Privacy Policy

1. Who We Are

KCENAV ("we," "our," or "us") is an AI-native strategic advisory platform for mid-market companies. Our platform is accessible at kcenav.ai. We provide free diagnostic tools, strategic frameworks, and premium advisory services.

For privacy questions, contact us at info@kcenav.ai.

2. Information We Collect

We collect the following categories of information:

Information you provide directly:

• Account registration: Email address, password (hashed, never stored in plain text), and company name
• Diagnostic tool responses: Your answers to assessment questions across our six tools (HALO, LEAD, Growth Scaling, Valuation Optimizer, M&A Readiness, Exit Readiness)
• Newsletter sign-up: Email address and optional name
• Contact and inquiry forms: Name, email, company, and message content
• Payment information: Processed securely by Stripe — we do not store credit card numbers

Information collected automatically:

• Anonymous usage analytics (pages visited, time on page)
• Browser type, device type, and approximate location (country/region)
• Referring website or source

3. How We Use Your Information

We use your information to:

• Generate your diagnostic scores — your assessment responses are used to calculate your composite scores and pillar breakdowns
• Provide and improve our services — including personalizing your dashboard, saving your historical results, and benchmarking against anonymized peer data
• Communicate with you — delivering your newsletter subscription, transactional emails (account creation, password reset), and service updates
• Process payments — subscription billing and one-time purchases via Stripe
• Improve our platform — analyzing aggregated, anonymized usage patterns to improve our scoring models and user experience
• Legal and compliance — complying with applicable laws and protecting our rights

4. How We Store and Protect Your Data

Your data is stored in a secure PostgreSQL database hosted on Neon (a SOC 2-compliant cloud database provider). We implement the following security measures:

• Passwords are hashed using bcrypt (industry-standard, one-way hashing)
• All data in transit is encrypted via TLS/HTTPS
• Database connections use SSL encryption
• Access to production data is restricted to authorized personnel
• JWT authentication tokens expire after 30 days

No security system is perfect. If you become aware of any security issue, please notify us immediately at info@kcenav.ai.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• Service providers: Trusted third parties who help operate our platform (Render for hosting, Neon for database, Stripe for payments, email service providers for transactional emails). These providers are contractually bound to protect your data.
• Aggregated benchmarks: Your assessment responses may contribute to anonymized, aggregated industry benchmarks. Your individual data is never identifiable in these benchmarks.
• Legal requirements: We may disclose data if required by law, court order, or to protect our rights.
• Business transfer: In the event of a merger or acquisition, data may transfer to the successor entity. You will be notified in advance.

6. Cookies and Tracking

We use minimal cookies and tracking:

• Authentication cookie: Stores your JWT token to keep you logged in (expires in 30 days or on sign-out)
• Analytics: We use a privacy-respecting analytics beacon to track page views and referral sources. This does not use third-party cookies and does not track you across other websites.
• No advertising cookies: We do not use advertising networks or third-party tracking pixels

You can disable cookies in your browser settings. Disabling authentication cookies will prevent you from staying logged in.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your diagnostic results in a portable format
• Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link in any email

To exercise any of these rights, email us at info@kcenav.ai. We will respond within 30 days.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your personal information and assessment history are deleted within 30 days
• Anonymized, aggregated data derived from your responses (used in benchmarks) is retained
• Financial records are retained for 7 years as required by law

9. Children's Privacy

KCENAV is designed for business owners and executives. We do not knowingly collect information from anyone under 18. If you believe we have collected information from a minor, contact us immediately.

10. Changes to This Policy

We may update this policy as our platform evolves. If we make material changes, we will notify you by email (if you have an account) or by posting a notice on our website. Continued use of KCENAV after changes constitutes acceptance of the updated policy.