The Element Profile Privacy Policy
1. Overview
This Privacy Policy explains how In Good Company Collective, LLC ("IGC," "we," "us") collects, uses, and protects information in connection with The Element Profile. It applies to two different kinds of people who interact with the platform, and their experience under this policy is not identical, because their relationship to the platform is not identical:
Account holders, who sign up for The Element Profile on behalf of their organization; and
People, who are invited to complete a self-assessment about their own working style.
2. Information We Collect
2.1 From Account Holders
When you create an account, we collect your name, email address, organization name, and billing information (processed by our payment provider, Stripe; we do not store full payment card numbers ourselves).
2.2 About People
An account holder provides a person's name and email when inviting them to complete an assessment. This information is used to send that person their own, unique assessment link and their results once they finish.
2.3 Assessment Responses and Results
When a person completes their assessment, we collect their forced-choice responses to each round, and compute their scores across the six Elements and their resulting archetype from those responses. This is the person's own data about themselves, generated directly from what they submit, not collected from anyone else about them.
2.4 IGC's Own Access
See Section 5.3 of our Terms of Service, which governs when IGC personnel may access the substantive content of Assessment Data. In summary: not in the ordinary course of providing the Service, only with the account holder's explicit permission for troubleshooting, or where legally required.
2.5 Automatically Collected Information
We collect standard technical information such as IP address, browser type, and usage timestamps for security and operational purposes, consistent with typical web application logging.
3. How We Use Information
We use collected information to:
Operate and maintain The Element Profile platform;
Send assessment invitations, results, and related notices;
Generate narrative reports and role comparisons, including through a third-party AI service (see Section 6);
Process payments and manage subscriptions;
Communicate with account holders about their account, including product updates and support;
Comply with legal obligations and enforce our Terms of Service.
We do not sell personal information, and we do not use Assessment Data to train any AI model beyond the immediate generation of the report or comparison it was submitted for.
4. How Long We Keep Information
Assessment Data is retained for the duration of an active account and for 60 days after cancellation, as described in Section 5.4 of our Terms of Service, to allow for account reactivation and data export requests. After that period, it is permanently deleted from active systems.
5. Third-Party Service Providers
The Element Profile relies on the following categories of third-party providers to operate. Each processes a limited slice of information necessary to perform its function, and each is bound by its own data protection terms:
| Provider | Function | Data Involved |
|---|---|---|
| Supabase | Database and authentication | All account and Assessment Data |
| Resend | Transactional email delivery | Email addresses, names |
| Anthropic | AI-generated narratives and comparisons | Archetypes, scores, and job description or role content submitted for a report |
| Stripe | Payment processing | Billing information |
| Railway | Application hosting | All data in transit and at rest on the platform |
6. AI Processing
When a team narrative, a draft target profile, or a role-comparison report is generated, the relevant archetypes, scores, and any job description or role content involved are sent to Anthropic's API to generate that content. This is done under Anthropic's commercial API terms, which do not permit Anthropic to use API data to train its models.
7. Your Rights
Depending on your location, you may have rights to access, correct, or delete personal information we hold about you, or to receive a copy of it in a portable format. Account holders can exercise these rights for their organization's data directly within the platform or by contacting info@ingoodcocollective.com. Individual people with questions about their own information should contact the account holder who invited them, since IGC's relationship for a given Assessment Data set is with the account holder's organization, not directly with individual people.
7.1 Rights Under the GDPR and UK GDPR
If you are located in the European Economic Area or the United Kingdom, you have the following rights with respect to your personal information, subject to the conditions and exceptions set out in the EU General Data Protection Regulation and the UK GDPR:
Right of access. You may obtain confirmation of whether we process your personal information, and a copy of the personal information we hold about you.
Right to rectification. You may request that we correct inaccurate or incomplete personal information about you.
Right to erasure. You may request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purpose it was collected, or when you withdraw consent and no other legal basis for processing applies.
Right to restriction of processing. You may request that we limit how we use your personal information in certain circumstances, such as while a dispute about its accuracy is being resolved.
Right to data portability. Where we process your personal information by automated means on the basis of your consent or a contract with you, you may request a copy of it in a structured, commonly used, machine-readable format, and request that we transmit it to another controller where technically feasible.
Right to object. You may object to our processing of your personal information in certain circumstances, including where we process it on the basis of our legitimate interests.
To exercise any of these rights, contact us at info@ingoodcocollective.com. We will respond within the timeframe required by applicable law, generally within one month of a verified request. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
7.2 Rights Under the CCPA
If you are a California resident, you have the following rights with respect to your personal information, subject to the conditions and exceptions set out in the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"):
Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources of that information, the business or commercial purpose for collecting it, and the categories of third parties with whom we have shared it.
Right to delete. You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law, such as information we need to retain to complete a transaction, detect security incidents, or comply with a legal obligation.
Right to opt out of sale or sharing. We do not sell personal information, and we do not share it for cross-context behavioral advertising. Because we do not engage in either practice, no opt-out mechanism is required beyond this disclosure; we will provide one if that ever changes.
Right to non-discrimination. We will not deny you goods or services, charge you a different price, or provide a different level or quality of service because you exercised any right under the CCPA.
To exercise your right to know or right to delete, contact us at info@ingoodcocollective.com. We will verify your request using the information associated with your account before responding, and will respond within the timeframe required by law.
8. Security
We use industry-standard measures to protect information, including encrypted connections, database-level access controls, and account isolation between organizations using the platform. No system is perfectly secure, and we cannot guarantee absolute security.
9. Children's Privacy
The Element Profile is a workplace tool intended for use by adults in an employment context. It is not directed at, and we do not knowingly collect information from, individuals under 18.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before taking effect.
11. Contact
Questions about this policy can be directed to info@ingoodcocollective.com.