Provider: Alcazar Systems Ltd. ("Alcazar," "We," "Us," or "Our")

Alcazar Systems Ltd. is committed to protecting the privacy and security of the data entrusted to the VantageOS platform. Because VantageOS operates as deeply embedded infrastructure designed to analyze your organization’s strategic vulnerabilities and human capabilities, we process highly sensitive professional, operational, and performance data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use the VantageOS platform, including the 360 Perspective Tool, Strategy Hub, and Performance Modules.

Please note: In the context of global data privacy laws (such as GDPR or CCPA), the Client (your employer or the contracting organization) is the Data Controller of the Customer Data uploaded to VantageOS, and Alcazar Systems acts as the Data Processor.

1. INFORMATION WE COLLECT

To calculate "Speed to Capability" and provide our Contextual Intelligence, we collect several categories of data:

A. User Account and Administrative Data

Identity & Contact Details: Names, business email addresses, job titles, and login credentials of authorized users (e.g., C-Suite executives, HR administrators, managers, and employees).

Consultant Details: Information regarding approved independent consultants from the Specialized Consultant Network who are authorized by the Client to manage their environment.

B. Customer and Employee Data (Contextual Intelligence)

Performance & Skills Data: Information generated through the 360 Perspective Tool, including self-assessments, peer evaluations, and managerial reviews.

Proficiency Mapping: Data mapping individual employee capabilities against our proprietary 181-cluster taxonomy.

Strategic Inputs: Financial metrics, target implementation dates, and operational goals uploaded into the Pro-Forma Wizard or Strategy Hub.

Hiring & Pipeline Data: Resumes, behavioral interview feedback, and "Skills Confidence Scores" processed through the Strategic Matchmaker.

C. Automated Platform Usage Data

Telemetry & Log Data: IP addresses, browser types, device information, and interaction logs within the platform to monitor security, performance, and user navigation.

Integration Data: Where configured, data securely ingested from third-party Systems of Record (e.g., HRIS, electronic health records (EHR), or SCADA systems) to correlate capability health with operational KPIs.

2. HOW WE USE YOUR INFORMATION

We do not sell your personal information. We use the collected data strictly for the following purposes:

A. To Provide and Operate the Service

Establishing the "Baseline of Truth" regarding your workforce’s capabilities.

Calculating Speed to Capability (StC) metrics and identifying strategic "Capability Drag."

Powering the Socratic Learning Engine to deliver surgical, individualized learning modules.

Facilitating performance reviews and 6/12-month objective tracking.

B. Macro-Vertical Intelligence (Aggregated & Anonymized)

As outlined in our Terms of Service, we aggregate and strictly anonymize capability and performance data to generate "Macro-Vertical Intelligence."

This anonymized data is used to build Industry Platforms (e.g., Healthcare, Clean Energy, Advanced Manufacturing), establish "Sector Overlays," and calculate industry-wide benchmarks. No individual employee or specific Client will ever be identifiable in this aggregated data.

C. Security and Compliance

Auditing platform access to prevent unauthorized use.

Protecting the "Red Zones" of client data and mitigating security risks.

Ensuring compliance with our legal obligations and enforcing our Terms of Service.

3. HOW WE SHARE YOUR INFORMATION

We only share your data under strict operational or legal necessities:

With the Client Organization: Employee performance data, 360 reviews, and skill gaps are visible to authorized managers and administrators within your specific organization as dictated by your company's internal hierarchy and permissions.

With Authorized Specialized Consultants: If your organization has engaged an independent consultant from the Alcazar Network to implement or manage your VantageOS environment, they will have access to your data strictly governed by the agreement between your organization and the consultant.

With Trusted Service Providers: We use highly vetted, enterprise-grade third-party cloud infrastructure and security providers (e.g., AWS, Azure) to host and secure the platform. These providers are contractually bound to strict data protection standards.

For Legal or Regulatory Reasons: We may disclose data if required by law, court order, or governmental regulation, including cooperating with investigations into fraud or security threats.

4. DATA SECURITY POSTURE

Protecting the architectural blueprint of your organization is our highest priority. As an agile, early-stage platform handling sensitive capability data, VantageOS is built upon foundational enterprise security principles to safeguard your information.

Encryption: All Customer Data is encrypted in transit (via TLS) and at rest using industry-standard AES-256 encryption.

Access Controls: We employ strict Role-Based Access Control (RBAC) and a principle-of-least-privilege policy for our internal engineering and support teams.

Path to Compliance: While we are actively building toward formal, independent enterprise certifications (such as SOC 2 Type II and ISO 27001), our current infrastructure is hosted on highly vetted, top-tier cloud providers (e.g., AWS/Azure) that inherently maintain these rigorous global security standards. We are committed to evolving our internal compliance posture alongside our clients' regulatory needs in sectors like Healthcare and Advanced Manufacturing.

5. DATA RETENTION

Alcazar Systems retains Customer Data only for as long as the Client maintains an active subscription to VantageOS, or as required to fulfill the purposes outlined in this policy. Upon termination of the contract, the Client may request the export or deletion of their Customer Data. After a standard grace period, all raw Customer Data is permanently purged from our active servers, though anonymized, aggregated statistical data will remain part of our Macro-Vertical intelligence models.

6. YOUR PRIVACY RIGHTS

Depending on your jurisdiction (e.g., EEA, UK, California), you may have specific rights regarding your personal data, including the right to access, correct, or delete your information.

Important Note for Employees: Because VantageOS is an enterprise platform, your employer (the Client) is the Data Controller. If you are an employee of a Client and wish to exercise your data privacy rights, you must route your request directly through your employer’s HR or IT department. Alcazar Systems cannot independently delete or alter employee records without explicit instruction from the authorized Client administrator, as this would disrupt the operational integrity of the Service.

7. CHANGES TO THIS PRIVACY POLICY

As VantageOS evolves and we deploy new modules (such as advanced ROI Navigation or the Socratic Bridge), we may update this Privacy Policy. We will notify Client administrators of any material changes via email or an in-platform alert prior to the changes taking effect.

8. CONTACT US

For questions or concerns regarding this Privacy Policy or our data security practices, please contact our Privacy and Compliance Team: compliance@alcazarsystems.com