Privacy Policy for WorkingAs1

1. Introduction

Welcome to WorkingAs1 ("we," "our," or "us"). We provide a Human Operating System platform designed to help organizations build alignment, trust, and performance. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (workingas1.com) and when you use our software applications and tools designed to facilitate organizational assessment, strategy, and execution (collectively, the "Platform").

Important Notice regarding our Business Model: WorkingAs1 operates largely through a network of certified independent consultants ("Partners"). We process data on behalf of our Clients and Partners. In many instances, the Client (your employer) or the Partner is the "Data Controller," and WorkingAs1 is the "Data Processor."

2. Information We Collect

A. Information You Provide Directly

• Account Data: When you register or are invited to the Platform, we collect contact details such as name, email address, job title, and organization.
• Assessment Data: When you complete surveys or diagnostic assessments, we collect your responses, scores, and open-ended text feedback ("Signals").
• User-Generated Content: Information you input into the Platform to facilitate team alignment and performance, such as strategic ideas, operational decisions, or team recognition.

B. Information Collected Automatically

• Usage Data: We track how you interact with the Platform, including log-ins, pages viewed, and features used.
• Device Data: IP address, browser type, and operating system.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Generating reports, visualizing culture data, and enabling the functional tools within the Platform.
• Generate Insights: We use Artificial Intelligence (AI) technology to process data and generate high-level trends and insights for your organization.

Note: We do not use your proprietary data to train public AI models. Your data remains isolated to your organization's instance or the aggregate benchmarking pool (de-identified).

• Create Industry Benchmarks: We use aggregated and de-identified data to create comparative industry benchmarks (e.g., "Industry Average Trust Score"). This allows organizations to understand how they compare to the market without revealing the identity of any specific participant.
• Improve the Platform: Analyzing usage trends to fix bugs and enhance user experience.
• Communication: Sending system alerts, reports, and administrative updates.

4. How We Share Information

We do not sell your personal data. We share data only in the following specific contexts:

A. With Your Organization and Consultants

• The Consultant (Partner) View: Authorized Consultants engaged by your organization have access to the data generated within the Platform to facilitate their advisory work. This includes aggregated scores and anonymized open-ended feedback ("Signals").
• Leadership View: Executive leaders at your organization receive assessment results and reports in aggregate form. This ensures that leadership can identify high-level trends, friction points, and areas for improvement without accessing the raw, individual responses of employees.

B. Service Providers (Sub-Processors)

We use trusted third-party vendors to help run our business. These may include:

• Cloud hosting providers (e.g., AWS, Azure, Google Cloud).
• AI Model providers (e.g., OpenAI, Anthropic) via secure, enterprise-grade APIs where data retention for training is disabled.

C. Legal Requirements

We will disclose any information we collect, including private or personal information, if we are required to do so by applicable law, regulation, legal process, or governmental request (such as a court order or subpoena). We may also disclose information if we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or potential threats to the safety of any person.

5. Aggregation and De-Identification

WorkingAs1 may aggregate and de-identify data (stripping out names and specific identifiers) to create Benchmarks. For example, we may calculate the "Average Trust Score for the Manufacturing Industry." This aggregate data does not identify individuals or specific companies and may be used for research and marketing.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, strict access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Data Rights

Depending on your jurisdiction (e.g., Canada's PIPEDA, Europe's GDPR), you may have rights regarding your data:

• Access and Correction: You may request a copy of your personal data or ask us to correct errors.
• Deletion: You may request the deletion of your personal data, subject to our data retention policies and legal obligations.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw it.

To exercise these rights: Please contact the WorkingAs1 Privacy Officer (details below). Note that if your data was collected in the context of your employment, we may need to coordinate your request with your employer (the Data Controller).

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When data is no longer needed, it is either deleted or permanently anonymized.

9. International Data Transfers

WorkingAs1 is based in Canada. Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: