Privacy

1. Information We Collect

We collect information that you provide directly to us and information automatically collected when you use our website.

Information You Provide:

• Name and email address (when you subscribe to our newsletter or contact us)
• Company information and professional details (when engaging our services)
• Account information (such as name, email, and login credentials) when you create an account for The Organizational X-Ray™
• Enterprise diagnostic inputs (when your organization uses The Organizational X-Ray™), including organizational metrics, team structures, friction indicators, milestone targets, and timeline data
• Communications with us via email or other channels
• Any other information you choose to provide

Automatically Collected Information:

• Browser type and device information
• IP address and general location data
• Pages visited and time spent on our site
• Referring website or source

2. How We Use Your Information

We use the information we collect to:

• Deliver our newsletter and communications you've requested
• Respond to your inquiries and provide customer service
• Deliver consulting services under engagement agreements
• Generate diagnostic results and reports for organizations using The Organizational X-Ray™
• Improve our website and services
• Send relevant business updates and thought leadership content
• Comply with legal obligations

3. Information Sharing

We do not sell or rent your personal information to third parties. We may share information only in the following circumstances:

• Service Providers: We use trusted third-party services (such as Substack for newsletter delivery, Stripe for payment processing, and AI providers that support our diagnostic analysis) that process data on our behalf
• Legal Requirements: We may disclose information when required by law or to protect our rights
• Business Transfers: In the event of a merger or sale, your information may be transferred to the acquiring entity

4. The Organizational X-Ray™ and Enterprise Diagnostic Data

When your organization uses The Organizational X-Ray™, we collect information about how your organization operates. This includes team structures, workflow and time allocation data, decision timelines, friction indicators, and milestone plans ("Enterprise Diagnostic Data").

• How we use it:We use Enterprise Diagnostic Data to generate your organization's diagnostic results, reports, and recommendations.
• Client separation:Each client's Enterprise Diagnostic Data is kept separate and is not visible to other clients.
• De-identified benchmarking: We may combine Enterprise Diagnostic Data across clients to build benchmarks and identify trends. Before combining it, we remove personal information (such as names and email addresses) and company-identifying details, and we convert specific figures into ranges or categories. Benchmarks are reported only in aggregate and do not identify any individual or client.
• What not to submit: Please do not submit trade secrets, nonpublic financial information, source code, or other highly confidential material. The Organizational X-Ray™ focuses on operational patterns, and we do not knowingly collect this type of material.
• AI processing: We use AI service providers to help analyze Enterprise Diagnostic Data and generate results. These providers process data under commercial terms that prohibit using it to train their models. We do not sell, rent, or license Enterprise Diagnostic Data, and we do not use it to train public or shared AI models.

5. Newsletter and Email Communications

When you subscribe to our newsletter, your email address is stored and managed through Substack. You may unsubscribe at any time using the link at the bottom of each email. Even after unsubscribing from marketing communications, we may still send you service-related messages if you're a client.

6. Cookies and Tracking

We use cookies and similar technologies to understand how visitors use our website. These help us improve site performance and user experience. You can control cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.

7. Data Security

We implement reasonable security measures to protect your information from unauthorized access, alteration, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Newsletter subscribers' information is retained until they unsubscribe. Client information, including Enterprise Diagnostic Data, is retained according to engagement agreements and applicable legal requirements. De-identified benchmark data may be retained after an engagement ends.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Opt out of marketing communications
• Object to processing of your information in certain circumstances

To exercise these rights, contact us at info@velocityco.io.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from children.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies.

12. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where we or our service providers operate. By using our services, you consent to such transfers.

13. Changes to This Policy

We may update this privacy policy periodically. Changes will be posted on this page with a revised date. We encourage you to review this policy regularly.

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.