PRIVACY · LAST UPDATED SEPTEMBER 2026
Privacy Policy
1. Information We Collect
We collect information you provide directly when creating an account, including your name, email address, organization or institution, and professional or academic role. When you complete EQ assessments, training modules, tabletop simulations, daily challenges, and 360° feedback, we collect your responses, scores, and completion data to generate your development profile. When you write in the journal or talk to the EQ Coach, we store that text.
If you subscribe, our payment processor collects your payment details; we store only a customer reference, the plan, and invoice records — never card numbers. If you launch the platform from your institution's learning management system (LMS), the LMS sends us your name, email, role, and course so we can sign you in and post grades back.
We also collect standard usage data such as browser type, IP address, and pages visited to keep the platform secure and improve it, and we keep an audit log of administrative actions.
2. How We Use Your Information
Your assessment and training data are used to generate personalized EQ scores, development recommendations, progress reports, certifications, and the weekly digest email. Aggregated, de-identified data may be used to improve our assessment instruments and training content, and to report on program outcomes.
We do not sell your personal information. We use it to run the platform, to send the emails you would expect (invitations, reminders, receipts, the weekly digest, platform announcements), and to respond when you contact support.
3. Who Can See Your Results
The platform is built for teams and classes, so some people you work or study with can see your results. In an organization, your manager (the lead of your team) and your organization's administrators can see your individual EQ scores, assessment status, training completion, and 360° feedback summaries, and can assign assessments to you. Organization-wide analytics are visible to org admins and HR admins.
In a course, your professor can see your scores, module progress, simulation results, assignments, and the journal entries you have not marked private; private journal entries are never visible to instructors. Program administrators at your institution see outcomes across courses. Research exports are de-identified: aggregate scores and metadata only, with participant identifiers salted per export, and never journal text.
A public portfolio link, if you choose to create one, shows your scores and growth to anyone who has the link — never your journal — and you can revoke it at any time. Leaderboards show your display name and XP to other members of your organization or course.
4. Service Providers
We rely on a small number of processors to run the platform, each bound by its own data-processing terms: Supabase (database, authentication, and file storage), Vercel (application hosting and scheduled jobs), Stripe (payments, subscriptions, and invoices), Resend (transactional email delivery and delivery analytics such as opens and bounces), and Anthropic (the EQ Coach and assessment analysis).
When you use the EQ Coach or request an AI analysis of an assessment, we send Anthropic your assessment scores, the journal reflections and practice history the coach draws on, and the messages you write to the coach, so it can respond in context. Anthropic processes this to generate the response and, under its commercial API terms, does not train its models on it. If you would rather the coach never see your journal, you can decline to use it; the rest of the platform works without it.
If your institution connects its LMS, that LMS is a processor on your institution's side and receives your module scores for its gradebook.
5. Data Security
All data is encrypted in transit using TLS 1.2 or higher and at rest by our hosting providers. Access to personal data is restricted to authorized personnel on a need-to-know basis, and administrative actions are recorded in an audit log.
Authorization is enforced at the database with row-level security policies, so users can only read data they are permitted to see. You can enable two-factor authentication with an authenticator app under Settings → Security, and we recommend that every administrator does.
6. Free Trial Data
When you redeem a free trial code you accept, on the redemption page, that your assessment answers and scores, training progress, tabletop scenario decisions and EQ Coach conversations from the trial may be used in de-identified form to improve the platform and to train its models. De-identified means your name, email address and any other identifier are removed first; nothing is published or shared in a form that identifies you. The consent you accepted, and its version, are recorded with your trial membership.
You can delete your account at any time from Settings › Account, which removes your personal data as described under Your Rights. Trial access ends on the date shown when you redeem the code; what you did during the trial stays with your account until you delete it.
7. Data Retention
We retain your account data, assessment history, journal, and progress for as long as your account exists. A weekly job deletes AI coaching transcripts and assessment coaching analyses 365 days after they are created, and records of sent email, email delivery events, and job logs after 90 days. We do not delete inactive accounts automatically. When we delete an account, we remove your profile, results, journal, progress, and portfolio. Invoices and payment records are retained by Stripe for the period the law requires, and de-identified aggregate statistics are unaffected.
Organizations and institutions may have their own retention policies that apply to data collected through their accounts; an organization that is deleted takes its members' organizational data with it.
8. Your Rights
You can correct your name and profile details at any time from your profile. Settings › Account lets you download a complete export of your data as one JSON file and delete your account yourself; the deletion is immediate. If something prevents self-serve deletion (for example you are the only admin of an organization that still has members), the reason is shown, and you can contact support from the email address on your account; we complete such requests within 30 days.
If you are located in the European Union or the United Kingdom, you have additional rights under the GDPR, including the right to data portability, the right to restrict processing, and the right to object to automated decision-making. EQ scores and coach responses are development tools; no decision with legal or similarly significant effect on you is made by the platform automatically.
9. Changes to This Policy
When we change this policy in a way that matters — a new processor, a new category of data, a change to who can see what — we update the date below and announce it in the platform. Continued use after the change means you accept the updated policy.
10. Contact Us
If you have questions or concerns about this privacy policy or our data practices, please contact our privacy team at privacy@i-2.ca. We will respond to all inquiries within 30 days.
