Privacy

Who we are

CFOsquared Inc. operates the GAAPx Score site. Our registered address is 12935 Alcosta Blvd, San Ramon, CA 94583. For privacy questions, write to hr@cfosquared.com.

What we collect

• Assessment and survey answers. When you take the self-assessment or answer a survey, we store your answers.
• Sign-in details. When you sign in to see your results, we store your email address and an encrypted password hash. This is the only point where we ask for contact details to open an account.
• Optional follow-up email. The sign-in screen has a box asking whether we may email you afterwards. It starts unticked. We email you only if you tick it.
• Messages you send us. If you write to support or send a contributor message, we keep it so we can reply.
• Browser storage. The site keeps a small amount of data in your browser to run. See "Cookies and analytics" below.
• Children's privacy. This site is designed for professionals. We do not knowingly collect personal data from anyone under 16. If we learn we have collected such data, we will delete it.

How we use it

• Your answers are used only in anonymised form, for example to show how workflows compare across companies.
• We never publish your name or your company name.
• Support and contributor messages are used only to reply to you.
• Follow-up emails are sent only to people who ticked the box.
• No sale or sharing: We do not sell your personal data, nor do we share it for cross-context behavioral advertising.
• Security: We use reasonable administrative and technical safeguards to protect your data from unauthorized access or loss.
• Legal basis (for EU/UK users): We process your data based on your consent (for example, ticking the follow-up email box), contractual necessity (to provide you with the assessment results), and our legitimate business interests (for example, basic site analytics and security).

Who handles your data for us

We use a small number of service providers to run the site. Each provider handles data strictly on our behalf.

• Supabase stores our database, including assessment and survey answers. [Supabase region]
• Vercel hosts the website.

International transfers: As a US-based company, data you provide is processed in the United States. We ensure service providers processing European data comply with adequate transfer safeguards (such as Standard Contractual Clauses or the Data Privacy Framework).

How long we keep it

We keep your assessment answers and account details for the life of your account. If you delete your account, or if your account is inactive for 2 years, we securely delete your data. Support and contributor messages are kept for 12 months after the ticket is closed.

Your choices

• Deletion. Ask us to delete your answers and we will remove them. Email hr@cfosquared.com from the address you signed in with.
• Analytics. You can change your cookie choice at any time with "Cookie settings" in the footer.
• Follow-up emails. Tell us at hr@cfosquared.com or use the unsubscribe link in any message.
• Other requests. To see, correct or export what we hold about you, write to hr@cfosquared.com. We will reply within 30 days.
• Non-discrimination. We will never discriminate against you or deny you service for exercising your privacy rights.
• Complaints. Depending on where you live (such as the EU or UK), you have the right to lodge a complaint with your local Data Protection Authority if you believe we are mishandling your data.

Changes to this page

If we change how we handle your data in a way that affects you, we will update this page and the date at the top. For material changes, we will also notify you via the email address associated with your account.

Cookies and analytics

We use a small amount of browser storage to run the site and remember your choices. The table below lists everything the site stores today, what it is for and how long it stays. It is the same list you see under "Cookie settings".

• Analytics and advertising. We do not currently use analytics or advertising cookies, and we do not load third-party trackers. If that changes, we will ask you first and list the tool here before it runs.
• Changing your choice. Select "Cookie settings" in the footer at any time to review your choice, allow analytics or withdraw it. Withdrawing stops new analytics data at once.
• Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as a request not to allow non-essential storage and keep analytics off until you choose otherwise. A choice you make yourself in the settings takes priority over the signal.
• Questions. Write to hr@cfosquared.com.