Privacy Policy

1. Scope

This policy applies to:

• https://h2htech.com
• Any associated corporate web properties operated by H2H Technology

This policy does not apply to Tutela by H2H product environments, customer-deployed systems, or self-hosted systems.

Those environments operate under separate agreements.

2. Information We Collect

3. How We Use Information

We use collected information to:

• Respond to inquiries
• Improve website functionality
• Maintain security and integrity
• Analyze site usage trends
• Review investor access requests and gated material engagement
• Provide access to gated assessments, planners, calculators, downloads, and other interactive resources
• Follow up about a gated resource when the respondent provides explicit access consent
• Calculate and display a directional AI readiness result from assessment answers
• Email an assessment report to a respondent who requests it
• Allow H2H to follow up about the assessment when the respondent provides explicit assessment-specific consent
• Calculate and display a customer-generated AI governance pilot measurement plan
• Email a pilot measurement plan to a respondent who separately requests it

We do not sell personal data, use data for behavioral advertising, or share data with third-party marketers.

AI Readiness Assessment scoring is automated from the response options selected by the respondent. It is a self-reported, directional result and is not an audit, certification, compliance finding, return-on-investment guarantee, readiness determination, or peer benchmark.

4. Cookies and Tracking

We use privacy-conscious analytics for anonymous page and CTA engagement on the public site.

Generic page analytics are suppressed on the gated assessment, planner, and resource-download routes. Their dedicated lifecycle analytics are limited to access acceptance, completed or failed download, and relevant start, completion or plan generation, print, email acceptance, and email failure events with the exact resource version and server-derived canonical path.

Tool answers, qualifiers, results, statuses, ratios, submission identifiers, personal information, browser URLs, query strings, and referrers are not included in gated-tool lifecycle analytics.

Approved investor access may also use a time-bound session cookie so private materials stay gated and activity can be logged on the portal side.

You can disable cookies via your browser settings, though private investor portal access requires the session cookie to stay active.

5. Data Sharing

We do not sell or rent your data.

• With infrastructure providers, including AWS, for hosting
• With email delivery providers used to send contact, investor access, and gated-resource access messages
• With email delivery providers used to send requested AI Readiness Assessment results
• With email delivery providers used to send requested AI Governance Pilot Measurement Plans
• When required by law
• To protect rights, safety, or security

When access to a gated tool is granted, H2H receives an internal contact-record message. The visitor does not receive an acknowledgment email at the access gate.

When an accepted request is for a downloadable resource, the site issues a short-lived signed grant and retrieves the selected PDF from private AWS storage. The grant and PDF are not placed in a public URL, and the application does not create a contact or token database for that download.

When a respondent requests an emailed AI Readiness Assessment report, the same message is sent to the respondent and copied to an H2H assessment inbox using blind carbon copy. The H2H recipient address is not disclosed in the message recipient list.

When a respondent requests an emailed AI Governance Pilot Measurement Plan, the message is sent to the respondent and copied to a configured H2H inbox using blind carbon copy. The H2H recipient address is not disclosed in the message recipient list.

We may share data only in the limited circumstances listed above.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purpose it was collected for or meet legal and compliance requirements.

Investor access requests, approvals, and material engagement logs may be retained to maintain a current record of who received what and when.

Gated-tool contact records are not written to an H2H application database, object archive, or CRM. Amazon SES and the H2H recipient mailbox retain an accepted access message according to their respective retention policies.

Downloadable H2H resource files are retained in a private, access-logged AWS object-storage bucket. That bucket contains the resource documents, not the contact record submitted at the gate.

AI Readiness Assessment answers and AI Governance Pilot Evidence Planner values exist only in the current page memory before optional email delivery and clear when the page is left or reloaded. If a respondent separately requests email delivery, Amazon SES and the respondent and H2H mailboxes retain the resulting message according to their respective retention policies.

7. Security

We implement reasonable administrative, technical, and organizational safeguards.

However, no system is 100% secure.

8. Your Rights

Depending on your location, you may have rights to:

• Access your data
• Request correction
• Request deletion

To exercise these rights, use the H2H contact form.

9. Third-Party Links

Our site may link to external properties, including Tutela by H2H.

We are not responsible for the privacy practices of those sites.

10. Children's Privacy

Our website is not intended for individuals under 13.

11. Changes to This Policy

We may update this policy periodically.

Updates will be reflected by the Effective Date.

12. Contact

H2H Technology, Inc.

5900 Balcones Drive #17542, Austin, TX 78731

Phone: 325-225-1544

Contact: Use the H2H contact form.