Privacy Policy

Resonant Personality works with some of the most personal information there is: how you think, work, and what you value. Here’s how we treat it:

• Your Print belongs to you. You control who sees it, and you keep it if you leave your employer.
• Your employer sees organization-level analytics, never reported for groups smaller than five people, plus your Print summary unless you limit it.
• We never sell your personal information, and we don't use it for advertising.
• We use de-identified data for research and to improve our products. You can opt out. In the EEA, UK, and Switzerland, we include you only if you opt in.
• You can see, correct, export, or delete your data at any time.

The rest of this policy gives the details. It works together with our Terms of Service at resonant.io/terms.

Resonant Personality is provided by Anthro Labs, Inc., a Delaware corporation doing business as Resonant (“Resonant,” “we,” “us”). This policy covers resonant.io, the Resonant Personality apps and coaches, the Resonant connector for AI tools, and related services (together, the “Service”).

Our role. For your account, your assessment results, and your Print, Resonant decides how the data is used and is responsible for it (the “controller” or “business” under privacy law). For information an organization uploads about its own operations (“Customer Data”), we process it on that organization’s behalf and under its instructions (as a “processor” or “service provider”).

Information you give us:

• Account information: name, email address, password, job title, and preferences.
• Assessment responses and results from assessments you take through the Service.
• Results from other assessments you choose to upload or enter, such as DISC-family, CliftonStrengths, PI, Hogan, or MBTI results.
• Your 29-Point Personality Print ("Print"), which we generate from your results.
• Your conversations with the coaches: what you type and what the coaches reply.
• Your sharing settings, connected AI tools, and privacy choices.
• Messages you send us, such as support requests.

Information from your organization or a consultant: if your employer or a certified consultant sets up your license, they may give us your name, work email, role, team, and reporting relationships so we can invite you and organize the dashboard.

Information collected automatically: device and browser type, IP address, approximate location derived from it, pages and features used, dates and times of use, and error logs. See Section 11 for cookies.

Payment information: payments are handled by our payment processor. We receive confirmation of payment and limited card details, such as the card type and last four digits. We don’t store full card numbers.

What we don’t ask for. The Service doesn’t need health, financial-account, government-ID, or similar sensitive information, and we ask you not to put it into the coaches. Assessments measure workplace behavior and motivation. They aren’t clinical tests and don’t diagnose anything.

• To provide the Service: create your Print, run the coaches, power the dashboard, operate the connector you set up, and keep your account working.
• To honor your sharing choices: show your Print to the people and tools you've allowed, and nothing more.
• To keep things safe: detect and prevent fraud, abuse, and security incidents, and enforce our Terms.
• To support and communicate with you: answer requests, send service and billing notices, and, if you haven't opted out, send occasional product news.
• For research and product improvement: we use de-identified and aggregated data, meaning data with names, contact details, and employer identities removed, to conduct research, maintain assessment norms, and develop, train, and evaluate our products and models, including AI models. You can opt out in your account settings. In the EEA, the UK, and Switzerland, we include your data only if you opt in.
• To meet legal obligations: tax, accounting, and responding to lawful requests.

No automated decisions about you. Your Print is generated automatically, but neither we nor anyone using the Service may use it to make decisions that have legal or similarly significant effects on you, such as hiring, firing, promotion, pay, credit, housing, or insurance. Our Terms prohibit it.

Your organization. If your license comes from your employer, its administrators see organization-level dashboard analytics, which are aggregated and never reported for groups smaller than five people. By default, they also see your Print summary. You can limit your employer to aggregated analytics only at any time, and you keep your license. Your employer never sees your coaching conversations.

Coworkers. Coworkers you work with through the coworker coach see only what your sharing settings allow.

AI tools you connect. If you connect your Print to an outside AI tool, we send it to that tool at your direction. That provider’s own privacy policy then governs it. You can disconnect at any time.

Consultants. If an authorized consultant set up your organization’s license, they see only what the organization authorizes, or what you choose to share with them.

Service providers. We use carefully chosen vendors for cloud hosting and databases, AI model processing, payments, email, customer support, and security. They may use your data only to provide services to us. AI model providers we use are contractually prohibited from training their models on data we send them. A current list of these subprocessors is available on request at privacy@resonant.io.

Legal and safety. We may disclose information when the law requires it, or when necessary to protect anyone’s rights, safety, or property. Where the law allows, we’ll tell you first.

Business transfers. If Resonant is involved in a merger, acquisition, or sale of assets, your information may transfer to the successor, which must honor this policy for the information it receives.

What we don’t do. We don’t sell personal information. We don’t share it for cross-context behavioral advertising. We don’t let anyone we share de-identified data with attempt to re-identify it.

We receive data only in de-identified form, with names, contact details, and employer identities removed, and we use it for norms, research, and product development. We never attempt to identify the people behind those records.

• Your account, results, and Print: for as long as your account is open. If your employer's license ends, your Print stays with you in a free Personal account.
• Coaching conversations: for as long as your account is open, so the coaches can pick up where you left off. You can delete individual conversations at any time.
• After you delete your account: we delete or de-identify your personal data within 30 days, except records we must keep by law, such as billing and tax records.
• Customer Data: available for export for 30 days after a Customer's subscription ends, then deleted.
• De-identified and aggregated data: this can't be traced back to you, so it may be kept and can't be removed.

Wherever you live, you can:

• See the personal information we hold about you and get a copy of it.
• Export your Print and results in a portable format.
• Correct information that's wrong.
• Delete your account and personal information.
• Opt out of research and model-training use, or opt in where required.
• Control sharing with your employer, coworkers, and connected AI tools.
• Unsubscribe from marketing emails using the link in any email.

Most of this is available in your account settings. For anything else, email privacy@resonant.io. We’ll verify your identity before acting on a request and respond within the time the law requires, generally within 30 days. You may use an authorized agent where the law allows, and we’ll verify their authority. We won’t treat you differently for exercising your rights.

Appeals. If we decline a request, we’ll explain why. You can appeal by replying to our decision with “Appeal” in the subject line. We’ll respond to appeals within 45 days.

If your license comes from your employer:we’ll handle requests about your own account and Print directly. For Customer Data your employer controls, we’ll direct you to your employer and help it respond.

Several U.S. states, including California, give residents specific privacy rights. This section describes our practices in the terms those laws use. In the past 12 months, we have collected these categories of personal information, for the purposes in Section 3, and disclosed them for business purposes to the recipients in Section 4:

We don’t sell or share personal information as those laws define the terms, and we haven’t in the past 12 months. We don’t knowingly collect information from anyone under 18. We use sensitive personal information only for purposes the law permits, such as providing the Service and keeping it secure, so a right to limit its use doesn’t apply. We honor Global Privacy Control browser signals.

Legal bases. We process your data to perform our contract with you or your organization; for our legitimate interests in securing, supporting, and improving the Service, balanced against your rights; with your consent, which you can withdraw at any time, for research and model training and for marketing where required; and to comply with legal obligations.

Your additional rights. You can object to processing based on legitimate interests and ask us to restrict processing. You can also complain to your local data protection authority, though we’d appreciate the chance to fix things first.

International transfers. We’re based in the United States, and your data is processed there. Where we transfer personal data out of the EEA, the UK, or Switzerland, we use the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents, or another lawful transfer mechanism.

Personality data deserves serious protection. We encrypt data in transit and at rest, limit access to people who need it for their work, log access to production systems, and review our safeguards regularly. No system is perfectly secure. If a breach affects your personal information, we’ll notify you and the relevant authorities as the law requires.

We use cookies and similar technologies that are needed to keep you signed in and the Service secure, plus analytics that help us understand how the Service is used and improve it. We don’t use advertising cookies or let advertising networks track you on our site. You can control cookies through your browser settings. Blocking essential cookies may stop the Service from working properly.

The Service is for adults. We don’t knowingly collect personal information from anyone under 18. If we learn that we have, we’ll delete it.

We’ll update this policy as the Service changes. For material changes, we’ll notify you at least 30 days in advance by email or in the Service. Each version is dated and numbered, and earlier versions are available on request.

Questions, requests, or concerns: support@getresonant.io.