1. Introduction
IQExit ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Exit Readiness Report service ("Service").
Please read this policy carefully. If you do not agree with our policies and practices, do not use the Service.
2. Information We Collect
2.1 Information You Provide
Account Information
- Name
- Email address
- Authentication credentials (via Auth0)
Business Information (for Reports)
- Business name and website
- Annual revenue and EBITDA
- Industry/NAICS code
- Number of employees
- Property ownership status
- Property address (if applicable)
- Business objectives and intents
2.2 Information Collected Automatically
Usage Data
- Pages visited and features used
- Report generation history
- Session duration and timestamps
- IP address
Device Information
- Browser type and version
- Operating system
- Device identifiers
2.3 Information from Third Parties
Auth0 - Authentication tokens and profile information from Google OAuth (if used)
Website Analysis - When you provide a website URL, we may fetch publicly available information to enhance your report
3. How We Use Your Information
3.1 Provide the Service
- Generate Exit Readiness Reports
- Store and manage your reports
- Process your requests and transactions
- Send service-related communications
3.2 Improve the Service
- Analyze usage patterns
- Debug and fix issues
- Develop new features
- Conduct research and analysis
3.3 Ensure Security
- Detect and prevent fraud
- Enforce our Terms of Service
- Comply with legal obligations
4. How We Share Your Information
We do not sell your personal information.
We may share information with:
4.1 Service Providers
| Provider | Purpose |
|---|---|
| Anthropic | AI processing for report generation |
| Render | Cloud hosting infrastructure |
| Auth0 | Authentication services |
| AWS | Email delivery (SES) |
| PostgreSQL | Database hosting (via Render) |
4.2 Legal Requirements
We may disclose information if required by law, legal process, or government request.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Retention
- Account Data: Retained for as long as your account is active
- Report Data: Retained indefinitely unless you request deletion
- Usage Logs: Retained for up to 24 months
You may request deletion of your data by contacting privacy@iqexit.com. We will respond within 30 days.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (HTTPS/TLS)
- Encrypted database connections
- Secure authentication via Auth0
- Access controls and audit logging
- Regular security reviews
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request a copy of your data in a portable format
- Objection: Object to processing of your data for certain purposes
- Withdraw Consent: Withdraw consent at any time
To exercise these rights, contact privacy@iqexit.com.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to Know: What personal information we collect and how it's used
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
9. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), we process your data based on:
- Contract: To provide the Service you requested
- Legitimate Interests: For security, fraud prevention, and service improvement
- Consent: For marketing communications
Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers.
10. Cookies
| Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, security | Session |
| Functional | Preferences, settings | 1 year |
| Analytics | Usage statistics | 2 years |
You can control cookies through your browser settings. Disabling cookies may affect functionality.
11. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on the Service. The "Last Updated" date indicates when changes were made.
13. Contact Us
For questions or concerns about this Privacy Policy:
Email: privacy@iqexit.com
Website: https://iqexit.com
For data subject access requests, please include "DSAR" in the subject line.
By using IQExit, you acknowledge that you have read and understood this Privacy Policy.