Privacy Policy

Client Chemistry ("we," "our," or "us") is committed to protecting your privacy and the privacy of your clients. Client Chemistry is operated as a sole proprietorship based in British Columbia, Canada. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. Client Chemistry serves professional users in the United States and Canada and is committed to compliance with applicable privacy laws in both countries. By using Client Chemistry, you agree to the practices described in this policy. This policy works together with our Terms of Service and, for the personal information of your clients, our Data Processing Agreement.

1. Our Roles: Controller and Processor

It matters, legally, whose data we are handling and in what capacity:

• Your account information. For the personal information of account holders (advisors and their team members), we act as the controller and this Privacy Policy governs.
• Your clients' information. For the personal information of the clients you assess, you are the controller and we are your processor. We handle that information on your behalf and on your instructions, to provide the Service to you. Your own privacy obligations to your clients continue to apply, and the terms of our processing are set out in our Data Processing Agreement.

2. Information We Collect

From Account Holders

• Name and organization name
• Email address and password (passwords are hashed and never stored in plain text)
• Assessment responses, communication archetype, and dimension scores
• Billing information processed securely through Stripe (we never store card numbers)
• If you use the optional AI connection: the keys you generate (stored only as a hash) and a log of which tools were used and when, so you have a record of access
• Basic technical and usage data needed to operate and secure the Service, such as log data and aggregate, cookieless analytics

From Assessment Participants (Clients)

• Name (provided by the account holder when creating the invite)
• Assessment responses, communication archetype, and dimension scores
• Email address, only if the account holder chooses to supply one (see below)

Supplying a participant's email address is optional. When an account holder provides one, we use it for a single purpose: emailing that participant their assessment link. We delete it once the participant completes the assessment. If no email is provided, the account holder receives a link to share themselves and we never receive the address at all.

We do not collect participant financial information, account numbers, or any other personally identifying information beyond what is listed above. Participants do not create accounts and have no login credentials stored in our system.

From Meetings

We do not collect the content of your client meetings. Client Chemistry does not record, transcribe, or join your meetings, and it does not ask you to upload notes or transcripts. There is no field anywhere in the product for meeting content.

If you log a meeting, we store only the date and the meeting type (for example, “Zoom”) so that you can see your meeting cadence with a client. Nothing that was said in the meeting is captured.

3. How We Use Your Information

• To generate Chemistry Reports comparing communication styles between account holders and their clients
• To manage your account, subscription, and billing
• To send transactional communications such as account confirmation and invite links
• To operate, secure, maintain, and improve the Service, including preventing fraud and abuse
• To respond to support requests and to comply with legal obligations

We rely on your consent, the performance of our contract with you, and our legitimate interests in operating and securing the Service as the bases for this processing. We do not sell your data or your clients' data to any third party, and we do not use your data or client data for advertising.

4. AI and Automated Processing

Chemistry Reports are generated using artificial intelligence (Anthropic's Claude). To produce a report, first names, archetype data, and dimension scores are sent to Anthropic's API. No meeting content, financial data, or raw assessment answers are sent, and Anthropic does not use data submitted through its commercial API to train its models.

Reports are informational tools, not decisions. The Service does not make automated decisions that produce legal or similarly significant effects about anyone. A report is guidance that the advisor, a human professional, chooses whether and how to use.

The optional AI connection lets your own AI assistant read your client playbooks through a key you generate. It is read-only and never exposes raw assessment answers. When you use it, the AI provider you choose receives the playbook text and acts as your processor under your own agreement with them, not as our subprocessor.

5. Third-Party Services (Subprocessors)

We use the following third-party services to operate Client Chemistry. Each is bound by its own privacy policy and data processing terms. A current list is maintained in our Data Processing Agreement:

An AI assistant you connect through the optional AI connection is your own processor, chosen by you, not our subprocessor.

6. Data Security

• All data is encrypted in transit using TLS and encrypted at rest
• Row-level security is enforced by the database itself, so account holders can only access data from their own organization
• Passwords are hashed using industry-standard algorithms and never stored in plain text. We cannot read your password
• Internal API endpoints are protected with shared secrets and are not reachable from a browser
• HTTPS is enforced, the application cannot be embedded in a frame, and privileged database keys never reach the browser

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. For a full breakdown, including what we deliberately do not collect and where we are still early, see our security overview.

7. Data Retention

• Account and client data is retained while your subscription is active, and for a reasonable period afterward unless you request deletion sooner
• A participant's email address, if one was supplied, is deleted as soon as that participant completes their assessment
• Chemistry Reports remain accessible while your subscription is active. If you cancel, access is suspended but your data is not immediately deleted, so that resubscribing restores it
• We may retain limited information as needed to comply with legal obligations, resolve disputes, and enforce our agreements
• To request permanent deletion of your account and associated data, or the deletion of a specific participant's data, contact us at info@clientchemistry.com

8. International Data Transfers

Your account and assessment data is stored and hosted in Canada, where our database and application providers (Supabase and Vercel) operate. Some limited processing happens elsewhere: report generation sends first names, archetypes, and dimension scores to Anthropic in the United States, and subscription billing for account holders is handled by Stripe in the United States. This means some information may be processed in a country other than the one you live in, including the United States, whose data protection laws may differ from yours. Where personal information is processed across borders, we rely on appropriate safeguards and on our providers' own compliance programs. By using the Service, you consent to this processing.

9. Cookies

We use session cookies solely for authentication, to keep you logged in while you use the application. We do not use tracking cookies or advertising cookies. We use Vercel Analytics, a cookieless, privacy-preserving analytics service, to measure aggregate page traffic; it does not use cookies, does not track you across sites, and does not collect personal information. You can disable cookies in your browser settings, but doing so will prevent you from logging in.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request that inaccurate data be corrected
• Deletion: Request that your data be deleted
• Portability: Request your data in a portable format
• Withdraw consent: Where we rely on consent, withdraw it at any time (this does not affect processing already carried out)

To exercise any of these rights, contact us at info@clientchemistry.com. We will respond within the time required by applicable law. If you are a client of an account holder, please direct your request to that advisor, who is the controller of your information; we will assist them as their processor. If you are unsatisfied with our response, you may have the right to complain to your local data protection authority, such as the Office of the Privacy Commissioner of Canada.

11. Data Breach Notification

We maintain safeguards designed to protect personal information. If we become aware of a security breach that affects your personal information and creates a real risk of significant harm, we will notify affected account holders and, where we act as a processor, the relevant controller, without undue delay, and we will cooperate as needed so that any legally required notifications to individuals or regulators can be made.

12. Children's Privacy

The Service is a business tool intended for professional use by adults. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of majority. Account holders must not invite minors to complete an assessment. If you believe we have inadvertently collected information from a minor, contact us and we will delete it.

13. Your Responsibility for Participant Consent

As an account holder, you are the controller of your clients' information and you are responsible for ensuring that your clients or contacts understand and agree to participate in the assessment process before you send them an invite link, and for having any legal basis required to provide their information to us. We recommend briefly explaining the purpose of the assessment before sharing the link.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application. Continued use of Client Chemistry after changes take effect constitutes your acceptance of the updated policy.

15. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at: