Privacy Policy
Last updated: July 2026 · LHS Legacy Hub × VibeScribeIQ
1. Data We Collect
When you create an account and use LHS Legacy Hub, we collect and store the following information: • Account data: your full name and email address. • Assessment data: your GDDI assessment responses, scores, and the resulting archetype profile. • Learning data: your portal progress, completed lessons and exercises, journal entries, and course progress. • Coaching data: coaching session bookings (with the coach calendar) and your session notes. • Certificate records: certificates issued to you, including verification codes. • Usage data: aggregated, anonymized analytics about how you navigate the platform. • Behavioral signals: in-app interaction patterns (lesson pacing, exercise completion cadence, journaling frequency) used to personalize recommendations and monitoring. We do not collect sensitive biometric data, payment card numbers (those are handled by our payment processor), or data from third parties without your consent.
2. How We Use Your Data
Your data powers the personalized learning experience at the heart of LHS Legacy Hub: • Personalized learning: your assessment results and progress shape the lessons, exercises, and portals recommended to you. • Archetype matching: your GDDI scores and conditioning profile are used to map your archetype and growth path. • Recommendations: the AI Essence engine uses your context to suggest courses, exercises, and reflections relevant to your stage. • Coaching: your coach uses your assessment and progress data to deliver focused sessions. • Certificates: we issue and verify certificates based on your completed coursework. • Platform improvement: aggregated, de-identified usage data helps us improve content, fix issues, and prioritize new features. • Research: de-identified assessment, journal, and behavioral data supports the LHS 360 peer-review prospectus and framework validation. We never sell your data to third parties.
3. Third-Party Services
We use trusted third-party services to operate the platform. Each processor has its own privacy and security practices: • Stripe / Wix Payments — processes payments for courses, coaching, and subscriptions. Card data never touches our servers. • Resend — delivers transactional emails (coaching confirmations, support replies, certificate notices). • Wix CMS — hosts public site content and certain plan/pricing data. • Google Workspace (Gmail + Calendar) — powers coaching session invites and reminders via the connected coach calendar. • OpenAI / Google AI models — power the AI Essence assistant and content generation; inputs are processed per the model provider's policies. We share data with these providers only as needed to deliver the service you requested.
4. Your Rights
Depending on where you live (GDPR, CCPA, and similar laws), you have the right to: • Access: request a copy of the personal data we hold about you. • Modify: correct inaccurate information such as your name or preferences. • Delete: request erasure of your account and associated data, subject to legal retention requirements. • Portability: receive your data in a structured, machine-readable format. • Object: restrict or object to certain processing of your data. • Withdraw consent: withdraw consent for optional processing at any time. To exercise any of these rights, email support@lhslegacy.com. We respond within 30 days.
5. Data Retention
We retain your data for as long as your account is active. After account deletion: • Assessment scores, journal entries, and certificate records are deleted within 30 days. • Anonymized, aggregated analytics may be retained indefinitely. • Records required for legal, accounting, or tax purposes (e.g. payment receipts) are retained as required by law, then deleted. You can request earlier deletion of specific data by contacting support.
6. Cookies & Local Storage
We use cookies and local storage (including IndexedDB) to: • Keep you signed in and remember your session. • Cache your GDDI profile and queued offline actions so the app works without a connection. • Remember preferences like theme and display name. • Measure aggregated usage through analytics. You can disable cookies in your browser; the app will still function but some features (offline mode, saved preferences) may be limited. We do not use cookies for cross-site advertising.
7. GDPR & CCPA Compliance
This policy complies with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as well as similar state privacy laws. • Lawful basis (GDPR): we process your data based on contract performance (delivering the service), legitimate interests (improving the platform), and consent (optional analytics) — each described in this policy. • "Sale" of data (CCPA): we do not sell personal data and do not share it for cross-context behavioral advertising. • California "Shine the Light" requests can be sent to support@lhslegacy.com. If you are located in the EU, UK, or California, you have the additional rights described in Section 4.
8. Security
We protect your data with industry-standard measures: encrypted transit (TLS), encrypted storage, scoped access controls, and audit logging. Access to personal data is restricted to authorized team members and processors who need it to operate the platform. No method of transmission or storage is 100% secure, but we work to protect your data using reasonable safeguards.
9. Account Deletion
You can delete your account at any time from your Profile page or by emailing support. Deletion removes your personal data within 30 days, except for records we are legally required to retain (such as payment receipts). Certificate verification records may be retained in anonymized form so previously-issued certificates remain verifiable.
10. Changes to This Policy
We may update this policy as the platform evolves. Material changes will be announced in-app and the "Last updated" date above will reflect the revision. Continued use after a change constitutes acceptance of the updated policy.