Privacy Policy

This Privacy Policy describes how ANVIL (AI Navigation & Vocational Integration Layer) collects, uses, and protects your personal information. We believe in being straightforward about what we collect and why. No hidden tracking, no selling your data.

1. Information We Collect

Information You Provide Directly

Information Collected Automatically

Information We Do NOT Collect

We want to be explicit about what we are not doing:

• We do not use cookies for tracking or advertising.
• We do not use third-party analytics (no Google Analytics, no Facebook Pixel, no tracking scripts).
• We do not collect financial information (no credit cards, no bank accounts).
• We do not collect Social Security numbers or government ID numbers.
• We do not collect health information, medical records, or protected health information (PHI).

2. How We Use Your Information

We use the information we collect for these specific purposes:

• Career matching: Your quiz answers are used to calculate your niche match and generate your personalized roadmap.
• Lead nurturing: Your name and email are used to send you your roadmap, follow-up information about ANVIL programs, and relevant updates.
• Program enrollment: If you proceed to enroll in an ANVIL training program, your information is used to create your account and manage your participation.
• WIOA reporting: If you are a WIOA-funded participant, your progress and outcome data may be shared with your local workforce development board (see Section 4).
• Platform improvement: Aggregated, anonymized quiz data helps us improve our career matching algorithm and training content.
• Security: IP addresses and server logs are used to detect abuse, enforce rate limits, and protect the platform.

3. Legal Basis for Processing

We process your personal information based on:

• Consent: You actively submit your information through our quiz and lead form.
• Contract: Processing is necessary to provide you with the services you requested (career matching, roadmap delivery).
• Legitimate interest: Platform security, abuse prevention, and service improvement.
• Legal obligation: WIOA reporting requirements, if applicable to your participation.

4. Data Sharing

We do not sell your personal information. Period. We share data only in these limited circumstances:

WIOA Workforce Development Boards

If you are a WIOA-funded participant, we may share the following with your local workforce development board as required by federal and state WIOA reporting obligations:

• Your name and contact information
• Program enrollment and completion status
• Training progress and assessment results
• Employment outcomes (if you report them to us)

Service Providers

We may use third-party service providers to help operate the platform (e.g., email delivery, hosting). These providers are contractually obligated to protect your data and may only use it to provide services to ANVIL.

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

After the retention period, data is permanently deleted or irreversibly anonymized. You may request deletion before the retention period expires (see Section 7).

6. Cookies and Tracking

As of the effective date of this policy, ANVIL uses no tracking cookies, no third-party analytics, and no advertising pixels.

We may use essential cookies in the future (such as session cookies for logged-in users). If we do, we will update this policy and provide notice. We will never use third-party advertising or tracking cookies without explicit opt-in consent.

Your quiz results are stored in your browser's local storage to preserve your results during your session. This data stays on your device and is not sent to any third party.

7. Your Rights

You have the following rights regarding your personal information:

• Access: You can request a copy of all personal information we hold about you.
• Correction: You can request correction of inaccurate or incomplete information.
• Deletion: You can request that we delete your personal information. We will comply within 30 days, except where retention is required by law (e.g., WIOA reporting).
• Portability: You can request your data in a commonly used, machine-readable format.
• Opt-out of communications: Every email we send includes an unsubscribe link. You can also contact us directly to opt out.
• Withdraw consent: You can withdraw your consent for data processing at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request." We will respond within 30 days.

8. Data Security

We take reasonable measures to protect your personal information, including:

• Rate limiting: API endpoints are rate-limited to prevent abuse and brute-force attacks.
• Input sanitization: All user inputs are validated and sanitized before processing.
• API key authentication: Administrative endpoints require authentication.
• HTTPS: All data transmitted between your browser and our servers is encrypted using TLS.
• Access controls: Access to user data is restricted to authorized personnel on a need-to-know basis.

No system is 100% secure. While we take commercially reasonable precautions, we cannot guarantee absolute security. If we discover a data breach that affects your personal information, we will notify you as required by applicable law.

9. Third-Party Services

As of the effective date of this policy, ANVIL does not integrate with third-party analytics, advertising, or social media tracking services. If we add third-party integrations in the future, we will update this policy and clearly identify each service, what data it accesses, and why.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal information.

10. Children's Privacy

ANVIL is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us at [email protected] and we will promptly delete the information.

ANVIL's training programs are designed for adults (18+) who are entering or re-entering the workforce. Users between 13 and 18 must have parental or guardian consent.

11. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. You will not receive different pricing or service quality.
• Right to Opt-Out of Sale: We do not sell personal information, so this right does not currently apply. If this ever changes, we will provide a "Do Not Sell My Personal Information" link.

To exercise your CCPA rights, email us at [email protected] with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days.

12. International Users

ANVIL is operated from the United States. If you are accessing our platform from outside the United States, your information will be transferred to, stored, and processed in the United States. By using ANVIL, you consent to this transfer. We will take reasonable steps to ensure your data is treated securely and in accordance with this policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last updated" date at the top of this page.
• For material changes, we will notify registered users by email at least 14 days before the changes take effect.
• Previous versions of this policy will be made available upon request.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

ANVIL Privacy
Email: [email protected]
Subject line: "Privacy Inquiry"

We aim to respond to all privacy-related inquiries within 30 days.