Privacy notice

Who is responsible

The Collective Confidence Index is provided by:

Team & Co LLC is responsible for deciding what information the assessment collects and how it is used.

Questions about this notice, or requests concerning your information, can be sent to andre@teamand.co.

What we collect

When you take the assessment

We collect:

• Your ten assessment answers and the scores and results calculated from them.
• Your answers to the optional context questions, if you choose to answer them: team size, how long the team has been together, your role, and whether you have read the book.
• Information about how the assessment is used: how far you got, timing, whether answers or context choices were changed, consent-screen actions, tie choices, and which result links you clicked.
• A random session identifier used to connect activity from the same assessment session.
• Technical request information handled by our hosting provider, including IP address, browser or user-agent information, requested URL and query parameters, referrer if supplied by your browser, timestamps, request identifiers, and routing region.

The online assessment does not ask for your name, employer, team name, or free-text assessment responses. The downloadable paper version has optional spaces for a name, team, and date; anything written there stays on the paper unless you choose to share it.

The on-screen result is calculated in your browser. After completion, the browser sends the answers and the information listed above to our server for storage and benchmarking. The assessment row does not contain your email address as a field. If you request the result and reminder emails, a separate contact record is directly connected to that assessment through an internal identifier while the contact record is retained. A newsletter-only contact is not given that direct response identifier.

If you provide an email address

Providing an email address is optional. You can see your complete result without providing one.

If you enter an email address, we collect:

• Your email address.
• Whether you asked to receive your result and a reminder to take the assessment again.
• Whether you separately chose to subscribe to the More Than the Sum newsletter.
• Delivery and processing information, including attempt times, provider identifiers, acceptance or failure status, error information, and the time a reminder was accepted for sending.

Those choices are separate and neither is selected by default.

If you request your result by email, your address and the result shown on screen—including the verdict and scores—are sent to Resend for delivery and then to your email provider. If you request the newsletter, your address is sent to Kit, associated with the newsletter form, and may be tagged as a Collective Confidence Index signup.

Provider failures are recorded and retried. Provider acceptance does not guarantee that a recipient mail system will deliver a message. Whether or not you use email has no effect on the result shown on the site.

How we use the information

Your browser calculates and shows the result. We store assessment information to:

• Maintain the completed assessment record and, where requested, produce the email version of the result.
• Understand how people use the assessment and improve it.
• Build an aggregate benchmark showing how teams tend to score.
• Understand differences in scores across broad team contexts, using the optional context questions.

If you provide your email address and ask us to do so, we may also use it to:

• Send your result and a reminder to take the assessment again.
• Send the More Than the Sum newsletter if you separately subscribe.

We do not sell your information, use it for targeted advertising, or share it with advertising networks.

About the benchmark

The benchmark is built from people who choose to take the Collective Confidence Index online.

It is intended as a practical, directional point of comparison. It is not a representative sample of all teams, a clinical or diagnostic measure, or a validated population norm. As more people use the assessment, the aggregate benchmark may change.

Assessment records used for the benchmark are stored without your name or email address in the assessment row itself. A random session identifier still connects the response to its usage events. If you request the result and reminder emails, an internal identifier directly connects the separate contact record to your assessment while that contact record is retained. Newsletter-only contacts do not receive that direct identifier.

Benchmark results are reported in aggregate. We do not publish individual assessment responses.

How long we keep information

Email addresses, consent records, and the connection to your assessment

Each contact record receives a deletion date 24 months after it is created. A daily database job removes records past that date. We may delete them sooner if you withdraw consent or ask us to do so. While the contact record exists, we can locate the assessment associated with your email address.

Deleting the contact record does not by itself remove a subscriber from Kit. Newsletter subscribers remain in Kit until they unsubscribe or ask us to delete the Kit profile. An unsubscribe stops newsletter mail but Kit may retain the subscriber's history; a full deletion request is handled separately.

Resend currently retains standard email data for 30 days. Delivered messages may remain in your inbox, your email provider's systems, and their backups until removed under their policies.

Assessment responses and related usage information

We may retain assessment answers, scores, optional context answers, session information, and related usage events for longer periods, including indefinitely, to operate and improve the assessment and build the aggregate benchmark.

When a contact expires after 24 months, the contact row and direct live-database connection are removed, but the assessment and related usage information remain. If you make a verified deletion request while the connection exists, we can also delete the linked response, session, and events.

Deleted information can remain temporarily in provider logs and backups. Supabase and Vercel retention periods depend on our service plan and configuration; old Supabase backups may contain a deleted row until that backup expires, and external log drains or exports may retain separate copies. After the contact link and those temporary copies expire, we may no longer be able to identify a particular assessment as yours.

Service providers

We use a small number of service providers to operate the assessment:

These providers process information on our behalf to provide their services to us.

The result page also offers optional links to IT Revolution and a pre-filled email to a Lead3r facilitator. If you follow the book link, IT Revolution receives normal request metadata and fixed referral tags. If you send the facilitator email, your mail provider and Lead3r receive your sender identity and the result summary in the draft. Those services act under their own notices for that interaction.

Our service providers may process information in the United States and other countries. We review the contractual and transfer safeguards required for the locations in which we offer the assessment.

Cookies and tracking

We do not use advertising cookies or third-party advertising analytics, and we do not track you across other websites.

The assessment does not load third-party fonts, analytics scripts, or advertising pixels. Requested emails necessarily generate operational delivery events such as acceptance, delivery, or bounce. We do not use open-pixel or link-click tracking for result and reminder emails.

Because we do not conduct cross-site tracking, the site does not behave differently in response to browser “Do Not Track” signals.

For testing and review versions of the site, we may store a small flag locally in your browser. It contains no personal information, is not used for advertising or tracking, and can be removed by clearing your browser data.

Your choices and rights

You can use the assessment and receive your result on the site without giving us an email address.

If you consent to receive email from us, you can withdraw that consent at any time. Newsletter emails include an unsubscribe link. To withdraw a pending reminder, delete a Kit profile, or request broader deletion, contact andre@teamand.co. We may ask you to confirm control of the address before acting on a request.

Depending on where you live, privacy law may also give you rights to:

• Ask what personal information we hold about you.
• Request a copy of it.
• Correct inaccurate information.
• Ask us to delete it.
• Object to or restrict certain uses of it.
• Request a portable copy where applicable.

We will honor applicable privacy rights based on where you live.

While your contact record remains connected to an assessment, we can locate and act on a request concerning that response. A full verified deletion request covers the live contact, response, session, and usage-event rows and any applicable Kit deletion. Provider logs, backups, and delivered mail expire or are removed under the limits described above. Once the contact connection and temporary copies have expired, we may no longer be able to identify which assessment response was yours.

For visitors in the UK and European Economic Area

Where UK or European data-protection law applies, the on-screen calculation happens locally in your browser. We rely on our legitimate interests to store completed assessment and limited usage information to operate and improve the assessment and create aggregate benchmark information, taking account of the limited and optional nature of the information collected.

We rely on your consent to send optional results, reminders, or newsletter emails. You may withdraw consent at any time.

You also have the right to lodge a complaint with the data-protection authority where you live. We would appreciate the opportunity to address any concern directly first.

Children

The Collective Confidence Index is intended for adults using it in a work or team context. We do not knowingly collect personal information from children.

Changes to this notice

This is an early version of the Collective Confidence Index and the tool may evolve.

If we materially change what information we collect or how we use it, we will update this notice and change the “Last updated” date above.