1What We Collect

We collect the following categories of information when you use the Cogitant AI Exposure Index™:

• Access log data. When you enter an access code and accept the Terms of Use, we log the date and time of acceptance, the access code used, and your browser's user-agent string. We may also receive your IP address as part of standard web traffic handling by Cloudflare (our hosting provider). This log constitutes our record of your click-wrap acceptance.
• Assessment inputs. The responses, ratings, and profile information you enter into the diagnostic tool. This data is processed in your browser and, when you download a workbook, used to generate your Excel output. We do not permanently store your assessment responses on our servers.
• Company and contact information. The name of the organization being assessed and the contact name and email you provide at the start of the diagnostic. This information appears in your downloaded workbook and in the acceptance log.

We do not collect payment information through this tool. We do not collect sensitive personal information such as financial account numbers, government ID numbers, or health data.

2How We Use It

We use the information collected for the following purposes only:

• To operate the tool. Access codes gate the tool. Acceptance logs provide legal evidence of Terms of Use agreement and support our trade secret protections.
• To deliver your report. Assessment inputs are used in-session to generate your Excel workbook output. They are not retained after your session ends.
• To improve our benchmarks. On an aggregated, anonymized basis, assessment data may inform the benchmark ranges used in the diagnostic (e.g., industry-wide averages for AI readiness dimensions). No individual organization's data is identifiable in this process. See our Terms of Use, Section 5, for additional detail.
• To enforce our Terms of Use. Acceptance logs may be used as evidence in a legal proceeding involving a breach of the Terms of Use or misappropriation of our proprietary content.

3How We Store It

The Cogitant AI Exposure Index™ runs primarily in your browser. Assessment inputs are held in memory during your session and are not transmitted to or stored on our servers except as part of workbook generation.

Acceptance log records (date, time, access code, user-agent, IP address) are stored in Cloudflare's infrastructure under our account. Cloudflare's data centers are located primarily in the United States. Cloudflare's own privacy policy governs their handling of infrastructure-level data.

We do not use cookies for tracking. We do not use advertising pixels or behavioral tracking scripts.

4We Do Not Sell Data

We do not sell, rent, trade, or otherwise transfer your personal data or your organization's assessment data to any third party for commercial purposes. This includes data brokers, advertisers, and analytics platforms.

Cogitant Partners products are ad-free. We are not compensated to promote any product or service within the diagnostic tool or its outputs.

5Third-Party Services

We use the following third-party infrastructure services in operating the Cogitant AI Exposure Index™. Each service has its own privacy policy governing their data handling.

• Cloudflare Pages / Cloudflare Workers. Our hosting and routing infrastructure. Cloudflare receives web traffic metadata including IP addresses as part of normal CDN operation. See Cloudflare's Privacy Policy.

We do not use Google Analytics, Meta Pixel, or any other behavioral tracking service.

6Colorado Privacy Rights

The Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., provides Colorado residents with certain rights regarding their personal data. To the extent the CPA applies to your use of this tool, you have the right to:

• Know whether we process personal data about you;
• Access the personal data we hold about you;
• Correct inaccurate personal data;
• Delete personal data we have collected from you;
• Opt out of the processing of personal data for targeted advertising or sale (we do neither).

To exercise any of these rights, contact us using the information in Section 10. We will respond within 45 days as required by the CPA. There is no fee to submit a request.

7International Users

The Cogitant AI Exposure Index™ is designed for use by organizations based in the United States. It is operated under Colorado law. If you are located outside the United States, you access this tool at your own risk and acknowledge that US law — not the laws of your home jurisdiction — governs this Privacy Policy and any dispute arising from it.

We do not currently offer a GDPR-compliant version of this tool. If international deployment becomes part of our service model, this policy will be updated and an international data processing addendum will be added prior to any marketing or delivery outside the United States.

8Children

The Cogitant AI Exposure Index™ is a professional organizational assessment tool intended for use by adults in their capacity as organizational leaders, board members, consultants, or advisors. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted data through this tool, please contact us and we will delete it promptly.

9Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in an updated version number and effective date in the header of this page. If you continue to use the Cogitant AI Exposure Index™ after a revised Privacy Policy is posted, you accept the revised terms.

Prior versions of this Privacy Policy are available upon request.

10Contact

Questions about this Privacy Policy or requests to exercise your Colorado Privacy Act rights may be directed to:

Cogitant Partners, LLC
Attn: Privacy — AI Exposure Index™
Colorado Springs, Colorado, United States
info@cogitantpartners.com
+1-719-337-6856

We aim to respond within 5 business days for general questions and within 45 days for formal CPA rights requests.