Privacy Policy

Last updated: April 2026

Vantage Group (“Company,” “we,” “us”) operates the Axis platform. This Privacy Policy explains how we collect, use, and protect information when you use our service.

1. Scope

This Privacy Policy applies to information processed through the Axis platform, including data submitted by customers (“Clients”) and data related to candidates assessed through the platform.

2. Roles and Responsibilities (DPA Alignment)

For purposes of data protection laws:

• The Client is the Data Controller
• Vantage Group is the Data Processor

We process personal data solely on behalf of the Client and in accordance with their instructions, except as required by law.

3. Information We Collect

Account Information: Name, email address, company or dealership name.

Candidate Data (Submitted by Client): Candidate name and contact details (if provided), assessment responses and related inputs.

Usage Data: IP address, device and browser information, pages visited, timestamps, and interaction data.

Payment Data: Payment information is processed securely through Stripe. We do not store full payment card details.

4. How We Use Information

We use information to:

• Operate and provide the Axis platform
• Process and analyze assessment data
• Generate reports and outputs
• Process payments and manage accounts
• Send transactional and service-related communications
• Monitor security, performance, and usage
• Improve platform functionality

We do not sell personal data.

5. Client Responsibilities

Clients are solely responsible for obtaining all necessary consents and permissions from candidates, providing required disclosures to candidates, and ensuring compliance with applicable employment and data protection laws.

We do not independently verify candidate consent and are not responsible for how Clients collect or use data.

6. Data Sharing and Subprocessors

We do not sell or rent personal data. We may share data only:

• With service providers necessary to operate the platform (e.g., payment processing, hosting, infrastructure)
• With authorized users within the Client’s organization
• When required by law or to protect legal rights

All subprocessors are required to handle data under appropriate confidentiality and security obligations.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect data. However, no method of transmission or storage is completely secure. You acknowledge that use of the platform is at your own risk.

8. Data Retention

We retain data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. We may retain anonymized or aggregated data for analytics and system improvement.

9. Audit Logs and Monitoring

We may collect and maintain system logs, access records, and usage data for security monitoring, fraud prevention, system performance, and compliance and dispute resolution. We are not obligated to retain logs for any specific duration unless required by law.

10. Data Subject Rights

Clients are responsible for handling requests from individuals regarding their personal data, including access, correction, and deletion. We will provide reasonable assistance where required and technically feasible.

11. Data Breach Notification

In the event of a confirmed data breach affecting Client data, we will notify the Client within a reasonable timeframe after becoming aware of the breach.

12. International Data Transfers

Data may be processed in the United States and other jurisdictions as necessary to operate the platform. By using Axis, you consent to such transfers.

13. No Guarantee of Legal Compliance

Vantage Group does not guarantee that use of Axis satisfies any legal requirements related to employment screening, hiring practices, or data protection laws. Clients are solely responsible for ensuring compliance with all applicable laws.

14. Your Privacy Rights (California and New York)

California Residents (CCPA/CPRA)

If you are a California resident, you may have the following rights:

• Right to know what personal information is collected, used, disclosed, or shared
• Right to access your personal information
• Right to request deletion of your personal information
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information (if applicable)
• Right to non-discrimination for exercising your rights

Controller vs Processor Note: Axis is a business-to-business platform. In most cases, the Client (your employer or the company using Axis) is the Data Controller and Vantage Group acts as a Service Provider / Data Processor. If your data was submitted by a Client, you should direct your request to that Client first. We will assist where required and technically feasible.

Do Not Sell or Share: We do not sell or share personal information as defined under California law.

New York Residents: While New York does not have a single comprehensive privacy law equivalent to California, we implement reasonable safeguards to protect personal information, limit use of data to the purposes described in this policy, and do not sell personal data.

How to Submit a Request: To submit a privacy request, contact info@thevantagegroupco.co. We may need to verify your identity before processing your request. Where we act as a Data Processor, we may direct your request to the appropriate Client or assist them in responding.

15. Changes to This Policy

We may update this Privacy Policy at any time. Continued use of the platform constitutes acceptance of any updates.

16. Contact

For privacy-related questions, contact: info@thevantagegroupco.co