Effective Date: January 1, 2026
We collect information you provide when creating an account, including your name, company name, and email address. When individuals complete an assessment, we collect their assessment responses and the behavioral profile derived from those responses. We collect standard usage data including log files, browser type, and pages visited.
Account information is used to provide, maintain, and improve the Platform. Assessment data is used to generate behavioral profiles and reports for the individual and their tenant organization. We do not sell, rent, or share personal data with third parties for marketing purposes. We do not use assessment data to train AI models or for any purpose beyond service delivery.
Behavioral assessment results are sensitive information. Access to individual results is limited to the individual who completed the assessment and designated administrators within their tenant organization. Assessment data is never shared between tenants. Administrators are contractually prohibited from using assessment data in employment decisions.
Observer assessments collect behavioral ratings provided by colleagues about another individual. This data is stored with the same protections as self-assessment results. Observer results are accessible only to tenant administrators and the individual being assessed. The specific ratings provided by individual observers are not attributed or disclosed to the person being assessed. Observer data is used solely to generate comparative insight reports and is never shared between tenants or used for any other purpose.
Each tenant organization's data is stored and accessed in isolation. Our database architecture enforces tenant separation at the row level. No tenant can access another tenant's data under any circumstances.
We use Supabase for database and authentication services, Resend for transactional email delivery, and Anthropic's Claude API for AI-assisted report generation and behavioral pattern analysis. Each of these providers processes only the minimum data necessary to deliver the service and is bound by their own privacy policies and data processing agreements.
Two features use Anthropic's Claude API. Individual report generation transmits a first name and behavioral scores only. No other personally identifiable information is included. Performance pattern analysis transmits anonymized behavioral scores alongside objective performance metrics, with all names replaced by anonymous identifiers before transmission. In both cases, Anthropic does not retain or learn from submitted data between sessions.
Account and assessment data is retained for the duration of your subscription and for 30 days following account termination, after which it is permanently deleted. You may request deletion of your data at any time by contacting us.
You have the right to access, correct, or delete your personal data. Assessment participants may request a copy of their behavioral profile at any time. To exercise these rights, contact privacy@actqassessment.com. We will respond within 30 days.
We implement industry-standard security practices including encrypted data storage, secure HTTPS connections, authentication controls, and row-level database security. We conduct regular security reviews and promptly address any identified vulnerabilities.
The Platform is intended for professional workplace use and is not directed at individuals under the age of 18. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice in the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.
Questions about this Privacy Policy or your data may be directed to privacy@actqassessment.com.