Last updated: February 2026
Account information (email, name). Assessment responses (52 questions across HEXACO, RADIX, and VACH instruments). Response timing data. Computed scores (movement scores, HEXACO dimensions, VACH axes, emergence metrics). Archetype and foundation assignments. Validation survey responses (optional). Organization membership details (department, seniority, team, tenure — for org accounts only). Payment information is processed by Stripe and never stored on our servers.
To generate your structural profile. To enable relational comparison reads between profiles you choose to compare. To provide aggregate organizational analytics (never individual data). To improve the assessment instrument through anonymized validation research (with consent). To communicate about your account and subscription.
We never sell your data. We never share individual profiles with employers or organizations. Organization administrators never see individual archetype assignments, HEXACO scores, raw responses, or profile narratives. We never use your data for advertising. We never provide your information to third parties for marketing.
For users who join through an organization code: your organization sees only aggregate structural patterns across groups of 5 or more respondents. Your individual archetype, movement scores, trait dimensions, emergence data, and full profile are never visible to any organization administrator. This privacy boundary is enforced at the API level.
Active accounts: data retained indefinitely for longitudinal profile tracking. Canceled subscriptions: all data preserved. Account deletion: all personal data removed within 30 days. If study consent was given, anonymized response patterns may be retained for validation research.
Right to access: Download all your data at any time from your dashboard. Right to deletion: Delete your account and all associated data. Right to portability: Export your complete data as JSON. Right to correction: Contact us to correct inaccurate data. Right to restrict processing: Contact us to restrict how your data is used. Right to withdraw consent: Withdraw research participation consent at any time.
We use essential cookies for authentication and session management only. We do not use advertising cookies, tracking pixels, or third-party analytics that identify individuals. Local storage is used to save assessment progress (auto-clears after 24 hours).
Passwords are hashed with bcrypt (12 rounds). Database connections use TLS. API endpoints use rate limiting. Protected profile and archetype content requires signed access tokens and authenticated or entitled access. We use technical and contractual controls to deter unauthorized copying and bulk extraction. Stripe handles all payment processing with PCI-DSS compliance.
If you opt in to the validation study, your anonymized responses (no email, name, or identifying information) may be used to analyze the psychometric properties of the RADIX instrument. This research aims to establish reliability and validity metrics. You may withdraw at any time.
Data protection inquiries: privacy@nullventures.com. You may also exercise your rights by using the data export and account deletion features in your dashboard.