kingdom and does not represent that the platform is compliant with GDPR or UK GDPR at this time. If international expansion is planned, this section must be revised prior to launch in those jurisdictions.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other business reasons. When we make material changes, we will notify you by email (sent to the address on file with your account) and/or by prominently displaying a notice on our platform at least 30 days before the changes take effect.
Your continued use of our Services after the effective date of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy inquiries
success@sanctom.io
SANCTOM · Privacy Policy · Version 1.1 · April 1, 2026