Privacy Policy
Learn how we collect, use, and protect your personal information when you use our AI Readiness Assessment.
Effective Date: January 1, 2024
Last Updated: 7/16/2025
1. Introduction
SimpleXA ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Readiness Assessment tool ("Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide when using our Assessment tool:
- Contact Information: First name, last name, business email address
- Professional Information: Position level, organization name
- Organizational Data: Company size, industry vertical, geographic footprint
- Assessment Responses: All answers provided during the assessment process
2.2 Technical Information
We automatically collect certain technical information when you access our Service:
- Device Information: Browser type, operating system, device identifiers
- Usage Data: IP address, access times, pages viewed, time spent on pages
- Session Data: Assessment progress, form interactions, completion status
- Cookies and Local Storage: Data stored to maintain session state and preferences
3. How We Use Your Information
We use the information we collect for the following purposes:
- Assessment Processing: To calculate scores, generate benchmarks, and create personalized recommendations
- Report Generation: To create and deliver customized AI readiness reports
- Service Improvement: To analyze usage patterns and enhance the assessment tool
- Communication: To respond to inquiries and provide customer support
- Research and Analytics: To develop industry insights and improve our methodology (using aggregated, anonymized data only)
- Legal Compliance: To comply with applicable laws and regulations
4. Information Sharing and Disclosure
4.1 General Policy
We do not sell, trade, or otherwise transfer your personal information to third parties without your explicit consent, except as described in this Privacy Policy.
4.2 Permitted Disclosures
We may share your information in the following limited circumstances:
- Service Providers: With trusted third-party vendors who assist in operating our Service (subject to strict confidentiality agreements)
- Legal Requirements: When required by law, court order, or government request
- Business Protection: To protect our rights, property, or safety, or that of our users
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice to users)
- Aggregated Data: Anonymized, aggregated statistics for research and industry analysis
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption: Data transmitted between your browser and our servers is encrypted using SSL/TLS
- Access Controls: Strict access controls limit who can view your information
- Data Minimization: We collect only the information necessary for the assessment
- Regular Audits: Periodic security assessments and vulnerability testing
- Incident Response: Procedures in place to respond to potential security breaches
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Assessment Data: Retained for up to 2 years to allow for report regeneration and follow-up assessments
- Contact Information: Maintained while you have an active relationship with SimpleXA
- Technical Data: Automatically deleted after 12 months unless required for security purposes
- Legal Hold: Data subject to legal requirements may be retained longer as required by law
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information we hold
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal limitations)
- Portability: Request a copy of your data in a machine-readable format
- Objection: Object to certain types of processing of your information
- Restriction: Request restriction of processing under certain circumstances
To exercise these rights, please contact us using the information provided in Section 10.
8. International Data Transfers
If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our Service, you consent to the transfer of information to the United States, which may have different data protection laws than your jurisdiction.
9. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will:
- Post the updated Privacy Policy on this page
- Update the "Last Updated" date
- Notify users of material changes via email or prominent notice on our Service
Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.
11. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us: