Privacy Policy

2. Positioned4Success™ Privacy Policy

This Privacy Policy explains how POSITION Consultants, LLC ("POSITION," "Positioned4Success," "P4S," "we," "us," or "our") collects, uses, discloses, protects, and retains personal information in connection with Positioned4Success™. It applies to our public website, platform, assessments, coaching-related technology, integrations, AI-enabled features, support, and related Services unless a different notice applies.

1. Roles and enterprise programs

When an organization sponsors a Positioned4Success program, privacy roles may vary by activity and contract. POSITION may process certain information on the Customer’s behalf to deliver the contracted program and may independently determine purposes for information necessary to operate, secure, administer, bill, support, comply with law, and improve the Services. Applicable enterprise agreements and data-processing terms may further define these roles.

2. Information we collect

 Account and profile information: name, business email, telephone number, organization, role, leadership level, time zone, preferences, authentication and account information.  Program and enrollment information: organization, program, cohort, invitations, enrollment status, completion status, coaching engagement, assigned coach, session scheduling and participation metadata.  Assessment information: responses, scores, dimensions, leadership-effectiveness results, Leadership Style Profile results, Strengths & Drivers results, reassessments, and authorized interpretations.  360 feedback information: self and reviewer responses, reviewer relationship category, Current Performance, Desired Performance — 12 Months, aggregated rater results, and derived developmental gaps or perception differences.  Development information: development priorities, goals, success evidence, behavioral experiments, action items, progress pulses, and participant-entered development content.  Coaching information: scheduling and engagement records, authorized development-plan information, and other information necessary to deliver coaching. Confidential coach notes, private reflections, and private communications are subject to additional access restrictions.  Strategy Consultant information: prompts, authorized organizational context, generated analyses, saved strategy sessions, and related outputs.  Contact and marketing information: information submitted through contact, demo, inquiry, or communication forms, including email/telephone consent choices.  Integration information: authorization credentials/tokens and the limited calendar or meeting information needed to provide integrations you choose to connect.  Billing and transaction information: customer, invoice, payment-status, and transaction-administration information. Payment services such as BILL may independently process financial/payment information under their own notices.  Technical and security information: IP address, device/browser information, timestamps, log data, authentication events, audit records, and information used to protect and troubleshoot the Services.  Cookies and similar technologies: information described in our Cookie & Tracking Notice.

3. How we use information

 Provide, administer, personalize, and support the Services and Customer programs.  Calculate assessment results using deterministic scoring logic and display authorized reports.  Facilitate coach matching, scheduling, coaching engagements, development planning, behavioral practice, progress measurement, and reassessment.

 Generate authorized AI-assisted developmental and organizational insights, subject to our AI Transparency Notice.  Provide group-level organizational analytics and Strategy Consultant functionality where permitted.  Authenticate users, enforce role-based access, secure the platform, detect misuse, troubleshoot, maintain audit records, and protect legal rights.  Operate Zoom, Google Calendar, and Microsoft Outlook Calendar integrations enabled by users.  Process inquiries, provide support, administer contracts/invoices, and communicate about Services.  Comply with law, enforce agreements, investigate claims, and establish, exercise, or defend legal rights.  Create aggregated or de-identified information for legitimate analytics, service improvement, research, psychometric evaluation, security, and future benchmarking when methodologically appropriate.

4. Role-based access and employer visibility

Positioned4Success is designed around role-based access. Members access their own authorized development information. Coaches access information necessary for participants assigned to them, subject to confidentiality controls. HR/Program Administrators receive authorized program and group-level information and do not receive individual assessment results, confidential coaching notes, private participant reflections, coach hypotheses, private messages, or confidential coaching conversations through standard P4S reporting. POSITION Super Admin access is limited to authorized operational, support, security, and administrative needs. Where a Customer requests a materially different data-sharing configuration, POSITION will require an appropriate contractual and product review before enabling it.

5. AI and automated features

P4S uses third-party AI service providers to assist with developmental interpretation, summaries, questions, behavioral experiments, organizational analysis, and Strategy Consultant outputs. AI-generated content is advisory and may be inaccurate. Authoritative assessment scores are calculated through deterministic application logic, not by generative AI. P4S does not authorize AI to make hiring, firing, promotion, compensation, discipline, or other employment decisions. Customer information submitted through AI features is processed to provide the requested functionality and is not used by POSITION to train general-purpose AI models.

6. Calendar and meeting integrations

If you connect Google Calendar, Microsoft Outlook Calendar, or Zoom, we access and use only information permitted by the authorization you grant and reasonably necessary for enabled scheduling or meeting functionality. Requested permissions are displayed during authorization and are limited to those needed for the enabled features. You may disconnect an integration through available account settings and/or the third-party provider.

7. Google API data

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements. We use Google Calendar data only to provide or improve user-facing calendar and scheduling features that you authorize. We do not use Google user data for advertising, sell it, or use it for unrelated purposes. We do not allow humans to read Google user data except where necessary with user consent, for security/abuse investigation, to comply with law, or where the data has been aggregated and anonymized for internal operations as permitted by Google policy.

8. Zoom data

For connected Zoom accounts, P4S may receive account/authorization information and meeting information necessary to create or manage eligible coaching meetings. Unless separately disclosed and enabled, P4S does not use the Zoom integration to retrieve or analyze meeting audio, video, cloud recordings, transcripts, or Zoom AI Companion content. We do not sell or rent Zoom Personal User Data, use it to create advertising profiles, or use Zoom Customer Content to train general-purpose AI models. Additional details appear in our Zoom Integration Documentation.

9. Microsoft data

For connected Microsoft accounts, P4S uses Microsoft Graph permissions only as needed for the calendar/scheduling features the user or administrator authorizes. We seek to follow least-privilege principles. The exact permissions presented during Microsoft consent control the access granted.

10. How we disclose information

We may disclose personal information to: (a) the Customer sponsoring the program, only within authorized role/access boundaries; (b) assigned coaches and authorized service personnel; (c) infrastructure, hosting, AI, communications, scheduling, billing, security, and integration providers acting for legitimate service purposes; (d) professional advisers; (e) authorities or other parties when required by law or reasonably necessary to protect rights, safety, security, or prevent fraud; and (f) parties to a merger, financing, reorganization, acquisition, or sale of all or part of the business, subject to appropriate safeguards. We may disclose aggregated or de-identified information that is not reasonably linkable to an individual.

11. We do not sell personal information

P4S is not designed to sell personal information or use personal information for cross-context behavioral advertising. If our practices materially change, we will update this Policy and provide legally required notices and choices before applying the new practice.

12. Data storage and security

Production data is stored with third-party cloud infrastructure providers using safeguards designed to protect data in transit and at rest. We use role-based access controls and application-level permissions designed to restrict users to information appropriate for their role. No security method is perfect, and we cannot guarantee absolute security. Users and Customers are responsible for protecting credentials and promptly reporting suspected compromise.

13. Retention

Our current platform does not automatically delete all categories of data after a fixed period. Contact inquiries and autosaved drafts may remain until deleted by authorized personnel. Saved Strategy Consultant sessions may remain until the user deletes them or they are otherwise removed by authorized administration. Other program, assessment, coaching, account, audit, contractual, billing, and integration records are retained for as long as reasonably necessary for the purposes described in this Policy, to provide contracted Services, comply with legal/accounting obligations, resolve disputes, enforce agreements, maintain security and continuity, support research or psychometric evaluation where permitted, or as otherwise directed by an authorized Customer. We may retain de-identified information and legally required records after deletion of active account data. See the Data Retention & Deletion Policy for additional detail.

14. Privacy rights

Depending on applicable law and context, individuals may have rights to request access, correction, deletion, portability, information about processing, withdrawal of consent, or other rights. Certain state consumer privacy laws may not apply to data processed solely in an employment context, but P4S may provide contractual or product-level

privacy controls beyond minimum statutory requirements. Submit requests to privacy@thepositionforsuccess.com or through our Privacy Rights page. We may verify identity and authority before acting. Authorized agents may be required to provide proof of authority. Where required, we will provide an appeal process for denied requests.

15. Maryland privacy notice

Where the Maryland Online Data Privacy Act applies, Maryland consumers may have rights including to know/access, correct, delete, obtain a portable copy, and opt out of certain sales, targeted advertising, or qualifying profiling. P4S does not currently sell personal data or use it for targeted advertising. Requests may be submitted through the Privacy Rights page or privacy@thepositionforsuccess.com. We will not unlawfully discriminate against a person for exercising applicable rights.

16. GDPR-conscious practices and U.S. availability

P4S is currently offered for U.S.-based use. We nevertheless design privacy practices with principles such as transparency, purpose limitation, data minimization, access controls, and data-subject rights in mind. This statement is not a representation that every feature or contract is certified or universally compliant with the GDPR. If POSITION intentionally expands service to individuals in the European Economic Area, United Kingdom, or another jurisdiction requiring additional mechanisms, we will implement appropriate notices, contractual terms, transfer mechanisms, and rights processes before or in connection with that expansion.

17. Cookies and analytics

The public website and application use essential cookies and similar technologies for authentication, security, preferences, and core operation. Our Cookie & Tracking Notice describes current uses and available choices.

18. Children

The Services are not directed to children under 18, and we do not knowingly offer P4S leadership-development programs to children. If you believe a child has provided personal information, contact privacy@thepositionforsuccess.com.

19. Changes to this Policy

We may update this Policy to reflect changes in the Services, law, or our practices. We will post the revised version with an updated effective date and provide additional notice or consent where required.

20. Contact

POSITION Consultants, LLC 2886 Sandy Plains Road, Unit 669774 Marietta, GA 30066, United States (800) 460-9524 privacy@thepositionforsuccess.com support@thepositionforsuccess.com