Version 2.0.
This policy explains how Vantyx Partners, LLC ("Vantyx") handles information in the Vantyx Structural Diagnostic Portal and on vantyxpartners.com. Vantyx serves companies in the United States.
Account information: names, business email addresses, company name, website, industry, size band, and country or region.
Survey information: the names, emails, titles, and roles on a roster a CEO provides; survey responses, including written answers; and documents uploaded to the Platform.
Results: scores and reports produced from that information.
Payment information: payment is handled by Stripe. Vantyx receives confirmation of payment and does not receive full card numbers.
Technical information: sign-in and security information needed to run the Platform. When you accept our terms, we record the document, the time, your IP address, your browser details, your email and name where we have it, and your company name as proof of acceptance. The vantyxpartners.com website sets cookies for site operation and visit measurement.
Business contact information: when you request an invitation or we reach out to you, your contact details and our history with you.
We use this information to provide the diagnostic and produce reports, operate and secure the Platform, process payments, send service emails, provide support, and communicate with business contacts. We never sell personal information.
Parts of the analysis, including written survey answers, are processed by an AI service provider under a contract that prohibits it from using them to train its models.
Reports go to the company's CEO. When an investor sponsors a diagnostic, the investor can also see reports and scores. Respondents are anonymous in the report: names are never shown, and answers are never attributed to a person. Written answers may be summarized or quoted without saying who wrote them, after names are removed and with care taken to remove other identifying details. Where several people share a role, their scores are combined. If you are the only person in your role, the score for that role is yours, and your answers may still be identifiable by elimination.
We share information only as needed to run the service, with the providers listed below, or as required by law.
Supabase: database and file storage
Railway: application hosting and processing
Anthropic: AI analysis
Resend: service email
Stripe: payments
HubSpot: business contact records and lifecycle events; no survey answers
Zapier: passes lifecycle events to HubSpot; no survey answers
Lovable: Platform hosting and error reporting
Google: web fonts and company logo lookups
Microsoft 365: business email
We will update this list when providers change.
When a diagnostic is completed, we create an anonymized benchmark record containing diagnostic type, industry, size band, country and region, calendar quarter, selected growth goals, numeric scores, coded patterns with short generated descriptions, and a data quality grade. It contains no name, email address, company name, written survey answer, or identifier assigned to the customer. Benchmark records are part of the service, there is no option to exclude a diagnostic, and they are kept after deletion and after 36 months.
Survey responses, uploaded documents, reports, and scores are kept for 36 months from the date of submission, then deleted. Account information is kept while the account is active and deleted with the account. The record of accepting our terms, meaning the document version, time, IP address, browser details, the email and, where we have it, the name of the person who accepted, and the company name, is kept for 6 years after the account is deleted as proof of what was agreed, then deleted. It is kept apart from survey responses, reports, scores, and benchmark records. Copies in routine backups are overwritten on their normal cycle.
A customer can delete its data inside the Platform where that option is shown, and that deletion takes effect immediately, except for the anonymized benchmark record and the record of accepting our terms. When an investor sponsors a diagnostic, deletion is coordinated with the investor. Anyone can send a request about their information to privacy@vantyxpartners.com, and we will respond to a verified request within 30 days. Marketing emails include an unsubscribe link.
We use commercially reasonable administrative, technical, and physical safeguards. Information is stored in the United States. If we confirm unauthorized access to customer data, including at a service provider, we will notify affected customers without undue delay.
We will post changes here and give email notice of material changes to customers. Contact: privacy@vantyxpartners.com, Vantyx Partners, LLC.