Privacy Policy

Positli is an AI-powered brand strategy platform operated by Exceeding Development LLC, a company registered in Arizona, United States ("we," "us," "our," or "the Company"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, create an account, complete an assessment, or purchase a report. If you have questions about this policy, please contact us at hi@positli.com. We recommend consulting a qualified legal professional if you need advice specific to your situation.

We collect information in the following ways:

• Account information: Your name and email address when you create an account through Clerk (our authentication provider).
• Business profile: Your role or title, business name, industry, team size, years in operation, and target audience — collected during the assessment intake.
• Brand strategy answers: Your responses to the assessment questions about your positioning, messaging, audience, visual identity, and strategic direction.
• Uploaded materials: Any files, images, or documents you voluntarily submit to support your assessment.
• Feedback, reviews, and testimonials: Ratings, written feedback, and testimonials you submit through in-app forms or research invitations.
• Support messages: Any communications you send to us via email or support channels.
• Payment information: Payment transactions are processed by Stripe, a PCI-compliant payment processor. We do not store, access, or retain your full card number, CVV, or banking credentials. We receive limited metadata from Stripe (e.g., payment status, last four digits, and billing country) for order management purposes.

• Usage data: Pages visited, features used, time spent, clicks, and navigation paths — collected to understand how users interact with the platform and to improve the user experience.
• Device and browser data: IP address, browser type, device type, operating system, and referring URL — collected for performance monitoring and security purposes.
• Analytics data: We may use Google Analytics or similar analytics tools to measure traffic, user behavior, and platform performance. These tools may collect anonymized or aggregated data about your visit.
• Cookies and tracking technologies: We use cookies, local storage, and similar technologies for session management, authentication, and analytics. See our Cookie Policy for full details.

We use the information we collect to:

• Generate your AI-powered brand diagnosis and full strategy report based on your submitted answers
• Create and manage your account and authenticate your identity
• Process your payment and fulfill your purchase
• Send transactional emails about your assessment, report delivery, account activity, and billing
• Send product updates, onboarding sequences, educational content, and platform announcements — where you have not opted out
• Invite you to beta testing sessions, research calls, surveys, and feedback opportunities
• Respond to your support requests and communications
• Improve the platform — including AI model quality, UX, assessment design, and report structure — using aggregated, anonymized, or de-identified insights where possible
• Analyze usage trends and measure platform performance
• Run paid advertising and retargeting campaigns on platforms such as Google, Meta, or LinkedIn — we may use anonymized or hashed data for audience matching where applicable and permitted
• Comply with legal obligations and enforce our Terms of Use
• Detect and prevent fraud, abuse, and security incidents

We will not use your personal assessment responses to train third-party AI models without your consent. Aggregated or de-identified insights may be used internally to improve the platform.

We share your information only with trusted service providers who help us operate the platform. Each provider is bound by appropriate data processing and confidentiality agreements:

• Clerk: User authentication and account management. Your email and identity data are stored securely with Clerk.
• Stripe: Payment processing. Stripe is PCI DSS Level 1 compliant. We never store raw card data on our servers.
• OpenAI / AI providers: Your assessment responses are sent to an AI service to generate your diagnosis and report. We use Replit's managed AI integration, which applies enterprise-grade access controls. Please refer to the AI provider's current privacy policy for details on how they handle data.
• Resend: Transactional and marketing email delivery.
• Replit: Hosting, infrastructure, and object storage for the platform.
• Analytics providers: Google Analytics or similar tools for usage analytics and performance measurement. These providers may set cookies and collect data in accordance with their own privacy policies.
• Advertising platforms: Google Ads, Meta Ads, LinkedIn, or similar platforms may be used for paid advertising and retargeting. Anonymized or hashed data may be shared for audience matching where permitted.
• CRM and support tools: We may use customer relationship management or support software to manage communications and feedback.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share data only:

• With service providers listed in Section 4, solely to deliver the service
• When required by law, court order, or regulatory authority
• To protect the rights, property, or safety of Exceeding Development LLC, our users, or the public
• In connection with a merger, acquisition, or sale of assets — where you will be notified of any ownership change

We use cookies and similar technologies for session management, authentication, analytics, and advertising. You can control cookie preferences through your browser settings. For a full breakdown of the cookies we use and your options, please see our Cookie Policy.

We may invite users to participate in beta testing, product research, user interviews, feedback surveys, or review programs. Participation is always voluntary. If you participate:

• Your feedback may be used to improve the platform, product features, messaging, and AI quality
• Testimonials or case study references will only be used publicly with your explicit permission
• Feedback sessions may be recorded only with your consent
• You may withdraw from research participation at any time by contacting us

See our full Beta Tester / Research Participant Notice for additional details.

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, authentication requirements, and secure infrastructure. No method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.

We retain your account information and assessment data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. If you request deletion of your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it by law. Assessment results may be retained in aggregated and anonymized form for platform improvement purposes.

Depending on your jurisdiction, you may have rights including:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request that we delete your personal data
• Restriction: request that we limit how we process your data
• Portability: request your data in a machine-readable format
• Objection: object to certain types of processing, including direct marketing
• Withdrawal of consent: withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hi@positli.com. We will respond within a reasonable time and in accordance with applicable law.

You may unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us directly. Transactional and account-related emails may still be sent as they are necessary to deliver the service.

This platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

Exceeding Development LLC is based in the United States. If you access the platform from outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the platform, you consent to this transfer. We take steps to ensure appropriate safeguards are in place for international data transfers.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will notify you by email or by posting a prominent notice on the platform. The 'Last Updated' date at the top of this page indicates when the policy was last revised. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

We collect and store your email communication preferences, including:

• Consent timestamps: When you accepted the Terms of Service and Privacy Policy.
• Marketing opt-in/out: Whether you have opted into receiving optional product update and promotional emails, and when that preference was set or changed.
• Beta feedback opt-in: Whether you have opted into receiving invitations to participate in beta testing and research programs.

Transactional emails (account, assessment, report, and payment notifications) are sent based on our legitimate interest in delivering the service you requested. They do not require a separate opt-in and cannot be opted out of while your account is active.

Marketing and product update emails are only sent where you have opted in. You may update your preferences at any time from your profile settings or by clicking the unsubscribe link in any marketing email. Opting out of marketing emails does not affect transactional communications.

We may collect basic behavioral signals from your use of the platform to understand how users interact with the product and to improve the experience. This may include:

• Assessment progress signals (e.g., which steps were completed or abandoned)
• Time spent on assessment steps and report sections
• Help usage, feedback submissions, and rating interactions
• Feature usage patterns and navigation flows
• Error events and performance signals

This data is collected in aggregate or associated with your account for internal analytics purposes. We do not use this data to publicly display your private assessment answers. Behavioral data may be shared with internal analytics tools in de-identified or aggregated form.

Administrators of the platform may review aggregated behavioral signals to assess platform quality and identify areas for improvement. Individual assessment responses remain private unless you explicitly share them.

For privacy-related questions, data requests, or concerns:

• Email: hi@positli.com

We recommend consulting a qualified legal professional if you require advice about your specific privacy rights or obligations.