Privacy Policy

Overview

Leaders Building Leaders (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our leadership training platform at leadersbuildingleaders.org.

Information We Collect

We collect the following information when you register and use our platform:

• Account Information: Name, email address, phone number (optional), and encrypted password
• Organization Information: Company name (for team/enterprise accounts)
• Learning Progress: Module completion status, quiz scores, lesson progress, and scenario responses
• Usage Data: Login timestamps and general platform usage patterns

Information We Do NOT Collect

• Payment Information: All payment processing is handled by Square. We never see, store, or have access to your credit card numbers, billing address, or financial data.
• Tracking/Advertising Data: We do not use third-party advertising trackers, sell your data, or share it with data brokers.

How We Use Your Information

• To provide and maintain your access to the training platform
• To track your learning progress and generate completion certificates
• To allow organization administrators to view team progress (within their organization only)
• To send you a welcome email upon registration
• To send monthly leadership content emails (you may unsubscribe at any time)
• To respond to support inquiries

Data Security

We implement the following security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted via HTTPS/TLS
• Password Security: Passwords are hashed using bcrypt with 12 rounds of salting — we cannot see your password
• Database Security: Our database connections use SSL encryption
• Organization Isolation: Users in one organization cannot access data from any other organization
• Role-Based Access: Learners can only see their own progress; administrators can only see their own team
• Rate Limiting: Authentication endpoints are protected against brute-force attacks

Organization Administrators

If you are part of a team or enterprise account, your organization's administrator can view your name, email, module completion status, and quiz scores. They cannot see your passwords, personal reflection responses, or action step commitments. Administrators can only view members within their own organization.

Data Retention

We retain your account and progress data for the duration of your active license (1 year from activation). After your license expires, your data remains accessible for 90 days. After that period, inactive accounts and associated data may be deleted. You may request deletion of your account at any time by contacting us.

Third-Party Services

• Square: Processes payments. Subject to Square's Privacy Policy
• AWS (Amazon Web Services): Hosts our application infrastructure
• Neon: Hosts our database with encrypted connections
• Resend: Delivers transactional emails (welcome email, password reset)

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Unsubscribe from marketing emails at any time
• Export your progress data

Children's Privacy

Our platform is designed for professional adults in leadership roles. We do not knowingly collect information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The “Last updated” date at the top of this page indicates when it was last revised.