Privacy Policy

1. Who We Are

Project Limitless, LLC ("Project Limitless," "we," "us," or "our") operates the MFI psychometric assessment platform, Vision Blueprint coaching methodology, and related organizational tools accessible at projectlimitless.com and any associated applications (collectively, the "Platform").

By using the Platform, taking the MFI assessment, or engaging with our coaching services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Information We Collect

Assessment Data. When you take the Mindset Factors Index, we collect your responses to assessment questions and the processed outputs generated from those responses, including your assessment report, personalized narrative, and any supplemental reports included in your engagement. This information is collectively referred to as your "Assessment Data."

Personal Information. We collect your name, email address, phone number (if provided), company name, job title, and any other information you provide when registering for the Platform or engaging with our services.

Coaching and Session Data. If you engage in Vision Blueprint coaching or Culture North Star sessions, we may record notes, vision statements, and coaching outcomes with your consent. You control what information is shared during these sessions.

Payment and Billing Information. When purchasing services, we collect billing name, address, and payment information. Payment processing is handled by third-party providers under written agreements. We do not store credit card numbers on our servers. Do not provide your Social Security number, driver's license number, or other government-issued identification through the Platform.

Usage Data. We automatically collect information about how you interact with the Platform, including IP addresses, browser type, pages visited, time stamps, and referring URLs, using industry-standard analytics tools.

Data minimization. We collect only the minimum personal information necessary to deliver the Platform and our services. We do not collect sensitive categories of personal data — such as health records, financial account details, or government identification numbers — through the Platform.

Data received from organizational clients. When a Client engages Project Limitless to administer assessments to its personnel, we may receive personal information about Respondents directly from that Client — such as name, email address, and job title — for the purpose of issuing assessment invitations. This data is handled under the same protections as information collected directly from Respondents. If you believe a Client has provided your information to Project Limitless and you have questions about how it is used, contact privacy@projectlimitless.com.

3. How We Use Your Information

To deliver services. Your Assessment Data is used to generate your MFI report and any supplemental reports included in your engagement. This is the core product you receive.

For coaching and development. If you engage in Vision Blueprint sessions, your assessment data informs the coaching process. Coaches receive only the data necessary for your engagement.

For organizational clients. If your employer or organization ("Client") has engaged Project Limitless on your behalf, your processed Assessment Data may be shared with authorized administrators at that organization. You will be informed of this relationship prior to taking the assessment. Administrators receive processed report outputs only — your individual question responses are never shared.

For product improvement. We may use de-identified, aggregated assessment data to improve our methodology, validate assessment performance, and conduct psychometric research. This data is anonymized and cannot be used to identify you.

For communications. We use your contact information to deliver assessment results, communicate about your services, and send relevant updates. We will not send marketing communications without your affirmative consent. You may opt out of any non-essential communication at any time by clicking "unsubscribe" in any email or by contacting privacy@projectlimitless.com.

4. Assessment Data — Special Protections

Psychometric assessment data is among the most sensitive personal data we handle. We apply the following protections:

• Individual question responses are never shared externally. Your responses to assessment questions are not disclosed to employers, coaches, or any third party. Only processed report outputs are shared with authorized parties.
• Assessment methodology is proprietary. The analytical frameworks, scoring logic, and report generation systems underlying the MFI are trade secrets of Project Limitless and are never disclosed.
• Assessment integrity verification is internal. The MFI includes validation measures to ensure result accuracy. Data generated by these measures is used solely for quality assurance and is not shared externally or used as the basis for adverse employment decisions.
• Human involvement in interpretation. Assessment outputs are designed to inform human judgment — not to replace it. Project Limitless does not make automated decisions with legal or similarly significant effects on individuals based solely on assessment outputs. Reports are interpretive tools intended to be reviewed with qualified human judgment.
• You have the right to your own data. You may request a copy of your Assessment Data and report outputs at any time by contacting privacy@projectlimitless.com.
• Artificial intelligence use. Certain report outputs — including personalized narrative components — may be produced with the assistance of artificial intelligence tools. AI is used as a production tool under human oversight. It does not independently make decisions about you, and all outputs are subject to the same confidentiality, ownership, and data protection obligations described in this Policy.
• No biometric data collection. The Platform does not collect, capture, store, or use biometric identifiers or biometric information as those terms are defined under the Illinois Biometric Information Privacy Act (BIPA) or any equivalent law. Psychometric assessment responses are not biometric data.

5. Sharing of Information

Service providers. We share information with trusted third parties who provide hosting, analytics, and payment processing services. These providers are bound by written agreements prohibiting them from using your data for any purpose beyond delivering the specific service to us.

Organizational clients. If you take the assessment as part of an organizational engagement, your Client's authorized administrators may access your processed report outputs. Individual question responses are never shared. This access is disclosed to you prior to taking the assessment.

Legal requirements. We may disclose your information as required by law, legal process, or to protect the rights, property, or safety of Project Limitless, our users, or others.

Business transfers. In the event of a merger, acquisition, or sale of all or a substantial portion of our assets, your information may be transferred as part of that transaction. We will provide notice prior to your information becoming subject to a different privacy policy.

We do not sell your personal information or Assessment Data to third parties, and we do not share it for cross-context behavioral advertising.

6. Aggregate and Research Use

Project Limitless may use de-identified, aggregated data derived from assessments to publish research findings, validate the MFI's psychometric properties, and improve our methodology. No individual is identifiable in any published research output. Academic collaborations are governed by written data sharing agreements that prohibit re-identification and require compliance with applicable research ethics standards. Where research involves human subjects, we will obtain any additional consents required by applicable law or institutional ethics review.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, role-based access controls, and regular security reviews. Access to personal data and Assessment Data is restricted to Project Limitless personnel and authorized contractors who have a legitimate business need and who are bound by confidentiality obligations. We do not permit any employee or contractor to access your individual question responses for any purpose other than resolving a documented technical issue with your specific assessment record.

While no system is completely secure, we take reasonable precautions to protect your data. In the event of a security incident affecting your personal data, we will notify you in compliance with applicable law — including the Illinois Personal Information Protection Act (PIPA), which requires notification in the most expedient time possible without unreasonable delay. If a breach affects more than 500 Illinois residents, we will also notify the Illinois Attorney General's office within 45 days of discovery of the breach, or when we notify affected individuals, whichever is sooner, as required by PIPA.

8. Data Retention

We retain your Assessment Data for as long as necessary to provide services and as required by applicable law. If you or your organization terminates an engagement with Project Limitless, we will retain your identifiable data for up to 36 months unless you request earlier deletion. After that period, data is either deleted or permanently anonymized. You may request deletion of your data at any time by contacting privacy@projectlimitless.com. Certain de-identified data may be retained indefinitely for research and product improvement purposes.

9. Your Rights

You have the following rights with respect to your information, subject to applicable law:

• Access: Request a copy of your Assessment Data and associated report outputs.
• Correction: Request correction of inaccurate personal information we hold about you.
• Deletion: Request deletion of your personal information and Assessment Data.
• Portability: Request your Assessment Data in a commonly used, machine-readable format.
• Opt-Out: Opt out of non-essential communications at any time.
• Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at privacy@projectlimitless.com. We will respond within 30 days (45 days for California residents). We may request verification of your identity before processing certain requests.

10. Notice for California Residents

This section applies to residents of California and supplements the rest of this Privacy Policy. It is provided in compliance with the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA").

Categories of personal information collected. In the preceding 12 months, we have collected: identifiers (name, email, IP address); professional or employment-related information (company name, job title); and inferences drawn from assessment responses used to create a profile about your characteristics and behavior (your assessment report and outputs).

Sensitive personal information. Under CPRA, psychometric and psychological data may qualify as "sensitive personal information." We collect inferences about your characteristics through the assessment process. We use this information only to provide the services you have requested. We do not use or disclose your sensitive personal information for purposes beyond those permitted under CPRA. You have the right to limit our use of your sensitive personal information to purposes necessary to deliver the requested services — to exercise this right, contact privacy@projectlimitless.com with the subject line "Limit Sensitive Data Use."

Your California rights. As a California resident, you have the right to:

• Know what personal information we have collected, used, disclosed, and sold about you in the past 12 months.
• Delete personal information we have collected from you, subject to certain exceptions.
• Correct inaccurate personal information we maintain about you.
• Opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under California law.
• Limit use of sensitive personal information as described above.
• Non-discrimination. We will not discriminate against you for exercising any CCPA/CPRA rights.

How to submit a request. Email privacy@projectlimitless.com with the subject line "California Privacy Request." We will verify your identity and respond within 45 days, with one possible 45-day extension upon notice.

Authorized agents. You may designate an authorized agent to submit requests on your behalf. We require written proof of authorization and may verify your identity directly.

Do Not Track. Our Platform does not currently respond to browser "Do Not Track" signals, as there is no uniform industry standard for doing so. We do not use cookies or tracking technologies for cross-site behavioral advertising. You can control analytics cookies through your browser settings.

11. International Users

The Platform is hosted in the United States and is intended primarily for users located within the United States. If you access the Platform from outside the United States, you consent to the transfer, storage, and processing of your information in the United States, where data protection laws may differ from those in your jurisdiction.

EU, UK, and Swiss users. Our Platform is primarily designed for U.S.-based users and engagements. We are in the process of implementing EU-U.S. Data Privacy Framework compliance and related safeguards for international data transfers. If you are located in the EU, UK, or Switzerland and have questions about how your data is handled, contact privacy@projectlimitless.com. We will work with you directly to address your rights and concerns under applicable law.

12. Cookies and Tracking

We use cookies and similar tracking technologies to operate the Platform, maintain your session, remember preferences, and analyze usage patterns. Cookies fall into the following categories:

• Essential cookies: Required for core Platform functionality, including authentication and security. These cannot be disabled without disrupting Platform operation.
• Analytics cookies: Used to understand how Users interact with the Platform in aggregate, to improve performance and usability. No personally identifiable information is shared with analytics providers for advertising purposes.
• Preference cookies: Store your settings and preferences for a better experience on return visits.

You can control cookie settings through your browser. Disabling essential cookies will impair Platform functionality. We do not use cookies to deliver targeted or behavioral advertising to you or to track you across third-party websites.

13. Automated Processing and Artificial Intelligence

The MFI assessment uses automated processing to generate reports and outputs from your responses. Certain report components — including personalized narrative outputs — may be produced with the assistance of artificial intelligence tools. AI-assisted processing is used to enhance the quality and personalization of your report; it does not autonomously make legal or similarly significant decisions about you.

All significant decisions made using assessment outputs — such as employment actions, coaching engagements, or organizational changes — require human review and judgment. Project Limitless does not use fully automated decision-making that produces legal or similarly significant effects on individuals without human involvement.

You have the right to request human review of any assessment output you believe is inaccurate or that you wish to contest. Contact privacy@projectlimitless.com to initiate a review. We will respond within 30 days.

14. Children's Privacy

The Platform is intended for individuals 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, contact us immediately at privacy@projectlimitless.com and we will take prompt steps to delete it.

15. Third-Party Links

The Platform may contain links to third-party websites. This Privacy Policy applies only to the Project Limitless Platform. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and through a notice on the Platform at least 14 days before changes take effect. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of the Platform after changes become effective constitutes acceptance of the revised policy. We maintain a version history of this policy; prior versions are available upon written request.

17. Contact Us

For questions, requests, or concerns about this Privacy Policy or your data:

Project Limitless, LLC
Deerfield, Illinois
Email: privacy@projectlimitless.com
Website: projectlimitless.com