Privacy Policy

Information We Collect

NextGen Insights LLC may collect the following information:

• Name
• Email address
• Business information (type, stage, revenue range, team size)
• CoreScore responses and assessment data
• Website analytics and engagement activity
• Form submissions (contact, briefing, revenue breakdown requests)
• Subscription information
• Payment processor metadata (via Stripe)

Usage Data. We collect anonymized usage data including page views, click events, and session information. We assign anonymous visitor and session identifiers using localStorage and sessionStorage in your browser. These identifiers do not contain personally identifiable information.

Framework Interaction Data. When you use interactive tools such as calculators, scorecards, or assessment frameworks on our site, we may collect the inputs you provide in order to generate results and improve our tools.

How We Use Information

Data may be used to:

• Provide CoreScore diagnostic reports and operational assessments
• Send follow-up emails related to your assessment results
• Improve our diagnostics, reports, user experience, content, and services
• Track aggregate website performance and usage patterns
• Facilitate follow-up communications regarding your submissions
• Manage subscriptions and billing

Payment Processing

Payment data is processed through third-party payment processors such as Stripe. Norvau does not store full credit card data directly. Payment processor metadata (such as transaction IDs and subscription status) may be retained for billing and account management purposes.

Data Storage

Your data is stored in a PostgreSQL database hosted in the United States via Supabase. We implement reasonable security measures to protect your information. We do not sell your data to third parties.

Cookies and Tracking

We use localStorage and sessionStorage to assign anonymous visitor and session identifiers for analytics purposes. These are not traditional cookies but serve a similar function for understanding how visitors interact with our site.

We do not use third-party tracking scripts. We do not use advertising cookies. All analytics data is collected and processed by our own systems.

Email Communications

After completing a CoreScore assessment, you may receive up to 5 follow-up emails containing operational insights and recommendations related to your results. Every email includes an unsubscribe link, and you can opt out at any time.

Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — database hosting and data storage
• Vercel — website hosting and deployment
• Anthropic — operational analysis engine used to generate diagnostic insights
• Stripe — payment processing for subscriptions and services

Each of these services maintains its own privacy practices and data handling policies.

Data Retention

We retain your data for up to 2 years from the date of collection, or until you request deletion, whichever comes first.

Your Rights

You have the right to request access to, correction of, or deletion of your personal data at any time. To exercise any of these rights, contact us at operations@norvau.com.

California Residents. We do not sell personal information as defined under the California Consumer Privacy Act (CCPA).

Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The “Last Updated” date at the top of this page indicates when the policy was most recently revised.

Contact

If you have any questions about this Privacy Policy or our data practices, contact NextGen Insights LLC at operations@norvau.com.