Your responses are yours.
This policy explains what we collect, why, who processes it, and what you can ask us to do with it. Two commitments sit above the rest: we do not sell your data, and we do not give your results to your employer.
Shock Point, LLC (“ShockPoint,” “we,” “us,” or “our”) operates the EXCEED EXEC™ platform — including the Exceed Executive Index (EEI™), Exceed Coach, Exceed Voice Coach, and Exceed Journal (together, the “Platform”) — and the website at www.exceed-exec.com (the “Site”).
Read this before using the Platform or submitting an application through the Site.
1.Who and what this policy covers
This policy covers two groups:
- —Applicants — anyone who submits the application form on the Site.
- —Users — individuals who access the Platform via a personal invite link issued by ShockPoint. The Platform is not publicly available; access is granted only by direct invitation.
It does not apply to ShockPoint personnel, whose data is governed by separate agreements.
2.Data we collect
2.1 Application data (Site)
When you apply for a seat you provide your full name, work email address, and scope of role. Applications are read by the founder. We retain applications, whether or not a seat is offered, for 12 months after a decision.
2.2 Assessment data (Platform)
The EEI™ may be taken by either of two paths:
- —Structured instrument — a fixed questionnaire of 38 items (17 judgment scenarios, including 5 presented twice under composed and compressed conditions, plus 16 behavioral items), taking approximately 27 minutes. You provide item selections, not free text.
- —Narrative instrument and Depth Module — written responses to reflective prompts about your judgment, decisions, and leadership behavior under pressure, typically 200 or more words each. On the structured path, up to three depth prompts are offered after scoring as an optional extension; you may decline them and still receive your Brief.
Your narrative responses are sensitive. They describe your professional judgment in consequential situations, and we treat them accordingly.
2.3 Account and contact data
Full name, email address, job title, and — if you enable Voice Coach — your mobile phone number.
2.4 Coaching, journal, and workspace data
- —Coach session messages — text you enter in coaching conversations.
- —Journal entries — your decision logs and reflections.
- —Voice Coach audio — your spoken input during a Voice Coach call, and the system’s spoken responses (see section 5).
- —Workspace state — saved preferences and in-progress work you create in the Platform.
2.5 Data collected automatically
Device and browser information, IP address, access timestamps and session activity logs, and invite-link identifiers. Used for security, fraud prevention, and operational monitoring — never to build advertising profiles.
The Site is hosted on Squarespace, which sets cookies and collects analytics data independently of the Platform.
2.6 Payment data
Payments are processed by Stripe. ShockPoint does not store card numbers, bank details, or other payment instrument data. We receive only transaction metadata — status, transaction ID, and amount.
2.7 What we do not collect
Race, ethnicity, religion, or national origin; health, medical, or clinical information; or data from anyone under 18.
Voice. Voice Coach processes the sound of your speech in order to converse with you. We do not use your voice to identify you, we do not create or store a voiceprint or any other biometric template, and we do not match your voice against any database. See section 5.
3.How your assessment is scored — and who sees it
3.1 Scoring is deterministic, not generative
Structured EEI™ responses are scored by a deterministic engine that runs inside our own application. No AI model is called and no assessment data leaves our systems during scoring. The same responses always produce the same result. The engine version, item bank version, and statement bank version are recorded with every submission.
Narrative responses are interpreted with assistance from Anthropic’s Claude model — see section 4.
3.2 A trained human assessor reads your submission
Every Executive Readiness Brief is held before release and reviewed by a trained human assessor — at present, the founder. This means a person reads your responses before your Brief is issued. Review is limited to producing and quality-checking your Brief. We do not commit to a fixed turnaround time.
Because the founder personally operates the Platform, transactional emails — your application acknowledgement, purchase welcome email, and Brief delivery — are copied (blind-copied) to the founder’s own inbox. This is the same person doing the review described above, not a separate party; it is how a one-person operation keeps a record of what was sent, not a disclosure to any third party.
3.3 Your employer does not receive your results
Your responses, profile, and Brief are yours. We do not disclose your individual results to your employer, and we do not provide them to any third party for selection, promotion, or employment decisions. This holds even where your employer paid for your seat.
The Platform contains a cohort-reporting capability (“EEI Select”) that is disabled by default. It cannot be enabled before the instrument completes Phase-2 norming, and then only with authenticated access and a separately retained record of your written consent. Your results are never included without that consent.
3.4 The instrument’s current evidence status
The EEI™ is a pre-norming instrument. Its readiness bands are provisional, it is not a clinically or psychometrically validated instrument, it does not diagnose personality or predict performance, and it is not a lawful basis for an employment decision.
4.AI processing
| Where | Vendor | What is sent |
|---|---|---|
| Narrative interpretation and Brief drafting (narrative path) | Anthropic | Your narrative responses |
| Exceed Coach conversations | Anthropic | Your coaching messages and Brief-derived context |
| Voice Coach speech | ElevenLabs | Your spoken audio, streamed in real time |
| Journal search and retrieval | OpenAI | Your journal entry text, converted to embeddings |
| Structured EEI™ scoring | None | Nothing — scoring runs locally |
We have reviewed these vendors’ terms and rely on their commitment not to train models on data submitted through their APIs without separate consent.
5.Voice Coach and Board Mode
Voice Coach connects a telephone call to a conversational speech agent. Your call audio is streamed in real time through Twilio (telephony) to ElevenLabs (speech). To answer your questions, the system reads your EEI™ profile, readiness band, and recent decision entries.
Board Mode is the same kind of real-time conversation, run in your browser instead of over the phone: your microphone audio streams directly to ElevenLabs, with no telephony vendor in the path.
- —ShockPoint does not record or store your call audio, and does not store a transcript of your call. This applies to Voice Coach and Board Mode specifically — see the next paragraph for the one voice channel this does not cover. Audio is processed in transit to produce the conversation.
- —A spoken or written notice at the start of each session tells you how it is processed before the conversation begins.
- —Voice Coach is optional. You can use every other part of the Platform without it, and you can have your phone number removed at any time.
- —Neither Voice Coach nor Board Mode is an emergency service.
Coach by Voice is different, deliberately. Inside a typed Exceed Coach conversation, you can speak your turn instead of typing it. That spoken turn is transcribed and added permanently to that conversation, the same as if you had typed it — the product tells you this at the end of each spoken turn. It follows the same retention as the rest of your Coach messages (see the retention table in section 10), not the “not retained” rule above. Do not assume the “not retained” language for Voice Coach and Board Mode extends to this channel — it does not.
6.How we use your data
| Purpose | Data used | Basis |
|---|---|---|
| Evaluate your application | Application data | Legitimate interest / pre-contract |
| Deliver the EEI™ and produce your Brief | Name, email, assessment responses | Performance of service |
| Human assessor review before release | Assessment responses, draft Brief | Performance of service |
| Power Exceed Coach, Voice Coach, and Journal | Session messages, audio, journal entries, profile | Performance of service |
| Deliver your Brief by email | Name, email | Performance of service |
| Maintain your account and access | Name, email, title, phone | Performance of service |
| Process payments | Stripe transaction metadata | Performance of service / legal obligation |
| Improve the Platform | Aggregated, de-identified usage patterns | Legitimate interest |
| Instrument reliability and norming research | See section 7 | Consent |
| Legal compliance and support requests | As required | Legal obligation / legitimate interest |
We do not use your data for advertising, behavioral tracking, or sale to third parties.
7.Research, reliability, and norming
The EEI™ is being developed toward published reliability and norming evidence. That work uses assessment data from participating leaders.
- —Participation is by explicit, separate, opt-in consent, recorded and retained. It is not bundled into these terms or into purchase.
- —Declining does not affect your Brief, your Coach access, your price, or your standing in the cohort. You may withdraw at any time.
- —Research use is limited to de-identified responses and scores for statistical analysis. Individual responses are never published, and named case-study use requires separate written consent.
- —On withdrawal or deletion: we remove your data from any ongoing or future research use. De-identified data already incorporated into a completed analysis cannot be extracted from that analysis, because it is no longer linked to you. We tell you this at the point of consent, not afterwards.
8.Third-party processors
| Provider | Role | Data processed |
|---|---|---|
| Supabase | Database and backend (PostgreSQL) | Name, email, title, phone, assessment responses, Briefs, journal entries, coach messages, workspace state |
| Anthropic | AI for narrative interpretation and Coach | Narrative responses, coaching messages |
| OpenAI | Journal embeddings for search and retrieval | Journal entry text |
| ElevenLabs | Voice Coach and Board Mode speech | Call audio, in transit |
| Twilio | Voice Coach telephony | Phone number, call metadata, call audio in transit |
| Stripe | Payment processing | Payment instrument and billing data |
| Resend | Transactional email | Name, email, message content including your Brief |
| Squarespace | Site hosting, application form, analytics | Application data, Site usage data |
Each processes personal data only as directed by ShockPoint and only as needed to deliver its service. We do not sell your data to any of them or permit them to use it for their own commercial purposes.
9.Storage and security
Data is stored in Supabase-managed PostgreSQL with encryption at rest and in transit. Implemented controls:
- —TLS/HTTPS for all data in transit.
- —Row-level security on coaching tables. Your coaching session records are readable only by your own authenticated session; subscription records and application records are readable only by our server, never by a browser.
- —Hashed access tokens. Invite and portal links are stored only as SHA-256 hashes, expire (assessment links in 30 days; portal access in approximately 12 months), are single-use where applicable, and can be revoked.
- —Invite-only access — no public registration.
- —Assessment content, Brief content, and applicant details are excluded from application logs.
No security system is perfect. We cannot guarantee that unauthorized parties will never defeat these measures. If we become aware of a breach affecting your personal data, we will notify you without undue delay, and in any event as required by applicable law.
10.Retention
| Data | Retention |
|---|---|
| Declined applications | 12 months from decision |
| Account data (name, email, title, phone) | Life of the account, then 30 days |
| Assessment responses and Executive Readiness Brief | Life of the account, then 12 months |
| Depth Module responses | Life of the account, then 12 months |
| Coach messages, journal entries, workspace state — including any Coach by Voice turns you spoke rather than typed | Life of the account, then 12 months |
| Voice Coach and Board Mode audio or transcripts | Not retained by ShockPoint |
| De-identified research data | Retained while the research programme runs — see section 7 |
| Payment transaction metadata | 7 years (financial recordkeeping) |
| System logs | 90 days |
Expired and revoked access tokens are retained only as hashes and carry no usable credential. After the applicable period we delete or permanently de-identify your data. You may request earlier deletion under section 11.
11.Your rights
You may request access to the personal data we hold about you, correction of anything inaccurate, deletion, a portable copy, restriction of processing, and withdrawal of consent — including research consent under section 7, which does not affect processing already carried out.
We respond within 45 days. If we need longer we will tell you why within that period. If we decline a request we will explain the reason and how to appeal it.
Some jurisdictions give residents additional rights. If you believe you hold rights beyond those above, write to us and we will honor them where they apply.
We do not sell or share personal data as those terms are defined under U.S. state privacy law, and we do not use your data for targeted advertising or profiling.
To exercise a right, contact us using the details in section 14.
12.No sale of personal data
ShockPoint does not sell, rent, lease, or trade your personal data. We do not use it for advertising or behavioral profiling.
13.Children
The Platform is not directed at anyone under 18 and we do not knowingly collect their data. If we learn we have, we delete it promptly.
14.Contact
15.Changes to this policy
We may update this policy as the Platform evolves or as legal requirements change. For material changes we will notify you by email at the address associated with your account and update the “Last updated” date above. Changes that materially reduce your rights take effect no sooner than 30 days after notice.
Back to EXCEED EXEC™