Privacy Policy

We collect information you provide directly when creating an account, including your name, email address, organization or institution, and professional or academic role. When you complete EQ assessments, training modules, tabletop simulations, daily challenges, and 360° feedback, we collect your responses, scores, and completion data to generate your development profile. When you write in the journal or talk to the EQ Coach, we store that text.

If you subscribe, our payment processor collects your payment details; we store only a customer reference, the plan, and invoice records — never card numbers. If you launch the platform from your institution's learning management system (LMS), the LMS sends us your name, email, role, and course so we can sign you in and post grades back.

We also collect standard usage data such as browser type, IP address, and pages visited to keep the platform secure and improve it, and we keep an audit log of administrative actions.

Your assessment and training data are used to generate personalized EQ scores, development recommendations, progress reports, certifications, and the weekly digest email. Aggregated, de-identified data may be used to improve our assessment instruments and training content, and to report on program outcomes.

We do not sell your personal information. We use it to run the platform, to send the emails you would expect (invitations, reminders, receipts, the weekly digest, platform announcements), and to respond when you contact support.

The platform is built for teams and classes, so some people you work or study with can see your results. In an organization, your manager (the lead of your team) and your organization's administrators can see your individual EQ scores, assessment status, training completion, and 360° feedback summaries, and can assign assessments to you. Organization-wide analytics are visible to org admins and HR admins.

In a course, your professor can see your scores, module progress, simulation results, assignments, and the journal entries you have not marked private; private journal entries are never visible to instructors. Program administrators at your institution see outcomes across courses. Research exports are de-identified: aggregate scores and metadata only, with participant identifiers salted per export, and never journal text.

A public portfolio link, if you choose to create one, shows your scores and growth to anyone who has the link — never your journal — and you can revoke it at any time. Leaderboards show your display name and XP to other members of your organization or course; you can opt out under Settings.

We rely on a small number of processors to run the platform, each bound by its own data-processing terms: Supabase (database, authentication, and file storage), Vercel (application hosting and scheduled jobs), Stripe (payments, subscriptions, and invoices), Resend (transactional email delivery and delivery analytics such as opens and bounces), and Anthropic (the EQ Coach and assessment analysis).

When you use the EQ Coach or request an AI analysis of an assessment, we send Anthropic your assessment scores, the journal reflections and practice history the coach draws on, and the messages you write to the coach, so it can respond in context. Anthropic processes this to generate the response and, under its commercial API terms, does not train its models on it. If you would rather the coach never see your journal, you can decline to use it; the rest of the platform works without it.

If your institution connects its LMS, that LMS is a processor on your institution's side and receives your module scores for its gradebook.

All data is encrypted in transit using TLS 1.2 or higher and at rest by our hosting providers. Access to personal data is restricted to authorized personnel on a need-to-know basis, and administrative actions are recorded in an audit log.

Authorization is enforced at the database with row-level security policies, so users can only read data they are permitted to see. You can enable two-factor authentication with an authenticator app under Settings → Security, and we recommend that every administrator does.

We retain your account data, assessment history, journal, and progress for as long as your account exists. We do not currently run automated deletion of inactive accounts or data; retention is by request. When we delete an account, we remove your profile, results, journal, progress, and portfolio. Invoices and payment records are retained by Stripe for the period the law requires, email delivery logs are kept for operational purposes, and de-identified aggregate statistics are unaffected.

Organizations and institutions may have their own retention policies that apply to data collected through their accounts; an organization that is deleted takes its members' organizational data with it.

You can correct your name and profile details at any time from your profile. You can request a complete export of your data in a machine-readable format, or ask us to delete your account, from Settings or by contacting support from the email address on your account; we complete these requests within 30 days. Self-serve export and deletion are being completed; until they are, a request to support is the reliable path.

If you are located in the European Union or the United Kingdom, you have additional rights under the GDPR, including the right to data portability, the right to restrict processing, and the right to object to automated decision-making. EQ scores and coach responses are development tools; no decision with legal or similarly significant effect on you is made by the platform automatically.

When we change this policy in a way that matters — a new processor, a new category of data, a change to who can see what — we update the date below and announce it in the platform. Continued use after the change means you accept the updated policy.

If you have questions or concerns about this privacy policy or our data practices, please contact our privacy team at privacy@stoptrainingrobots.com. We will respond to all inquiries within 30 days.