Privacy Policy

1. Introduction

Maturity Intelligence Systems LLC ("Maturity Intelligence," "we," "our," or "us") operates the maturityintelligence.ai website and the Maturity Intelligence platform (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and protect personal information.

We are committed to handling personal information in a manner consistent with applicable privacy laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other applicable data protection regulations.

2. Scope

This policy applies to personal information we collect through:

• Our marketing website at maturityintelligence.ai.
• The Maturity Intelligence platform when accessed by authorized users of a customer organization.
• Email, support, and sales communications.

When you use the Maturity Intelligence platform under a contract with your employer, your employer is the data controller for your personal information processed through the platform. We act as a data processor on their behalf. Our obligations as a processor are governed by a separately executed Data Processing Addendum.

3. Information we collect

Information you provide directly

When you interact with us, for example by requesting access, corresponding with us, or using the platform through your employer, we may collect contact information (such as name and business email), account information, and the content of your communications.

Information collected automatically

When you visit our website or use the platform, we collect standard technical information, including device and browser information, IP address, and interaction logs. This information is used to operate and secure the Services.

We do not use third-party advertising cookies, cross-site tracking, or behavioral advertising technology on our marketing website or platform.

Information from your organization

When your organization uses the platform, it may provide us with organizational data relevant to maturity measurement. How that data is collected, used, retained, and deleted is governed by the contract between Maturity Intelligence and your organization, not by this Privacy Policy.

4. How we use personal information

• To respond to access requests and sales inquiries.
• To provide, operate, secure, and improve the Services.
• To detect, investigate, and prevent fraud, abuse, or security incidents.
• To comply with legal obligations.
• To communicate with you about service updates, security notices, or changes to our policies.

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

5. Legal bases (GDPR)

For individuals in the European Economic Area, United Kingdom, and Switzerland, we process personal information under one or more of the following lawful bases:

• Contract: where processing is necessary to provide the Services to you or your organization.
• Legitimate interests: where processing is necessary for our legitimate interests (such as security and service improvement) and those interests are not overridden by your rights.
• Consent: where you have provided explicit consent for a specific purpose.
• Legal obligation: where we are required to process information by law.

6. Sharing of personal information

We share personal information only with:

• Service providers that provide infrastructure, communication, or analytics services under contract with us and under confidentiality obligations.
• Your organization's administrators where you use the platform under a corporate account.
• Legal and safety recipients where required by law, court order, or to protect the rights and safety of Maturity Intelligence, our customers, or the public.
• Business transfer recipients in the event of a merger, acquisition, or sale of assets, subject to the successor agreeing to uphold this Privacy Policy.

7. International data transfers

Maturity Intelligence is based in the United States and operates its primary infrastructure in the United States. If you access the Services from outside the United States, your personal information may be transferred to and processed in the United States. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) as a transfer mechanism. We will execute the appropriate SCCs with your organization upon request.

8. Data retention

• Access request information is retained for a reasonable period unless you request earlier deletion or a commercial relationship is established.
• Platform user data is retained according to the customer's configured retention policy and the terms of the customer's contract.
• Operational logs are retained for a limited period for security and troubleshooting purposes.
• Billing and contractual records are retained for the period required by applicable tax and commercial law.

9. Your rights

Subject to applicable law, you may have the following rights:

• Access: to obtain a copy of your personal information.
• Rectification: to correct inaccurate information.
• Erasure: to request deletion of your personal information.
• Restriction: to limit how we process your information.
• Portability: to receive your information in a portable format.
• Objection: to object to processing based on legitimate interests.
• Withdrawal of consent: where processing is based on consent.

To exercise these rights, contact us at privacy@maturityintelligence.ai. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority.

California residents

California residents have specific rights under the CCPA/CPRA, including the right to know, the right to delete, the right to correct, and the right to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, multi-factor authentication, least-privilege access controls, and a documented incident response plan. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work continuously to reduce risk.

11. Children's privacy

The Services are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be noted by updating the "Effective date" above and, where appropriate, by providing additional notice. Continued use of the Services after an update constitutes acceptance of the updated policy.

13. Contact

For questions about this Privacy Policy or to exercise any of your rights, contact us:

• Email: privacy@maturityintelligence.ai
• Postal mail: Maturity Intelligence Systems LLC, Privacy Inquiries. Postal address available on request.