Agency addendum · not the marketing privacy page
Participant data for a Scale cohort.
Program seats: 1–24 at $199 each; 25–49 at $175; 50–99 at $160; 100+ at $145. A 100-seat order totals $14,500. Every seat includes the complete participant package. ZIP job access lasts two years; US Testing Center is included for one year, up to three tests. View pricing and included benefits.
What is collected
| Category | Examples | Required? |
|---|---|---|
| Identifiers | Seat code we issued. Buyer email on the order. Not a name, not an employee number, not SSN, not EDIPI | The seat code is how the office downloads the file |
| Assessment content | The 50 answers are read in memory to build a one-page PDF (composite and six domain counts). The answers are not written to the database. The PDF is held one year | Yes, to deliver the file. Then deleted |
| Technical | Cloudflare can see ordinary connection logs. We do not write an IP onto the seat. Wallet link token | Host logs, not a personnel file |
| Not collected | SSN, medical data, biometrics, camera, microphone, precise geo, USAJOBS passwords | — |
Ownership and roles
The agency keeps the map from seat code to person on its own systems. ALA does not receive that map. Completers sit in the browser. The office downloads the PDF. This is exploration and development support, not a qualification determination.
Who can see it
- Named agency admins on the order.
- ALA operators (founder and designated staff) on a need-to-know basis for support.
- Cloudflare, Stripe, Mailgun as subprocessors listed on the security statement.
- Not sold. Not used to train a public model from this cohort. Not posted to USAJOBS.
Retention, deletion, holds, records
- The one-page PDF is held one year so the office can download it, then deleted. We cannot rebuild that grade.
- Invoice, buyer email, and used or unused seat codes stay as the purchase record. The answers are not stored.
- A PDF still inside the year is deleted on a written request. We confirm that deletion. We cannot delete the copy already in the agency’s mail.
- FOIA / records: the agency is the records authority for the PDF it downloaded. ALA cannot produce a name roster. We do not have one.
- Breach: 72-hour notice to the named contact as in the security statement.
Reuse for algorithm development
Default for Scale: no. De-identified method research, if any, requires a separate written agency opt-in. This SKU is delivery of profiles and a cohort map, not a research grant.
Career-path reports and program activity
Program career-path reports use assessment domain results and a participant code. We retain the downloadable report for one year after completion, the same period as the office PDF. We do not retain raw answers for program sittings. Save your reports before their server copies expire.
Program completion summaries retain seat codes and activation/completion timestamps with order records. These summaries do not contain participant names, contact details, or answer records. The buyer keeps the name-to-seat roster in its own system. Completion metadata remains after the downloadable reports expire.
The private buyer wallet offers summary and seat-status CSV exports. These are activity records, not a participant-name roster or a measure of hiring outcomes. Buyer contact information is still used for payment and delivery.