Privacy Policy

Effective October 28, 2026

Enterprise Value Index™ ("EVI," "we," "us," or "our") is operated by Behavioral Blueprints LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Enterprise Value Index assessment, website, and related services (collectively, the "Services").

1. Information We Collect

Information you provide directly:

• Account information: email address and name when you create an account or save your score
• Assessment responses: the answers you provide across the 10-dimension EVI assessment, including company name, revenue data, operational details, and other business characteristics
• Contact information: email address, phone number, or other information you voluntarily provide
• Communications: messages, feedback, or inquiries you send us

Information collected automatically:

• Usage data: pages visited, time spent, clicks, and interactions with the Services
• Device data: browser type, operating system, device identifiers, and IP address
• Cookies and similar technologies: see Section 5 below

2. How We Use Your Information

We use your information to:

• Generate and deliver your Enterprise Value Index score and dimensional analysis
• Create and manage your account
• Provide advisory services and transaction position consulting
• Send you your assessment results, resource guides, and related materials
• Communicate with you about our Services, including responding to inquiries
• Send periodic market intelligence and resources (only with your opt-in consent)
• Improve, personalize, and develop the Services
• Comply with legal obligations

3. How We Protect Your Information

Your assessment data and scores are treated as strictly confidential. We implement industry-standard security measures including:

• All scoring logic runs server-side in encrypted edge functions; no proprietary algorithms are exposed to browsers
• Data is encrypted in transit (TLS 1.2+) and at rest
• Authentication via secure magic link (passwordless) with session tokens
• Row-level security policies restrict data access to authorized users only
• Audit logging for all score-related operations

4. Information Sharing and Disclosure

We do not sell your personal information.

We may share your information only in these limited circumstances:

• With your express consent: we will never share your data with buyers, investors, or third parties without your prior written consent
• Service providers: trusted vendors who help us operate the Services (e.g., hosting, authentication), bound by confidentiality obligations
• Legal requirements: when required by law, regulation, or legal process
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential cookies: maintain your session, authenticate your account, and ensure the Services function properly
• Analytics cookies: understand how visitors interact with the Services to improve them

We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Services.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate personal information
• Deletion: request deletion of your personal information
• Opt-out: opt out of marketing communications at any time
• Data portability: receive your data in a structured, commonly used format
• Non-discrimination: exercise your rights without discriminatory treatment

California residents (CCPA/CPRA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale (we do not sell personal information). You may designate an authorized agent to make requests on your behalf.

7. Data Retention

We retain your assessment data and account information for as long as your account is active or as needed to provide Services. You may request deletion at any time. We retain anonymized, aggregated data (which cannot identify you) for research and methodology improvement.

8. Children's Privacy

The Services are intended for business professionals and are not directed at individuals under 18. We do not knowingly collect personal information from children.

9. Third-Party Services

Our Services may contain links to third-party websites or services (e.g., Calendly for scheduling). These third parties have their own privacy policies, and we are not responsible for their practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.