Privacy Policy

1. Who we are and what this policy covers

The Execution Index is operated by Unleash Epic, LLC, an Oregon limited liability company ("Unleash Epic," "we," "us," or "our"). This policy covers the Execution Index platform at xi.unleashepic.com, including the Execution Index assessment, the Systems Intelligence assessment, the reports and documents the platform generates, the team and consultant surfaces, and the marketing pages on that domain.

Our main company site at unleashepic.com has its own privacy policy covering the consulting business. This policy governs the platform.

Questions about anything here go to john@unleashepic.com.

2. What we collect

Grouped by where it comes from, so you can see exactly what sits in the database.

2.1 Account information

Your first and last name, your email address, and your password. Your password is stored as a bcrypt hash, so we cannot read it and cannot recover it for you. We also record sign-in activity: the number of times you have signed in, the timestamps of your current and previous sign-in, and the IP addresses those sign-ins came from. That record supports account security and abuse investigation.

2.2 Profile information you provide

Job title, company, company size, and industry. These are optional context that sharpens how your results are interpreted.

2.3 Assessment responses and scores

We store your answer to every item you complete, along with the scores derived from those answers. Two points deserve to be stated plainly:

• The Execution Index includes personality items. It contains standard Big Five personality self-report items (openness, conscientiousness, extraversion, agreeableness, emotional stability) and growth-orientation items (self-awareness, learning orientation, adaptation willingness). Your answers to those items and the scores calculated from them are stored on your account and used in your reports.
• The Systems Intelligence assessment collects your perceptions of your organization. Its items ask how you experience your organization's leadership, governance, data, technology, workforce, and return on investment practices. Those answers are about your employer, and they are treated with the same confidentiality as everything else.

We store item-level answers, per-dimension scores, per-phase scores, and your overall score. Item-level answers are what make a report specific to you rather than generic.

2.4 Workflow inventory

If you complete the workflow inventory, we store the tasks you log, the weekly hours band you choose for each one, your friction rating from one to five, and any optional note you write. Notes are free text, so please keep confidential client or employer detail out of them.

2.5 Team information

Team memberships, your role on a team, and invitations. When you invite a colleague, we store the email address you entered and an invitation token that expires after thirty days.

2.6 Campaign attribution

If you arrive through a campaign link, the utm parameters on that link (source, medium, campaign, term, content) are held in your session and copied onto your account when you register. That is how we know which outreach brought you here. It is first-party attribution held by us.

2.7 Purchase records

When you buy something, we store a Stripe customer reference, a checkout session reference, and what was unlocked. Payment is handled on Stripe's own hosted checkout pages. Card numbers, expiry dates, and security codes are entered on Stripe's pages and never reach our servers. We hold no card data of any kind.

2.8 Applications and interest forms

If you apply to join as a consultant, we store your name, email, firm, and the background and motivation you write. If you register interest in a feature that is not yet released, we store your email address and which feature you asked about.

3. How the team model protects individuals

This is the part most people want to know about, so here is the promise the product itself prints before you answer a single item:

The workflow inventory carries the same promise: "What you log here is yours. Your leader and teammates see only the combined, team-level picture." Your personal report repeats it: "This report goes to you alone. Your team and leader see only combined, team-level results."

Here is how that is enforced rather than merely stated:

• Individual answers are never rendered to leaders, teammates, or consultants. No team surface, report, or deck in the platform displays another person's item-level answers.
• Team surfaces carry bands and counts. Team-level readings are expressed as ranges and headcounts. Per-member scores are not part of what a team view receives.
• Systems readings need at least three respondents. Until three people on a team have completed the systems assessment, the team-level reading for that layer reports as "not yet measured" instead of showing anything.
• Teams under ten members get blended work views. On a small roster, workflow detail is blended across the whole team. Member counts, occupation titles, per-task hours, and per-task friction ratings are withheld, because on a roster that size those details could be traced back to a person.
• The team data package physically carries no individual identity. The internal data structure that feeds every team report and every consultant view contains no member names, no email addresses, and no per-member scores. Those values are not in the structure at all, so a downstream report cannot print them even by mistake.
• Automated tests enforce it. Our test suite walks every value in the team data package and fails the build if a member name, a leader identity, or a raw individual score appears anywhere in it. The same suite checks that small-roster reports drop the per-task specifics. These tests run on every change.

Your own personal materials are a different matter by design. Your report, your playbook, and your plan are yours, they carry your name, and they are delivered to you.

4. How we use your data

• To deliver your results. Scoring your assessment and generating your reports, playbook, plan, and documents.
• To produce team-level readings under the rules in section 3.
• To send service email. Your results, team invitations, purchase receipts, and notices about your account. These are part of the service you asked for.
• To send follow-up and marketing sequences. You can opt out at any time. See section 10.
• To process payments through Stripe.
• To improve the instrument. We look at response patterns in aggregate to refine item wording, scoring, and content. This work uses combined figures across many respondents and does not involve publishing anything about an identifiable person.
• To operate and secure the platform, including diagnosing faults and investigating abuse.

Share links. When you share your results, the platform creates a share link containing a random token. Anyone holding that link can view the shared report without signing in. Treat a share link as public and only send it to people you intend to see your results.

5. Who we share it with

We do not sell personal data. We have never sold it and we do not trade or rent it.

We do use a small number of service providers to run the platform. Here is the complete list, what each one is for, and what it actually receives.

These providers act on our instructions and are permitted to use your information only to provide their service to us.

5.1 Consultants

If your team engages a consultant through us, that consultant sees team-level readings under the rules in section 3. For the individual members assigned to them, they also receive the individual materials the platform is designed to hand a coach, which are built to brief a professional working with that person. Consultants are independent professionals of record. They are responsible for their own advice and for their own handling of client material, and they are bound by the obligations in our Terms of Service. Consultants may also connect their own CRM or automation tools, in which case we deliver their clients' readings to those systems automatically, and the consultant's own privacy obligations govern what happens to the material there.

5.2 Legal requirements

We may disclose your information if required to do so by law, or in response to a valid request by a public authority such as a court or government agency.

5.3 Business transfers

If Unleash Epic is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will give notice before your information is transferred and becomes subject to a different privacy policy.

6. Artificial intelligence

Every report, document, score, and recommendation the platform produces is generated from your assessment data by our own authored logic running on our own servers. Fixed scoring weights, authored content matrices, and deterministic templates do the work. The same inputs always produce the same document.

We do not send your assessment answers, your written notes, or your report content to a third-party AI model in order to produce your materials. This describes the platform as it operates today. If we add a feature that uses an outside model on your data, we will describe it here and update the date at the bottom of this page before that feature goes live.

Consultants sometimes use their own AI workspaces to draft client documents. The consultant kit we issue them sets the rule directly: "Get the client's consent to third-party AI processing before you upload their profile." The kit also requires a business or enterprise workspace rather than a personal free account, requires that profiles stay first-name only, and requires deletion of profile files when the engagement ends. Those are professional obligations we place on consultants. They are not controls we can enforce inside the consultant's own tools.

7. Cookies and local storage

The platform runs no advertising pixels, no analytics scripts, no session recording, and no cross-site trackers. What we do use:

• A session cookie. Encrypted, signed, and marked secure. It is required to sign in and stay signed in, and it also carries your campaign attribution during your visit.
• A remember-me cookie, if you choose to stay signed in.
• A cross-site request forgery token, which protects forms from being submitted by another site.
• Your theme preference, stored in your browser's local storage so light or dark mode survives a reload. It never leaves your browser.

Two third-party requests do happen on page load: font files from Google Fonts, and videos on marketing pages from GoHighLevel's content network. Both are described in the table in section 5.

8. How long we keep your data

We keep your data while your account is active, because your score history and your reports are the product. When your account is deleted, we delete your assessments, your item-level responses, your scores, your workflow inventory including any notes, and your team memberships.

Generated PDF documents are cached on our own servers to avoid re-rendering them, and those caches expire within ninety days.

Copies already delivered elsewhere follow that destination's retention. An email that has been sent has been sent. Records held in our marketing CRM, in our follow-up service, and in Stripe's payment records persist under those services' own retention rules, and removing them is a manual request. Write to john@unleashepic.com and we will process it. Records you submitted without an account, such as a feature interest registration or a consultant application, are removed on request.

9. Where your data is processed

Unleash Epic is based in Oregon, United States, and the platform and its database run in the Oregon region of our hosting provider. If you use the platform from outside the United States, your information is transferred to, stored in, and processed in the United States. By using the platform you consent to that transfer.

10. Your rights and choices

If you live in California or another state with a comprehensive privacy law, you have rights to know what personal information we collect, to access it, to correct it, to delete it, and to opt out of its sale. We do not sell personal information. Exercise any of these rights by writing to john@unleashepic.com and we will verify your request and act on it within the time the law allows.

We will not deny you service, charge you a different price, or give you a lesser experience because you exercised a privacy right.

11. Age

The platform is built for working professionals and is not intended for anyone under 18. You must be 18 or older to create an account. We do not knowingly collect information from children. If you believe a minor has created an account, write to us and we will remove it.

12. Security

Our technical practices are described in detail on the Security and Data Handling page. We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this policy. When we do, we will post the new version on this page and change the date below. If a change materially affects how we handle your data, we will say so plainly rather than relying on you to notice the date.

14. Contact

Unleash Epic, LLC
Email: john@unleashepic.com
Web: unleashepic.com