top of page

Privacy Policy

Last Updated: October 2025​

​​

1. Who We Are

StrengthsBase (“we,” “us,” “our”) is operated by StrengthsBase LLC, registered in the State of Illinois, USA. We provide online tools and resources that support career and academic development for students and professionals.

If you have questions or requests about this policy, contact:
📧 info@strengthsbase.app

2. Information We Collect

We collect only the information needed to operate StrengthsBase and deliver personalized content.

SourceExamples of Data CollectedPurpose

Directly from youFirst name, email address, form responsesCreate your account, personalize your dashboard, send requested resources

AutomaticallyBasic technical data (browser type, device info, IP address)Maintain site security and performance

Through service providersWix (hosting & payments), Typeform (forms), Mailchimp (email delivery), Google Analytics (site metrics)Operate, communicate, analyze, and improve our services

We do not purchase, rent, or obtain personal information from data brokers.

3. How We Use Your Information

We use your information to:

  • Provide StrengthsBase services and site functionality.

  • Personalize your experience and deliver relevant resources.

  • Communicate with you about your account or platform updates.

  • Send newsletters to users who sign up or opt in (managed via Mailchimp; you may unsubscribe any time).

  • Maintain and improve website performance using Google Analytics and Wix Insights.

  • Process payments securely through Wix Payments (when enabled).

  • Detect, prevent, and respond to security or fraud issues.

We never sell or rent your information and share it only with trusted service providers who process it under contractual, GDPR-compliant data-protection terms.

4. Cookies and Local Storage

StrengthsBase uses only essential cookies and local-storage features required for secure logins and form auto-save.
We do not use advertising or tracking cookies.
If we introduce non-essential cookies (e.g., for advanced analytics), we’ll update this policy and seek consent where required.

5. Payments

When payments are enabled, transactions are processed by Wix Payments.
We do not store your full payment card details; that information is handled directly by Wix Payments under its own secure and PCI-compliant policies.
We retain a record of the transaction (amount, date, status) for accounting purposes.

6. Legal Bases for Processing

We process personal data only when we have a legal basis to do so:

  • Consent (for newsletter subscriptions or optional forms).

  • Contractual necessity (to deliver requested services).

  • Legitimate interest (to maintain security and improve our platform).

  • Legal obligation (when retaining records required by law).

7. Data Retention

We keep personal data only as long as necessary to operate StrengthsBase, fulfill the purposes described in this policy, or comply with legal obligations.
We periodically review and securely delete inactive records.

8. Security

We use industry-standard administrative, technical, and physical safeguards (including encryption in transit and at rest where supported) to protect your information.
If a security incident occurs that poses a risk to your data, we will notify you and any affected partners as required by law.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to withdraw consent to marketing emails.
Submit requests to info@strengthsbase.app.
We respond within applicable legal timeframes (e.g., 45 days under CCPA or GDPR).

10. International Users

StrengthsBase is based in the United States. When you use our services, your information is processed in the U.S.
For EU and UK users, our processors (Wix, Typeform, Mailchimp, and Google) apply Standard Contractual Clauses (SCCs) to protect transferred data and maintain GDPR compliance.

11. U.S. State-Level Privacy Rights

We comply with state privacy laws including California (CPRA), Colorado, Connecticut, Virginia, and Utah.
We do not “sell” or “share” personal information as defined by these laws and we do not collect “sensitive personal information.”

12. Children’s Privacy

StrengthsBase is intended for users 18 years of age or older.
We do not knowingly collect personal information from minors.
If we learn that we have inadvertently collected data from someone under 18, we will delete it promptly.

13. For Institutional Partners (Universities & FERPA Compliance)

For universities or colleges that contract with StrengthsBase:

  • StrengthsBase acts as a “school official” with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA).

  • We process student data only for the educational purposes defined by the institution and under its direct control.

  • We do not re-disclose education records or use them for advertising or any non-educational purpose.

  • We bind our sub-processors (Wix, Typeform, Mailchimp) to equivalent confidentiality and security obligations.

  • Institutions retain ownership of their students’ education records and may request export or deletion at any time.

  • Upon contract termination, StrengthsBase will delete or return institutional data and certify destruction of backups on request.

A full Data Processing Addendum (DPA) is available to partner institutions upon request.

14. Updates to This Policy

We may update this Privacy Policy from time to time. The revised version will be indicated by a new “Last Updated” date and posted on this page. Substantive changes will be notified to users by email or prominent site notice.

15. Contact Us

If you have questions about this policy or your data, please contact:
📧 info@strengthsbase.app

bottom of page