Privacy Policy

1. Introduction

At HMN, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI transformation platform and services. Please read this privacy policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.

If you do not agree with the terms of this privacy policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

• Register for an account: Name, email address, password, company name, job title, phone number
• Complete assessments: Company information, industry, size, location, revenue, challenges, goals, and AI readiness data
• Enroll in courses: Learning preferences, progress data, completion status
• Participate in workshops: Attendance records, feedback, participation data
• Use our chat features: Conversation history, questions, and responses
• Contact support: Support tickets, correspondence, feedback
• Make payments: Billing information, payment method details (processed securely through third-party payment processors)

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain information about your device and how you interact with our Services:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: Pages visited, features used, time spent, click patterns, search queries
• Technical data: Log files, error reports, performance metrics
• Cookies and tracking: Session data, preferences, analytics information
• Location data: Approximate location based on IP address

2.3 Information from Third Parties

We may receive information about you from:

• Business partners and affiliates
• Payment processors (transaction confirmations)
• Analytics providers (usage statistics)
• Marketing platforms (campaign effectiveness)
• Public databases and social media platforms (when you connect accounts)

3. How We Use Your Information

We use your information to provide, maintain, and improve our Services. Specifically, we use your information to:

3.1 Service Delivery

• Create and manage your account
• Generate personalized AI maturity assessments and recommendations
• Provide course content and track your learning progress
• Facilitate workshop enrollment and participation
• Enable AI advisor chat functionality
• Process payments and manage subscriptions
• Send service-related communications (confirmations, updates, technical notices)

3.2 Personalization and Improvement

• Customize your experience based on your profile and preferences
• Recommend relevant courses, workshops, and resources
• Analyze usage patterns to improve our platform
• Develop new features and services
• Train and improve our AI models (using aggregated, anonymized data)

3.3 Communications

• Send you newsletters and marketing communications (with your consent)
• Notify you about new features, courses, or workshops
• Respond to your inquiries and support requests
• Conduct surveys and gather feedback

3.4 Security and Compliance

• Detect and prevent fraud, abuse, and security incidents
• Monitor and analyze trends and usage patterns
• Comply with legal obligations and enforce our Terms of Service
• Protect our rights, privacy, safety, and property

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud hosting providers (data storage and computing)
• Payment processors (billing and transactions)
• Email service providers (communications)
• Analytics platforms (usage insights)
• Customer support tools (help desk)
• AI model providers (Claude by Anthropic for natural language processing)

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government regulations).

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Team administrators can view team members' progress and analytics
• Public profiles or achievements (if you opt in)
• Participation in case studies or testimonials (with your permission)

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Data encryption at rest: Sensitive data is encrypted in our databases
• Access controls: Strict authentication and authorization mechanisms
• Regular security audits: Periodic vulnerability assessments and penetration testing
• Employee training: Regular security awareness training for our team
• Incident response: Established procedures for detecting and responding to security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Active accounts: We retain your data while your account is active
• Deleted accounts: After account deletion, we retain data for 90 days to allow recovery, then permanently delete it
• Legal requirements: Some data may be retained longer to comply with legal, tax, or accounting requirements
• Aggregated data: We may retain anonymized, aggregated data indefinitely for analytics and research

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

• Request a copy of your personal information
• Export your data in a machine-readable format

7.2 Correction and Deletion

• Update or correct inaccurate information
• Request deletion of your personal information (subject to legal requirements)

7.3 Consent and Marketing

• Withdraw consent for processing your information
• Opt out of marketing communications (unsubscribe link in all marketing emails)
• Manage cookie preferences

7.4 Restriction and Objection

• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests

To exercise any of these rights, please contact us at privacy@humanglue.ai. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities:

8.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function (authentication, security)
• Performance cookies: Analyze how you use our Services to improve performance
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Understand usage patterns and measure effectiveness
• Marketing cookies: Deliver relevant advertisements (with your consent)

8.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your country. We ensure that such transfers comply with applicable data protection laws through:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions by relevant authorities
• Your explicit consent
• Appropriate safeguards to protect your information

12. AI and Machine Learning

We use AI and machine learning to:

• Generate personalized assessments and recommendations
• Power our AI advisor chat functionality
• Analyze organizational data to provide insights
• Improve our Services through pattern recognition

We use third-party AI services (such as Claude by Anthropic) to process certain data. We ensure these providers maintain appropriate security and privacy standards and only process data as necessary to provide our Services.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@humanglue.ai.

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 7, plus:

• Right to lodge a complaint with a supervisory authority
• Right to object to automated decision-making
• Right to appoint a representative to handle privacy matters

Our lawful bases for processing your information include: consent, contract performance, legal obligations, and legitimate interests.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification to your registered email address
• Displaying a prominent notice within our Services

Your continued use of our Services after the effective date constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We are committed to resolving privacy-related complaints and concerns. We will respond to your inquiry within 30 days.