Privacy Policy

1.1 Information You Provide Directly

When you create an account or use the Compass Engine™ platform, we may collect:

• Name and email address
• Account credentials (password stored in encrypted form)
• Organizational information you provide in assessment intake forms
• Payment information (processed by Stripe — HorizonX™ does not store full payment card data)
• Communications you send to us via email or contact forms

1.2 Information Collected Automatically

When you use our Services, we may automatically collect:

• IP address and general location information
• Browser type and version
• Device type and operating system
• Pages viewed and features used within the platform
• Date and time of access
• Referring URLs

1.3 Assessment Intake Data

When you complete an assessment intake form through Compass Engine™, the information you provide is used solely to generate your operational assessment report. This intake data is stored in your account and associated with your generated reports.

3.1 Service Providers

We work with third-party service providers who assist us in operating the platform, including:

• Supabase (database and authentication services)
• OpenAI (AI report generation — intake data is processed to generate reports)
• Stripe (payment processing)

These providers are contractually required to protect your information and may only use it to provide services to HorizonX™.

Compass Engine™ outputs are generated using artificial intelligence and may be processed through third-party AI providers as described in this policy.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our platform before your information becomes subject to a different privacy policy.