Last Updated: November 2025

1) Who We Are

AgilityInsights (“we,” “our,” or “us”) is committed to protecting your privacy and complying with applicable U.S. federal and state data protection and privacy laws. This Policy explains how we collect, use, disclose, and protect personal information when you use our services.

2) Scope

This Policy covers all AgilityInsights software-as-a-service (SaaS) platforms and modules, learning tools, professional services (training and consulting), and our websites, portals, and customer support channels.

3) Legal Basis

We process personal data where a lawful basis exists under applicable U.S. privacy laws, such as the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (CDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act, and Utah Consumer Privacy Act.

4) Data We Collect

We may collect the following categories of personal data: Account & Profile (name, email, phone, job title, organization, role); Authentication & Security (logins, multi-factor authentication, access logs); Usage Data (device, IP address, browser type, actions, errors); Content (objectives, projects, KPIs, attachments, surveys); Billing Information (contact details, invoices, payment references). Sensitive data is collected only when strictly necessary and with explicit consent.

5) Purpose of Use

We use personal data to provide, maintain, and improve our services; ensure security; provide customer support; send administrative notifications; comply with legal obligations; and, where consent is provided, send marketing communications.

6) Data Hosting & Storage

Personal data is stored and processed within the United States. We use secure, reputable U.S.-based cloud providers that maintain strong data protection and security practices.

7) Service Providers

We engage carefully vetted service providers for hosting, security, analytics, or customer support. Each provider is bound by contractual and technical safeguards consistent with this Policy and applicable privacy laws.

8) Security

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These include encryption, multi-factor authentication, role-based access controls, continuous monitoring, vulnerability management, and vendor due diligence. We also maintain SOC 2 Type II certification, demonstrating compliance with industry-recognized security and privacy standards.

9) Cookies & Tracking

We use essential cookies necessary for platform operation and, with consent where required, analytics or marketing cookies to improve user experience. You can manage cookie preferences through your browser or in-product settings.

10) Direct Marketing

We send electronic marketing communications only with your consent or where otherwise permitted by law. You may opt out or withdraw consent at any time without affecting access to core services.

11) Automated Decisions & AI

We do not make decisions that produce legal or similarly significant effects based solely on automated processing or artificial intelligence without appropriate safeguards and transparency.

12) Your Rights

Depending on your state of residence, you may have the right to access, correct, delete, or obtain a copy of your personal data; opt out of targeted advertising or data sales; or limit processing of sensitive personal data. You may also appeal any decision regarding a rights request.

13) Data Subject Requests (DSAR)

To exercise your privacy rights, contact us at privacy@agilityinsights.com. We will verify your identity and respond within 45 days, with an extension where permitted by law.

14) Records & Assessments

We maintain internal records of processing activities and conduct privacy impact assessments for high-risk processing involving sensitive data, new technologies, or large-scale analytics.

15) Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. When no longer needed, data is securely deleted or anonymized.

16) Data Breaches

We maintain an incident response plan to address potential data breaches. If a breach occurs that may affect your personal data, we will assess the impact and notify you as required by applicable law.

17) Contact

If you have any questions or concerns about this Policy or your data, contact us at:

AgilityInsights
10730 Pacific St, Suite 040
Omaha, NE 68114
Email: privacy@agilityinsights.com

18) Updates

We may update this Policy periodically. Material changes will be communicated through our platform or other official channels, and the “Last Updated” date will reflect the revision.

19) Global Alignment

While this Policy is designed to comply with U.S. privacy laws, AgilityInsights aligns its practices with globally recognized privacy standards such as the EU General Data Protection Regulation (GDPR) to maintain consistency and transparency for all users.

20) Do Not Sell or Share

AgilityInsights does not sell or share personal information for monetary gain. Where applicable under state law, you have the right to opt out of the “sale” or “sharing” of personal data as defined by those laws.

21) Non-Discrimination

We do not discriminate against any individual for exercising their privacy rights under this Policy or applicable law.

22) Children’s Privacy

In compliance with the U.S. Children’s Online Privacy Protection Act (COPPA), our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.