Privacy notice

Who is responsible

CA Leadership OS is operated by Culture Architect. Contact details for privacy questions are published by the operator and must be completed before launch: [company legal name, address, privacy contact email].

For employee data inside a customer workspace, the customer organisation is the controller and Culture Architect acts as processor on its behalf.

What data we process

Account data: name, email address, preferred language, system role, job title, team and reporting line.

Assessment data: answers to health check questions. Answers submitted in anonymous campaigns are separated from the responding account and are only ever shown as aggregates above the configured minimum group size.

Development data: goals, cycles, reflections, stretch assignments, conversation notes and progress. Notes marked developer-private are visible only to their author.

Usage data: resource progress, and audit records of sensitive administrative actions.

Why we process it

To provide the leadership development service to your organisation, to secure the platform and prevent misuse, to administer subscriptions and billing, and to meet legal record-keeping obligations.

Who can see your data

Access is enforced per organisation. Members of one organisation cannot access another organisation's data. Personal development data is visible to the person and their active developer only. Company administrators see directory, team and organisational reporting; anonymous assessment answers are never shown individually.

Service providers

Hosting, database, authentication and file storage: Lovable Cloud. Payment processing: Stripe — card details are entered directly with Stripe and are never stored by CA Leadership OS.

Retention

Data is retained while the organisation's subscription is active. After cancellation, workspace data is retained for the period configured in organisation settings (default 12 months), audit records for 6 years, and personal development data for 36 months, unless a shorter deletion request is honoured.

Your rights

You can export a copy of your personal data at any time from Settings, and request correction or deletion there. Requests are recorded and reviewed by your company administrator. You may also contact the operator directly using the contact details above.