Privacy Policy

Overview

This Privacy Policy describes how Concord ("we" or "us") handles personal information when you visit our websites, browse the Concord Index, request a Concord Index report, or contact us. The Concord Index is a public research site. It is not an employee surveillance or employment-screening service, and it does not require an account.

Information we collect

We may collect:

• Report request data: the work email and company name or website you submit when you ask for a Concord Index report, plus the Index page that originated the request. Requests are emailed to the Concord team. They are not stored as Index database records.
• Contact data: your name, work email, message, and any separately selected marketing or conversation preference.
• Concord Index research data: public web pages and sources used for a report, attributed excerpts, report calculations, and correction requests. Public sources may include professional information about company leaders when it is relevant and clearly attributed.
• Technical data: device or browser information, IP address, bot-detection results, and logs used for security, rate limits, reliability, analytics, and debugging. Where daily limits apply, Concord may derive a rotating keyed value from an IP address without placing the raw address in the quota record.

How we use information

We use personal information to:

• Provide, maintain, secure, and improve the Services;
• Review Concord Index report requests, research public company sources when we decide to run a report, preserve versioned results, and review correction requests;
• Deliver requested reports when we run them and respond to business, support, legal, privacy, security, press, and partnership inquiries;
• Send marketing only when a person makes a separate marketing choice;
• Comply with law and enforce our terms; and
• Analyze aggregated or de-identified information to understand and improve the Services.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use visitor form submissions to train third-party general-purpose AI models. If a future feature would use content for model training, we will disclose that use and obtain consent where required.

Public Concord Index

A requested company may produce a public report when Concord runs the research and the report meets our evidence and publication requirements. Published reports identify their public sources and may be indexed by search engines. Incomplete reports remain unindexed. Reports compare public company positions with model responses under a disclosed protocol; they do not profile employees or reveal a model's private beliefs.

Optional personal answers in the Index quiz stay in your browser and do not alter a company's public profile. Requesting a report by email does not subscribe you to marketing. Marketing messages and a sales conversation require separate choices. Concord does not use the Concord Index to make legally significant automated decisions about individuals.

AI and search providers

Concord uses service providers to discover public sources, analyze bounded source material, and run the published model benchmark. Those providers process the prompts and source content needed for the requested feature under their applicable service terms and our configuration. Concord Index forms are not designed to receive private workplace content, passwords, API keys, or other secrets.

Sharing

We share personal information with service providers who process it on our instructions, including providers for hosting, analytics, bot detection, search, AI inference, email delivery, and security. We may disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition with appropriate safeguards.

Cookies and analytics

We use cookies and similar browser storage for security, preferences, consent, and service operation. Analytics cookies load only after you Accept in the consent banner. When analytics is enabled, PostHog helps us measure page visits and product use, and Google Analytics may measure page views and a limited set of conversion events. On Concord Index pages, we disable autocapture, session replay, and rage-click capture. Verification links are excluded from Google Analytics, and email addresses, submitted company names or websites, contact messages, and optional visitor quiz answers are not included in our analytics events. You can change or clear browser storage in your browser settings, and you can decline analytics without losing access to the Index.

Legal bases

Where applicable law requires a legal basis, we process information to perform a contract or take requested steps, for legitimate interests such as operating and securing the Services, with consent for optional marketing and analytics, or to comply with legal obligations. You may withdraw consent at any time without affecting earlier processing.

Retention

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may depend on applicable law. Public report snapshots and their cited evidence may be retained to preserve versioned links and the integrity of published results. Report-request and contact emails are handled through our email provider according to our operational retention practices.

Security

We use technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure. Do not submit passwords, API keys, or other secrets through Concord Index or contact forms.

Your choices and rights

Depending on where you live, you may have rights to know or access, correct, delete, or export personal information, or to object to or restrict certain processing. We will verify requests as required by law and will not discriminate against you for exercising a privacy right. You may also have the right to lodge a complaint with a supervisory authority.

Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them.

International transfers

If information is processed outside your country, it may be subject to different data-protection laws. We use safeguards required by applicable law for restricted international transfers.

Changes

We may update this Privacy Policy. We will post the revised policy and update the date above. For material changes, we will provide additional notice when appropriate.

Contact

Send privacy questions and rights requests through the contact form. Our Terms of Service apply to use of the Services.