Privacy Policy

1. DEFINITIONS

"Personal Information" or "Your Information" means information that identifies or could reasonably be used to identify a specific individual, including personally identifiable information ("PII") and any sensitive personal data you voluntarily provide.

"Employer" means any organization or individual registered on the Platform to purchase and use Assessment Links for evaluating Candidates.

"Candidate" means any individual who receives and accesses an Assessment Link for the purpose of completing an Axis assessment.

"Axis" or "AXIS Alignment Index" means the Company's proprietary, trait-based alignment system and all related platform outputs.

"Assessment Link" means a unique, time-limited URL issued to a Candidate for completing an Axis assessment.

"User Content" means any data, materials, or information submitted or uploaded to the Website by any User.

"Aggregated Data" means statistical or demographic data that has been de-identified or anonymized and does not identify any individual.

2. INFORMATION WE COLLECT

Information Provided Directly by You. We collect information you provide when you register for an account, contact us, complete forms, or otherwise interact with the Website or Service. Depending on your role, this may include: your name, email address, phone number, and business contact information; organization name, title, and account credentials (Employers); responses to Axis assessment questions, behavioral data, and trait scores (Candidates); and communications you send to us, including support inquiries.

Information Collected Automatically. When you access or use the Website, we may automatically collect certain technical information, including: IP address, browser type, and operating system; device identifiers and hardware characteristics; pages viewed, session duration, and clickstream data; referring and exit URLs; and date and time of access.

Information from Third Parties. We may receive information from third-party service providers, including Stripe, in connection with payment processing. We do not control the data practices of third-party providers, and their collection and use of your information is governed by their respective privacy policies.

Aggregated Data. We may collect, use, and share Aggregated Data for operational, analytical, and improvement purposes. Aggregated Data does not identify any individual. If we combine Aggregated Data with Personal Information, we will treat the combined data as Personal Information subject to this Privacy Policy.

3. COOKIES, LOG FILES, AND TRACKING TECHNOLOGIES

Cookies. We may use cookies - small data files placed on your device - to facilitate platform functionality, maintain session integrity, and improve your experience. Cookies do not independently contain Personal Information, but may be associated with account data. Types of cookies we may use include Session Cookies (temporary cookies that expire when you close your browser) and Persistent Cookies (cookies that remain for a specified duration to remember your preferences).

Log Files. We automatically collect information through server log files, including IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamps, and clickstream data. This information is used for platform administration, security, and analytics.

Web Beacons. We may use web beacons or tracking pixels to anonymously track usage patterns and measure the effectiveness of communications. These technologies do not collect Personal Information.

Third-Party Analytics. We may engage third-party analytics providers to help understand how Users interact with the Website. These providers may use cookies, log data, and similar technologies, subject to their own privacy policies.

Cookie Controls. You may control the use of cookies through your browser settings. Disabling cookies may limit your access to certain features or areas of the Service.

4. COOKIES WE USE

The following cookies may be used in our Service. Platform cookies include: sb-access-token (Session - Supabase authentication access token), sb-refresh-token (Up to 1 year - Supabase authentication refresh token), sb-auth-token (Session - Supabase session cookie), __session (Session - server-side session identifier for Next.js middleware), next-auth.csrf-token (Session - CSRF protection token), __Secure-next-auth.session-token (30 days - encrypted session token for authenticated users), vercel-analytics-id (1 year - anonymous identifier used by Vercel Analytics), _vercel_insights (Session - Vercel Web Analytics session marker), resend-tracking (Session - set when a transactional email link is clicked), rl_anonymous_id (1 year - anonymous session identifier for analytics), and rl_user_id (1 year - anonymized user identifier for session analytics).

Google Analytics 4 cookies (pending implementation) include: _ga (2 years - primary GA4 identifier), _ga_XXXXXXXXXX (2 years - GA4 session and engagement data), _gid (24 hours - distinguishes individual users), _gat (1 minute - throttles requests to Google Analytics servers), and _gac_XXXXXXXXXX (90 days - campaign-related information for Google Ads integration).

5. HOW WE USE INFORMATION WE COLLECT

We use Personal Information collected through the Website and Service for the following purposes: to create and manage User accounts and authenticate Users; to deliver, operate, and improve the Service and AXIS Alignment Index platform; to process payments through Stripe and maintain transaction records; to generate Placement Reports and deliver them to the appropriate Employer dashboard; to send transactional communications including account notices, security alerts, and administrative messages; to respond to User inquiries and provide customer support; to investigate, detect, and prevent fraudulent, unauthorized, or unlawful activity; to enforce our Terms of Service and other applicable agreements; to comply with applicable laws, regulations, and legal processes; to analyze usage patterns and improve platform functionality and security; and to protect the rights, property, and safety of Vantage Group and its Users.

We will not rent, sell, lease, or trade Your Information to any third party without your express consent, except as described in this Privacy Policy or as required by law.

6. HOW WE SHARE INFORMATION WE COLLECT

Service Providers. We may share information with third-party vendors and service providers engaged to support our business operations, including payment processing (Stripe), hosting, analytics, and technology services. These providers are contractually required to: (a) protect the confidentiality of Your Information consistent with this Privacy Policy; and (b) use Your Information solely for the purpose of performing services on our behalf.

Legal Compliance. We may disclose Your Information if required to do so by law, regulation, court order, or at the direction of a regulatory or governmental authority.

Protection of Rights. We may disclose Your Information to protect the rights, property, or safety of Vantage Group, its Users, or the public, including in connection with enforcement of our Terms of Service.

Business Transactions. In connection with a merger, acquisition, sale of assets, or reorganization involving Vantage Group, your information may be transferred to the successor entity, subject to confidentiality obligations consistent with this Privacy Policy.

With Your Consent. We may share Your Information with your consent or at your direction.

Aggregated Data. We may share Aggregated Data that does not identify any individual for analytical, research, or business purposes.

Law Enforcement Cooperation. The Company cooperates with law enforcement agencies while respecting User privacy. We will review all law enforcement requests for User information to ensure they satisfy applicable legal requirements before releasing any information.

7. CANDIDATE DATA AND EMPLOYER OBLIGATIONS

Employers are solely responsible for the lawful collection and submission of Candidate information into the Platform. Employers must obtain all required consents from Candidates and provide all required disclosures prior to initiating any assessment.

The Company processes Candidate data exclusively for the purpose of delivering the Service to the Employer. The Company does not independently use Candidate data for any other purpose and does not assume responsibility for the Employer's collection, handling, or use of such data.

Placement Reports generated from Candidate assessments are delivered solely to the Employer's dashboard and are treated as confidential output. Employers are responsible for the appropriate handling, storage, and use of Placement Reports in compliance with applicable employment, privacy, and anti-discrimination laws.

Employers shall not submit sensitive personal information - including Social Security numbers, financial account information, or medical data - unless legally authorized and necessary for their specific use case.

Vantage Group does not sell, rent, lease, or otherwise transfer Personal Information or Candidate data to any third party for monetary or other consideration.

8. ROLES AND RESPONSIBILITIES (DPA ALIGNMENT)

For purposes of applicable data protection laws, the Employer acts as the Data Controller with respect to Candidate personal data, and Vantage Group acts as the Data Processor. As Data Processor, Vantage Group processes personal data solely on behalf of the Employer and in accordance with the Employer's instructions, except as otherwise required by applicable law.

Where a Candidate's data was submitted to the Platform by an Employer, the Candidate should direct any data access, correction, or deletion requests to the Employer in the first instance, as the Data Controller. Vantage Group will cooperate with and assist Employers in responding to such requests where required and technically feasible.

9. PAYMENT INFORMATION

All payments on the Website are processed by Stripe, a secure third-party payment processor. Vantage Group does not collect, store, or process payment card data on its servers. Your payment information is transmitted directly to Stripe and is subject to Stripe's privacy policy and terms of service.

We may retain transaction identifiers, purchase history, and account billing records for purposes of account management and legal compliance.

10. DATA SECURITY

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect Your Information against unauthorized access, loss, misuse, or alteration. These measures include data encryption, access controls, and secure server infrastructure.

NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS COMPLETELY SECURE. WE DO NOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR INFORMATION AND DISCLAIM ANY LIABILITY FOR UNAUTHORIZED ACCESS OR SECURITY BREACHES EXCEPT TO THE EXTENT CAUSED SOLELY BY OUR GROSS NEGLIGENCE OR WILLFUL MISCONDUCT.

In the event of a data security incident that may affect your Personal Information, we will take reasonable steps to investigate the incident and, where required by applicable law, provide notification to affected individuals.

11. DATA RETENTION

We retain Personal Information for as long as your account is active or as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Upon termination or deactivation of your account, we will retain your information for a minimum of one (1) year and thereafter for such additional period as required by applicable law or legitimate business necessity.

The Company is not obligated to retain logs or User Content for any specific duration beyond what is required by law. We may delete User Content and account data in accordance with our internal data management practices.

12. CHILDREN'S PRIVACY

The Service is intended for use by business entities and individuals who are at least eighteen (18) years of age. We do not knowingly collect Personal Information from individuals under the age of thirteen (13). If we become aware that we have inadvertently collected Personal Information from a person under the age of thirteen (13), we will take prompt steps to delete such information.

If you believe we have received information from a minor without appropriate consent, please contact us immediately at info@thevantagegroup.co.

13. THIRD-PARTY LINKS AND SERVICES

The Website may contain links to or integrations with third-party websites, applications, or services, including Stripe. These third-party platforms are not operated or controlled by Vantage Group, and this Privacy Policy does not apply to them.

We are not responsible for the privacy practices, terms, or content of any third-party platform. We encourage you to review the privacy policies and terms of service of any third-party service before providing personal information to that service.

14. DO NOT TRACK

Some web browsers offer a "do not track" feature that transmits a signal to websites indicating that you do not wish your online activity to be tracked. There is currently no universally accepted standard for responding to such signals. We do not alter our data collection or use practices in response to do not track signals at this time.

15. YOUR PRIVACY RIGHTS

California Residents. In addition to rights available under California Civil Code Section 1798.83, California residents may have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA): right to know what personal information is collected, used, disclosed, or shared; right to access your personal information; right to request deletion of your personal information; right to correct inaccurate personal information; right to limit the use and disclosure of sensitive personal information (if applicable); and right to non-discrimination for exercising any of the above rights. To submit a request, please contact us using the information in Section 21.

Nevada Residents. We do not sell consumers' covered Personal Information for monetary consideration as defined under Nevada Revised Statutes Chapter 603A. Nevada residents may nonetheless submit a request directing us not to sell their Personal Information by contacting us using the information in Section 21.

Colorado, Connecticut, Virginia, and Utah Residents. Residents of these states may have the following rights under applicable state law: right to access and obtain a copy of your personal data; right to request deletion of personal data provided by or obtained about you; right to correct inaccuracies in your personal data; right to opt out of targeted advertising based on your personal data; and right to opt out of the sale of your personal data to third parties.

Account Corrections and Cancellation. You may update or correct your account information at any time by logging into your account settings or contacting us. Account cancellation requests may be submitted by email. We may retain certain information following cancellation as required by law or for legitimate business purposes.

16. INTERNATIONAL DATA TRANSFERS

Vantage Group operates in and provides the Service from the United States. Personal Information collected through the Platform may be processed, stored, and transferred within the United States and, to the extent required to operate the Platform, to other jurisdictions. Data protection laws in these jurisdictions may differ from, and may not provide the same level of protection as, the laws of your jurisdiction.

By accessing or using the Service, you acknowledge and consent to the transfer, processing, and storage of your Personal Information in the United States and such other jurisdictions as may be necessary to deliver the Service.

17. NO GUARANTEE OF LEGAL COMPLIANCE

Vantage Group does not represent, warrant, or guarantee that use of the Axis platform or the Service satisfies any legal requirements applicable to the Employer, including without limitation requirements related to employment screening, pre-employment testing, equal employment opportunity, anti-discrimination, or data protection laws.

Employers are solely and exclusively responsible for ensuring that their use of the Platform and any Axis outputs complies with all applicable federal, state, and local laws and regulations, including but not limited to the Americans with Disabilities Act (ADA), Title VII of the Civil Rights Act, the Age Discrimination in Employment Act (ADEA), and Equal Employment Opportunity Commission (EEOC) guidelines.

18. PROMOTIONAL COMMUNICATIONS OPT-OUT

You may opt out of receiving promotional or marketing communications from us at any time by following the unsubscribe instructions included in such messages, or by contacting us using the information in Section 21. Opting out of promotional communications does not affect our ability to send you non-promotional messages, such as transactional notices, account alerts, or communications required by law.

19. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. Material changes will be communicated by posting a revised version to the Website with an updated effective date. We may also send notice to Employers via their registered email addresses. Your continued use of the Service following the effective date of any modification constitutes your acceptance of the revised Privacy Policy.

20. GOVERNING LAW

This Privacy Policy is governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law principles. Any disputes arising under this Privacy Policy shall be subject to the dispute resolution provisions set forth in the Vantage Group Terms of Service.

21. ACKNOWLEDGMENT AND CONSENT

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, STORAGE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED HEREIN. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MUST NOT USE THE WEBSITE OR SERVICE.

22. CONTACT INFORMATION

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: