Privacy & Data Security Policy
Effective Date: [DATE OF PUBLICATION]
Last Updated: March 16, 2026
1. Introduction and Scope
Remidi Works, LLC is an Illinois limited liability company ("we," "us," "our," or "Remidi"). This Privacy and Data Security Policy describes how we collect, use, store, and protect information in connection with our website at remidiworks.com (the "Site") and our commercial strategy scoring, benchmarking, diagnostic, and advisory services (collectively, the "Services").
By accessing our Site or engaging our Services, you acknowledge that you have read and understood this Policy. If you are providing information on behalf of a company or other entity, you represent that you have authority to bind that entity to this Policy.
2. Information We Collect
We collect information through four distinct channels, each with different handling and use rules.
2.1 Information You Provide Directly
When you contact us, request a consultation, or engage our Services, you may provide us with:
- Contact information (name, email address, phone number, company name, title)
- Company information relevant to the engagement (business metrics, pricing data, internal performance data)
- Communications you send to us (emails, messages, feedback)
2.2 Information Provided by Investment Firm Partners
Private equity, venture capital, and other investment firms that engage our Services may provide us with information about their portfolio companies, including:
- Company names, websites, and basic business information
- Performance metrics and business data shared for diagnostic purposes
- Portfolio-level data for benchmarking and dashboard services
If you are a portfolio company and your investment firm has shared information about you with us, that information is governed by the terms of our agreement with the investment firm and by this Policy.
2.3 Information Provided by Portfolio Companies Directly
Portfolio companies that engage with us directly (whether referred by an investment firm or independently) may provide:
- Internal business metrics, pricing structures, and operational data
- Customer data in anonymized or aggregated form
- Sales, marketing, and customer success performance data
We treat information provided directly by portfolio companies with the same confidentiality protections as information provided through investment firm partners, as described in Section 4.
2.4 Information We Collect from Public Sources
A core component of our methodology involves the independent collection and analysis of publicly available information. This includes, but is not limited to:
- Company websites, including pricing pages, product descriptions, and marketing materials
- Third-party review platforms (such as G2, Capterra, and TrustRadius)
- Published case studies, press releases, and news articles
- Job postings and publicly available employee information
- Industry reports, conference presentations, and other public disclosures
- SEC filings, patent databases, and other public records
This publicly available information is collected independently by us and is not subject to client confidentiality restrictions. See Section 6 for details.
2.5 Information Collected Automatically
When you visit our Site, we may automatically collect:
- Device and browser information (browser type, operating system, device type)
- Usage data (pages visited, time on site, referring URLs)
- IP address and approximate geographic location
- Cookies and similar tracking technologies (see Section 8)
3. How We Use Information
We use the information we collect for the following purposes:
Service Delivery. To provide our Commercial Health scoring, diagnostic, benchmarking, and advisory services.
Benchmarking Database. To build and maintain our anonymized benchmarking database, which enables comparative analytics across companies and industries (see Section 4).
Research and Thought Leadership. To create aggregated, de-identified analytics, reports, and research publications that advance understanding of commercial strategy in B2B software and related industries.
Methodology Improvement. To refine and improve our proprietary scoring models, frameworks, and analytical methods.
Communications. To respond to your inquiries, provide service updates, and send marketing communications (where you have opted in or where permitted by law).
Site Operations. To operate, maintain, and improve our Site and understand how visitors use it.
Legal Compliance. To comply with applicable laws, regulations, and legal processes.
4. The Benchmarking Database, Anonymization, and Data Separation
This section describes our most important data handling practices. We maintain a benchmarking database of commercial strategy scores and related analytics across hundreds of B2B software companies. The integrity and confidentiality of this database is central to our business.
4.1 Data Separation
We maintain strict separation between:
Client Engagement Data: Information provided to us by clients and portfolio companies during paid engagements is stored in a dedicated, access-controlled environment separate from our general benchmarking database.
Benchmarking Database: Our comparative analytics database contains only (a) scores and analysis derived from publicly available information, and (b) anonymized, de-identified, and aggregated data contributed from client engagements.
Client-provided data is never stored in, or directly accessible from, the benchmarking database in its original, identifiable form.
4.2 Anonymization and De-identification
Before any client engagement data is incorporated into the benchmarking database, we apply the following de-identification procedures:
- Removal of company name, brand identifiers, and any directly identifying information
- Removal of individual names, email addresses, and personal contact information
- Aggregation of data points so that no individual company's specific metrics are discernible
- Minimum cohort thresholds: we do not publish or report on data segments where the number of contributing companies is small enough that a reader could reasonably infer the identity of any individual company
- Review of derived insights to confirm that combinations of non-identifying attributes (such as industry, company size, and geography) do not create a profile that could be used to re-identify a specific company
4.3 No Reverse Engineering
We will never publish, share, or make available any data, analysis, or report in a form that would allow a reader to reverse-engineer the identity of a specific client, portfolio company, or individual. This commitment applies to all our publications, presentations, marketing materials, and research outputs.
5. Data Security
5.1 Technical Safeguards
We implement commercially reasonable technical safeguards to protect the information we collect and store, including:
- Encryption of data in transit using TLS (Transport Layer Security)
- Access controls limiting who within our organization can access client engagement data
- Secure hosting infrastructure through Vercel, which provides enterprise-grade security for our web properties
- Logical separation of client engagement data from the benchmarking database
5.2 Organizational Safeguards
- Access to client engagement data is limited to personnel who require it to deliver services
- Advisors and subcontractors who access client data are bound by confidentiality obligations
- We conduct periodic reviews of our data handling practices
5.3 Limitations
No method of electronic storage or transmission is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. We will notify affected parties in accordance with applicable law in the event of a data breach affecting personal information.
6. Publicly Available Information
Our methodology relies on the independent collection and analysis of publicly available information. We want to be transparent about how we treat this category of data:
Ownership. Publicly available information that we independently collect and analyze is not subject to client confidentiality restrictions, regardless of whether we also have a paid engagement with the company in question.
Right to Publish. We reserve the right to publish analysis, scores, commentary, and research derived from publicly available information at any time, with or without a client engagement, and without requiring the consent of the company being analyzed.
Methodology Transparency. Our Commercial Health Scores derived from public data are based on our proprietary methodology and professional judgment. They represent our analytical assessment and are not representations of fact, audited results, or endorsements.
Corrections. If you believe our public-data analysis of your company contains factual errors, you may contact us to request a review. We will consider corrections in good faith but are not obligated to modify our analysis or scores based on such requests.
7. Sharing and Disclosure
We do not sell personal information. We may share information in the following circumstances:
Service Providers. We use third-party service providers to help us operate our business and deliver our Services. These providers are bound by contractual obligations to protect the information we share with them. Our current service providers include:
- HubSpot (customer relationship management and marketing communications)
- Vercel (website hosting and deployment)
- Anthropic/Claude (AI-assisted analysis; client inputs are not used to train models)
- Google Analytics (website usage analytics)
- GitHub (code repository and version control)
At Your Direction. We may share information with third parties at your direction, such as delivering reports to your investment firm or sharing findings with designated stakeholders.
Aggregated and Anonymized Data. We may share aggregated, de-identified data publicly through research publications, marketing materials, newsletters, presentations, and other channels, subject to the anonymization commitments described in Section 4.
Legal Requirements. We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, information we hold may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
8. Cookies and Tracking Technologies
Our Site uses the following tracking technologies:
8.1 Essential Cookies
Required for the Site to function properly. These cannot be disabled.
8.2 Analytics
Google Analytics. We use Google Analytics to understand how visitors use our Site. Google Analytics collects information such as pages visited, time on site, and referring URLs. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.
HubSpot Tracking. If you interact with our marketing communications or fill out forms on our Site, HubSpot may place cookies to help us understand engagement and improve our communications. You can manage these preferences through the cookie banner on our Site.
8.3 Managing Cookies
Most web browsers allow you to control cookies through browser settings. You can typically find these settings in the "Options" or "Preferences" menu of your browser. Please note that disabling cookies may affect the functionality of certain parts of our Site.
9. Data Retention
Personal Contact Information. We retain your personal contact information for the duration of our business relationship and for a reasonable period thereafter for follow-up communications, unless you request deletion.
Client Engagement Data. We retain client engagement data for the duration of the engagement plus three (3) years, unless a different retention period is specified in the applicable Statement of Work or service agreement.
Anonymized Benchmarking Data. Anonymized, de-identified data in our benchmarking database is retained indefinitely, as it cannot be linked back to any specific company or individual.
Public Data Analysis. Analysis derived from publicly available sources is retained indefinitely.
Website Analytics. Automatically collected website usage data is retained according to the retention policies of the applicable analytics provider (typically 14-26 months for Google Analytics).
10. Your Rights
Depending on your location, you may have certain rights regarding your personal information:
Access and Portability. You may request a copy of the personal information we hold about you.
Correction. You may request that we correct inaccurate personal information.
Deletion. You may request that we delete your personal information. Please note that deletion of your personal information does not affect anonymized data that has already been incorporated into our benchmarking database, as this data can no longer be linked to you or your company.
Opt-Out of Marketing. You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.
Do Not Sell. We do not sell personal information. If you are a California resident and wish to exercise rights under the California Consumer Privacy Act (CCPA), please contact us using the information in Section 14.
To exercise any of these rights, please contact us at the information provided in Section 14. We will respond to your request within 30 days.
11. AI and Automated Processing
We use artificial intelligence and automated tools as part of our scoring and analytical methodology. We want to be transparent about this:
- AI tools assist in data collection, analysis, and scoring. All AI-generated outputs are reviewed and validated by our team before delivery to clients.
- Client inputs provided during engagements are not used to train third-party AI models. We use enterprise-grade AI services that do not train on customer data.
- Our Commercial Health Scores are the product of our proprietary methodology applied through a combination of AI-assisted analysis and expert human judgment. They are not purely algorithmic outputs.
12. Children's Privacy
Our Site and Services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
13. Third-Party Links
Our Site may contain links to third-party websites, including review platforms, industry publications, and partner sites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you by posting the updated Policy on our Site with a revised "Last Updated" date. For clients with active engagements, we will also provide notice through our normal communication channels. Your continued use of our Site or Services after such changes constitutes acceptance of the updated Policy.
15. Contact Information
If you have questions about this Policy or wish to exercise your data rights, please contact us at:
Remidi Works, LLC
Email: info@remidiworks.com
16. Governing Law
This Policy is governed by the laws of the State of Illinois, without regard to conflict of law principles.