Privacy Policy

Our Privacy-First Position

Valydex is designed to minimize data collection. Our goal is to provide useful cybersecurity guidance without requiring personal profiling.

What We Do Not Intentionally Collect

• No required account registration for basic assessment use
• No intentional storage of personal assessment responses on our servers
• No behavioral advertising profile built from assessment answers

Assessment Session Handling

Assessment answers use browser session storage. Scoring and PDF export run locally. Optional AI analysis requires your consent and sends your score, findings and suggested actions through our server to OpenAI. We do not create a stored assessment profile; provider processing is subject to its own policies.

Minimal Technical Data

Like most web services, infrastructure may process limited operational metadata (for example: request logs, IP address, browser/device signals, and response timing) for security, abuse prevention, and reliability.

We keep this data limited, access-controlled, and retained only as long as needed for operational and security purposes.

Cookies and Similar Technologies

We use Vercel Analytics for page views and events such as assessment completion, report downloads and product-link clicks. Events include page, product and placement identifiers, never assessment answers, scores or AI text. We do not build cross-site advertising profiles. We honor the browser Do Not Track signal for this analytics integration.

Affiliate Links

Some external product links are affiliate links. If you click and purchase, we may receive a commission. We do not sell your personal information to affiliate partners.

Once you leave Valydex and visit a third-party site, that site's own privacy policy applies.

Data Security

• HTTPS encryption in transit
• Principle-of-least-privilege access controls
• Reasonable operational safeguards for platform integrity

Your Rights

Depending on your jurisdiction, you may have rights related to access, deletion, correction, restriction, or objection. Because our data model is intentionally minimal, some requests may be limited by the information we actually hold.

Children's Privacy

Valydex is intended for business and professional contexts and is not directed to children under 13.

Policy Updates

We may update this policy to reflect legal or operational changes. Material updates will be posted on this page with an updated date.