Data processing terms · last updated September 2026
How we handle information for organizations.
These terms form part of the agreement between you and SharedVision Labs LLC (doing business as SharedVision 360) when you arrange assessments for other people.
Roles
For the participant details you give us — name, email address, role context — we act as your processor. For the interview conversations, the evidence we derive from them and the finished report, we act as controller with respect to the participant, because those exist to serve the participant and are withheld from you.
What we process, and why
Participant name and email, to invite them; role and organization context, to frame the questions; interview conversations, to derive themes; and progress status, to show you completion. Nothing else.
Confidentiality boundary
Reviewer identities and individual answers are never disclosed to you, to the participant, or to any other customer. We do not report a theme unless enough people raised it to make attribution unlikely.
Sub-processors
We use a small number of vendors: a hosting and database provider, a transactional email provider, and AI model providers used to conduct interviews and derive themes. AI providers process content under agreements that prohibit training on it. We will tell you before adding a new category of sub-processor.
Security
Information is encrypted in transit and at rest. Access is restricted by row-level rules in the database itself, so a mistake in application code cannot expose another organization's information. Administrative access is limited and logged.
Retention and deletion
A participant can delete their own assessment and its conversations at any time. When you close a workspace we remove workspace records; participant-owned assessments are unaffected because they never belonged to you. On written request we will delete the participant details you supplied within 30 days.
Incidents
If we become aware of a breach affecting information you supplied, we will notify you without undue delay and in any event within 72 hours of becoming aware, with what we know and what we are doing about it.
International transfers and audits
Information is processed in the United States. On reasonable notice, no more than once a year, we will answer a written security questionnaire and provide our current security documentation.
Contact
Privacy and data requests: privacy@sharedvision360.com
SharedVision 360 is a trade name of SharedVision Labs LLC.
See also our facilitator terms and privacy notice.