Privacy Policy

C3 Performance Systems, a division of CareOne Direct LLC ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website c3performancesystems.com and use our leadership assessment tools and services.

By accessing or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access our website or use our services.

Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact information (email address, phone number)
• Business or practice name and role/title
• Payment and billing information (processed securely through Stripe)
• Appointment booking details and scheduling preferences
• Assessment responses and survey data
• Account credentials and login information
• Communications you send to us

Automatically Collected Information

When you visit our website, we may automatically collect:

• Device information (browser type, operating system)
• IP address and general location data
• Pages visited and time spent on our website
• Referring website addresses

We use the information we collect to:

• Provide, operate, and maintain our services and assessment tools
• Process transactions and send related information
• Schedule and manage appointments and consultations
• Generate assessment reports and leadership insights
• Send administrative information, updates, and marketing communications
• Respond to your comments, questions, and requests
• Improve our website, services, and user experience
• Protect against fraudulent, unauthorized, or illegal activity
• Comply with legal obligations

We may share your information in the following situations:

• Service Providers: We may share your information with third-party vendors who perform services on our behalf, such as payment processing (Stripe), email delivery, and calendar integration (Google Calendar).
• Assessment Reports: Assessment results may be shared with designated individuals within your organization as part of the assessment process you have initiated or consented to.
• Legal Requirements: We may disclose your information where required by law, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may disclose your information for any other purpose with your consent.

Our website and services integrate with third-party services including:

• Stripe: For secure payment processing. Stripe's privacy policy can be found at stripe.com/privacy
• Google Calendar: For appointment scheduling. Google's privacy policy can be found at policies.google.com/privacy
• Google OAuth: For authentication services when you choose to sign in with Google.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

C3 Performance Systems uses Google Calendar API to provide appointment scheduling functionality for our consulting services. This section describes our use of Google user data in compliance with Google's API Services User Data Policy.

What Google Data We Access

When you connect your Google Calendar to our service, we access:

• Calendar Free/Busy Information: We read your calendar's busy times (not event details) to show available appointment slots to clients booking consultations.
• Calendar Event Creation: We create calendar events for confirmed appointments, including the client name, appointment type, and meeting details.

How We Use Google Data

We use your Google Calendar data solely to:

• Display accurate availability when clients book appointments
• Automatically add confirmed appointments to your calendar
• Update or cancel calendar events when appointments are rescheduled or cancelled

We do not:

• Read the content, titles, or details of your existing calendar events
• Share your calendar data with third parties
• Use your calendar data for advertising purposes
• Store your calendar data beyond what is necessary for appointment scheduling

How We Store and Protect Google Data

Your Google OAuth credentials (access tokens and refresh tokens) are stored securely in our encrypted database. These tokens are used only to communicate with Google Calendar on your behalf and are never shared with third parties. Access tokens expire regularly and are automatically refreshed only when needed for appointment scheduling functions.

Revoking Google Calendar Access

You can disconnect your Google Calendar from C3 Performance Systems at any time through:

• Our Admin Panel: Navigate to the Calendar Integration section and click "Disconnect Calendar"
• Google Account Settings: Visit myaccount.google.com/permissions and remove C3 Performance Systems from your connected apps

When you disconnect, we immediately delete your Google OAuth tokens from our database. Any appointments previously created on your calendar will remain unless you delete them manually.

Limited Use Disclosure

C3 Performance Systems' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure storage of sensitive information
• Limited access to personal data on a need-to-know basis
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Assessment data is retained to provide historical tracking and comparison features. You may request deletion of your data at any time by contacting us.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications at any time
• Data Portability: Request a copy of your data in a portable format

To exercise any of these rights, please contact us at privacy@c3performancesystems.com

We use cookies and similar tracking technologies to enhance your experience on our website. These may include:

• Essential Cookies: Required for the website to function properly
• Authentication Cookies: To keep you logged in to your account
• Analytics Cookies: To understand how visitors interact with our website

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our website.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at: