This Privacy Policy explains what information Locus Leadership Group LLC, doing business as VisibilityDen (“VisibilityDen”, “we”, “us”), collects when you use visibilityden.com, the Executive Confidence Index™ application, and our related services (collectively, the “Service”).
1. Who we are
Locus Leadership Group LLC is a limited liability company registered in Minnesota, United States, operating the VisibilityDen brand from Greater Minneapolis–St. Paul, MN, USA. For privacy matters, reach us via our contact form.
2. Information we collect
You provide directly
- Account data: name, work email, role, organization (when you sign in or apply for pilot access).
- Lead-magnet data: email, name, role, optional context if you take the public self-assessment.
- Operational data: projects, financial inputs (CapEx, OpEx, ROI), pulse responses, decisions, evidence notes you enter into the app.
- Integration credentials: Jira / Monday.com / Slack tokens you connect, encrypted at rest.
- Support correspondence when you email us.
Collected automatically
- Session cookies required to keep you signed in.
- Server logs: IP, user-agent, request path, status, and timing — used for security and debugging. PII is redacted before persistence.
- Analytics (only if you accept): Google Analytics 4 with anonymized IP. We do not load GA until you opt in via the cookie banner.
3. How we use your information
- To operate, secure, and improve the Service.
- To compute the Executive Confidence Index™ and related dashboards from data you submit.
- To send transactional emails (account access, pilot approval, weekly pulse reminders).
- To send marketing emails — only to addresses that submit the public self-assessment, and only with a working unsubscribe link in every message.
- To respond to support requests and legal/regulatory obligations.
4. Legal bases (GDPR/UK)
- Contract — processing required to provide the Service to your organization.
- Legitimate interests — securing the Service, improving features, fraud prevention.
- Consent — analytics cookies, marketing email.
- Legal obligation — accounting records, lawful requests.
5. Sharing
We do not sell personal information. We share limited data only with vendors that help us run the Service:
- Hosting & database: Replit (US).
- Auth: Replit Auth (OpenID Connect).
- Email: Resend (US).
- Analytics (consent only): Google Analytics (US).
- Error monitoring: Sentry (US), if enabled.
- Customer integrations you connect: Jira (Atlassian), Monday.com, Slack.
See our subprocessors page for the live list.
6. International transfers
We are a US company; your data is processed in the United States. Where we receive data from the EU/UK, we rely on the EU Standard Contractual Clauses (and the UK IDTA) with our subprocessors.
7. Retention
- Account & operational data: kept while your organization uses the Service, plus 90 days after account closure.
- Audit logs: 13 months.
- Lead-magnet quiz responses: 24 months unless you ask us to delete them sooner.
- Server logs: 30 days.
- Backups: rolling 7-day window — see Security & Trust.
8. Your rights
Depending on where you live, you have rights to access, correct, delete, port, or restrict our processing of your personal data, and to object to certain uses. EU/UK residents may also lodge a complaint with their supervisory authority. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising those rights. To exercise any right, use the form on Manage your data or our contact form. We respond within 30 days (45 days for CCPA requests).
9. Security
We use TLS in transit, AES-256 at rest for integration credentials, role-based access control, audit logging, rate limiting, and bcrypt-equivalent password hashing where applicable. Full posture: Security & Trust.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect data from them.
11. Changes
We will post updates here and update the “Effective” date above. Material changes will also be emailed to active account holders.
12. Contact
Locus Leadership Group LLC
Greater Minneapolis–St. Paul, MN, USA
visibilityden.com/contact