How we handle your data.

Information you provide directly. When you complete the AI Transformation Flywheel Diagnostic, download our whitepaper, submit a contact form, or otherwise interact with our site, we may collect:

• Name, email address, job title, and role level
• Organization name, industry, size, and revenue range
• Diagnostic survey responses (your answers to assessment questions about your organization’s AI readiness)
• Free-text comments or messages submitted through forms

Information collected automatically. When you visit our site, we automatically collect:

• Device and browser information (type, operating system, screen resolution)
• IP address and approximate geographic location
• Pages visited, time spent, referral source, and interaction patterns
• Cookies and similar technologies (see Section 6 below)

We use the information we collect to:

• Generate your personalized diagnostic results, archetype classification, and action plan
• Send you your diagnostic results, access codes, and requested materials (e.g., whitepaper delivery)
• Respond to inquiries submitted through our contact form
• Improve our diagnostic methodology, research, and services
• Analyze site usage and performance to improve the user experience
• Comply with legal obligations and protect against fraud or misuse

We may anonymize and aggregate diagnostic responses and other data so that it no longer identifies you or your organization. This anonymous, aggregated data may be used for:

• Research and analysis on organizational AI readiness trends
• Benchmarking studies and published reports (no individual or organization is identifiable)
• Improving our diagnostic instruments, scoring models, and advisory methodologies
• Marketing materials that reference aggregate statistics (e.g., “73% of respondents scored below 3.0 on governance readiness”)

Once data has been anonymized and aggregated, it is no longer considered personal information and may be used without restriction.

Your diagnostic responses are processed by an AI model (currently Anthropic’s Claude) to generate a personalized executive narrative. This analysis is performed on-demand for your results and is not used to train AI models. The AI receives only your survey scores, archetype classification, and firmographic context — never raw personally identifiable information beyond your first name and industry.

We do not sell your personal information. We may share information with:

• Service providers who help us operate our site and deliver services (e.g., email delivery via Resend, hosting via Vercel, database via Supabase, AI analysis via Anthropic). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal compliance— when required by law, regulation, legal process, or enforceable governmental request.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We use the following types of cookies:

• Essential cookies — required for site functionality, including diagnostic results access authentication (httpOnly session cookies).
• Analytics cookies — help us understand how visitors interact with our site (e.g., Vercel Analytics). These collect aggregate usage data and do not track you across other websites.

We do not use advertising cookies or third-party tracking pixels. You can control cookies through your browser settings.

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (TLS/HTTPS on all connections)
• Encrypted database storage with access controls
• Access code protection for diagnostic results pages
• Rate limiting on authentication endpoints

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Diagnostic results are retained indefinitely to allow return access via your access code. You may request deletion at any time (see Section 9).

Anonymous, aggregated data is retained indefinitely as it does not constitute personal information.

Depending on your location, you may have the following rights regarding your personal information:

• Access— request a copy of the personal information we hold about you
• Correction— request correction of inaccurate information
• Deletion— request deletion of your personal information
• Opt-out— unsubscribe from marketing emails at any time via the unsubscribe link in any email
• Do Not Sell / Do Not Share — we do not sell or share personal information for cross-context behavioral advertising

To exercise any of these rights, contact us at hello@mindspanlabs.ai. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on: (a) your consent, (b) our legitimate interests in operating and improving our services, or (c) the necessity of processing for contractual performance. You have the right to withdraw consent, access your data, request portability, and lodge a complaint with your local data protection authority.

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of our site after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

DGT Global, LLC dba Mindspan Labs
Email: hello@mindspanlabs.ai
Web: mindspanlabs.ai/contact