Privacy Policy

1. Who we are

EXD Score is operated by IDREAM ADVISORY SERVICES PVT LTD (F-56, Moongipa Arcade, New Link Road, Nr. D. N. Nagar Police Station, Andheri (West) Mumbai 400 053 - INDIA). This policy explains what personal data we collect through the platform, why, and who else sees it.

2. What we collect

Depending on how you use EXD Score, we collect:

• Company details: name, email domain, industry, logo, phone number, billing address, and tax registration numbers (GSTIN, if applicable) for invoicing.
• Admin and employee account details: name, work email, and (for billing contacts) phone number.
• Demographic context employees provide at signup: age range, gender, tenure, and (if the company has configured them) location and department.
• Assessment responses: answers to the 50-item survey, and the computed dimension/overall scores.
• Invoice and payment records: amounts, tax treatment, and the bank reference number you enter to report a transfer (we don't collect full bank account or card details through the app).

3. How we use it

Individual survey answers are used to generate that employee's own private report, and are aggregated into company-wide numbers for the admin dashboard. An admin never sees one employee's individual answers, and any group under 5 people is hidden entirely from breakdowns. Some reports (individual and company-level) are written with help from Anthropic's Claude AI model: the prompt sent to it includes an employee's name, their survey answers, and scores, but not their email address. Billing details are used only to generate invoices and set up your account.

4. Who we share it with

We use a small number of service providers to run EXD Score, each only for the specific job below (we don't sell or share your data for advertising):

• Supabase: hosts our database and file storage.
• Vercel: hosts the application itself.
• Anthropic: generates the AI-written portions of reports, as described above.
• Resend: delivers transactional emails (invoices, password resets, plan notifications) on our behalf.

Some of these providers may process or store data outside India. We choose providers with strong security and privacy practices for this reason.

5. How we protect it

Access to company data is restricted by row-level security in our database, so an employee or admin can only ever reach their own company's data through the app. Only a small number of cross-company reads (like anonymised industry benchmarks) exist, and those are deliberately built to suppress any group under 5 people. Our underlying database credentials are kept server-side only and never reach the browser.

6. Your rights

You can ask us to access, correct, or delete the personal data we hold about you or your company by emailing us at the address below. A company admin can already remove an individual employee (and their data) directly from the dashboard.

7. Retention

We keep account and assessment data for as long as your company's account is active, so that round-over-round comparisons keep working. If a company account is deleted, its employees, submissions, and reports are deleted along with it.

8. Contact

Questions about this policy, or a data access/deletion request: info@idream.in.