If you're visiting this site: anonymous, aggregate usage analytics (which pages are viewed — no cross-site tracking, no advertising identifiers, no sale of anything to anyone). If you use the booking conversation, we collect exactly what you type into it — your name, email, company, and what you want to talk about — solely to respond to you.
If your organization is a client: the platform holds what the product requires to work — names and work emails, assessment results (CliftonStrengths, DiSC, Enneagram, Working Genius), coaching conversations with GrayMatter, goals and priorities, and short weekly pulse responses. Every item exists to power your team's coaching. Nothing is collected that the product doesn't use.
The platform runs on a small set of infrastructure vendors, each SOC 2–certified, with data hosted in the United States and encrypted in transit and at rest: Supabase (database and authentication), Vercel (hosting), Anthropic (the AI that powers GrayMatter, under no-training terms), and Resend (transactional email). These vendors process data solely to run the service.
Individuals always keep their own assessment results, regardless of anything. Client organizations can leave at any year-end and receive a complete export of everything their team built — after which we purge it from our systems. Data is never the hostage.
Want to see, correct, or delete personal data we hold about you? Email logan@graymattergrowth.com and we'll handle it promptly. If you're part of a client organization, we may route the request through your organization's administrator where the data belongs to their engagement.
If this policy changes in a way that matters, the date above changes with it, and active clients are told directly — not via a silent page edit.