Privacy Policy

Effective Date: May 3, 2026 · Last Updated: May 3, 2026

J & J Howard Enterprises LLC, doing business as ProcessAIQ ("ProcessAIQ," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use the ProcessAIQ platform and services.

1. Information We Collect

1.1 Information You Provide

Account Information: Email address used to create your account and identify your reports.
Process Data: Business process descriptions, answers to assessment questions, and any additional information you submit for analysis. This may include descriptions of your business operations, systems, tools, team structure, and workflows.
Payment Information: Payment transactions are processed by Stripe. ProcessAIQ does not collect, store, or have access to your credit card numbers or bank account details. We receive only confirmation of payment status.
Communications: Information you provide when you contact us for support or feedback.

1.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns.
Device and Technical Data: IP address, browser type, operating system, device identifiers, and referring URLs.
Cookies and Similar Technologies: See our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To process your assessment, generate your AIQ Score and report, and deliver the Service.
AI Processing: Your process data is analyzed by our AI engine (powered by Anthropic's Claude API) to generate assessments. Your data is sent to Anthropic's API for processing and is subject to Anthropic's data handling policies.
Account Management: To manage your account, authenticate your identity, and provide access to your reports.
Payment Processing: To facilitate transactions through our payment processor (Stripe).
Service Improvement: To improve and develop the Service, including the accuracy of our AI assessments. We may use anonymized and aggregated data for this purpose.
Communications: To send you transactional emails (sign-in codes, report delivery, account updates) and, with your consent, marketing communications.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 Service Providers (Subprocessors)

We use the following third-party services to operate the platform:

Anthropic (Claude API): AI processing engine. Your process descriptions are sent to Anthropic's API to generate assessments. Anthropic's data handling is governed by their terms of service and privacy policy.
Supabase: Database hosting and user authentication.
Stripe: Payment processing. Stripe receives payment information directly and is PCI DSS compliant.
Vercel: Application hosting and deployment.
Cloudflare: DNS, domain management, and security services.
Resend: Transactional email delivery (sign-in codes, account communications).

3.2 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Retention

Retention periods for process data and reports vary by service tier:

AIQ Snapshot (Free): Process data and reports are retained for 30 days from the date of generation, after which they are permanently deleted.
AIQ Roadmap (Pro, $149): Process data and reports are retained for 12 months from the date of purchase. We will notify you 30 days before deletion.
AIQ Atlas (Premium, $499): Process data and reports are retained for 12 months from the date of purchase, subject to the resubmission limits described in our Terms of Service. We will notify you 30 days before deletion.
Enterprise: Process data and reports are retained for the duration of your subscription plus 90 days after cancellation to allow for data export.

Other data retention periods:

Account Data: Retained for as long as your account is active and for 12 months after account deletion.
Payment Records: Retained for 7 years as required for tax and accounting purposes.
Usage and Technical Data: Retained for up to 24 months, then anonymized or deleted.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls and authentication for all systems
Regular security assessments of our infrastructure
Limiting access to personal data to authorized personnel

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 All Users

Access: You may request a copy of the personal data we hold about you.
Correction: You may request correction of inaccurate personal data.
Deletion: You may request deletion of your account and associated data by contacting hello@processaiq.ai.
Data Portability: You may request an export of your data in a machine-readable format.

6.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to Know: You have the right to know what personal information we collect, use, disclose, and share.
Right to Delete: You have the right to request deletion of your personal information.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. If this changes, we will provide an opt-out mechanism.
Right to Limit Use of Sensitive Personal Information: You may direct us to limit the use of sensitive personal information.
Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise these rights, contact us at hello@processaiq.ai. We will verify your identity before processing your request and respond within 45 days.

6.3 Other U.S. State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Florida, Delaware, New Jersey, New Hampshire, Minnesota, Maryland, or another U.S. state with a comprehensive consumer privacy law, you may have rights similar to those described above, including the right to access, correct, delete, and obtain a portable copy of your personal information, and the right to opt out of certain processing activities.

To exercise these rights, contact us at hello@processaiq.ai. We will verify your identity and respond within the timeframes required by your state's law (typically 45 days, with the possibility of a 45-day extension where permitted).

6.4 European Users (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Our lawful basis for processing is legitimate interest (providing the Service you requested) and, where applicable, your consent. To exercise these rights, contact us at hello@processaiq.ai. You also have the right to lodge a complaint with your local data protection authority.

7. Data Breach Notification

In the event of a data breach involving your personal information, we will notify affected users and applicable regulatory authorities in accordance with applicable law, including Arizona's data breach notification requirements (notification within 45 days of discovery).

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it.

9. International Data Transfers

ProcessAIQ is based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Data Processing Addendum

For business customers requiring a Data Processing Addendum (DPA) or Standard Contractual Clauses for international data transfers, please contact us at hello@processaiq.ai. See processaiq.ai/legal/dpa for more information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before they take effect. The "Last Updated" date at the top of this policy indicates when the latest revision was made.

12. Contact Us

For privacy-related inquiries, data access or deletion requests, or complaints:

J & J Howard Enterprises LLC dba ProcessAIQ

Goodyear, Arizona, USA

Email: hello@processaiq.ai

Website: processaiq.ai