Effective as of October 13, 2026.
State Privacy Rights Notice: See the State privacy rights notice section below for important information about your rights under applicable U.S. state privacy laws, including the California notice at collection.
CXO Insights Inc., a Texas corporation ("CXO Insights," "we," "us" or "our") is a U.S.-based management consultancy that provides consulting services to businesses and makes proprietary online tools available to our clients' employees. This Privacy Policy describes how CXO Insights processes personal information that we collect through our website at www.cxoinsights.ai, our online tools (the "Tools"), and our related business activities that link to this Privacy Policy (collectively, the "Service").
Our Service is intended for businesses and their personnel located in the United States. We do not direct the Service to individuals outside the United States.
Index
- Personal information we collect
- When we act on behalf of our clients
- Tracking technologies
- How we use your personal information
- Retention
- How we share your personal information
- Your choices
- Security
- Children
- Changes to this Privacy Policy
- How to contact us
- State privacy rights notice
Personal information we collect
We aim to collect only the personal information we need. For people who use our Tools, that is primarily your name and corporate email address.
Information you or your organization provide to us.
- Account data, consisting of your name and corporate email address, which your employer (our client) or you provide so that we can create and administer your account for the Tools, and login credentials you create for the Tools (passwords are stored only in hashed form).
- User content, meaning files and other content that you choose to upload to the Tools. You and your organization decide what is uploaded and are responsible for that content. Please do not upload sensitive personal information (see "Sensitive personal information" below).
- Communications data, such as your name, corporate email address, job title, company name and the content of your message when you contact us, request information, or correspond with us about an engagement.
Information we collect automatically. When you use the Service, we and our service providers may automatically log limited technical information needed to operate and secure the Service, such as:
- Device and log data, such as IP address, browser type, operating system, and dates and times of access.
- Usage data, such as the features of the Tools you use, log-in events and actions taken within your account (for example, file uploads and deletions), which we use for security, troubleshooting and audit purposes.
Sensitive personal information. We do not intentionally collect sensitive personal information (such as Social Security numbers, health information, financial account numbers, biometric information, or precise geolocation), and our terms prohibit users from uploading it to the Tools.
When we act on behalf of our clients
When our clients (typically your employer) give their personnel access to our Tools, we process your account data and any user content on behalf of that client as its service provider or processor, under a written data processing addendum. In that case, the client's own privacy notice governs its use of your information, and we use the information only to provide the Service to the client. If you have questions about, or wish to exercise rights regarding, information we process on behalf of your employer, please contact your employer directly. If you contact us, we will refer your request to the relevant client.
Tracking technologies
Cookies. Our Service uses cookies and similar technologies that are strictly necessary to sign you in, keep your session secure, and remember your preferences. We also use analytics cookies and similar technologies, provided by third-party analytics providers acting on our behalf, to understand how visitors use our website and Tools (for example, which pages are visited and how long visitors stay) so that we can improve them. You can block or delete cookies through your browser settings; blocking strictly necessary cookies may prevent you from signing in to the Tools. We do not use cookies or other technologies for cross-context behavioral or targeted advertising.
Do Not Track and Global Privacy Control. Some browsers can send "Do Not Track" or Global Privacy Control ("GPC") signals. Because we do not sell or share personal information for targeted advertising, there is nothing for these signals to opt you out of; however, we will honor GPC signals as required by applicable law.
How we use your personal information
We use personal information for the following purposes:
Service delivery and operations, including to:
- provide, operate and maintain the Tools and other Services;
- create and administer accounts and authenticate users;
- store and process user content as directed by users and our clients;
- perform consulting engagements for our clients;
- communicate with you about the Service, including Service-related announcements, security alerts, and support and administrative messages; and
- respond to your requests, questions and feedback.
Security and compliance, including to:
- protect the security and integrity of the Service and prevent, detect and investigate fraud, unauthorized access, and other harmful or illegal activity;
- comply with applicable laws, lawful requests, and legal process;
- protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims); and
- enforce the terms that govern the Service.
Service improvement and analytics. We use device, usage and analytics cookie data to understand how our website and Tools are used, troubleshoot problems, and improve the Service. We do not use this data for targeted advertising.
Business communications. We may use contact information that business contacts provide to us directly (for example, through our website or in the course of an engagement) to send information about our services. You may opt out at any time as described in "Your choices." We do not use account data or user content from the Tools for marketing.
Aggregated and de-identified data. We may create aggregated, de-identified data that does not identify you or your organization, and use it to analyze and improve the Service. We will not attempt to re-identify any such data.
Artificial intelligence. We do not use your personal information or user content to train artificial intelligence or machine learning models, and we contractually prohibit our service providers from doing so.
Retention
We retain personal information for as long as needed to fulfill the purposes for which we collected it, including to provide the Service to our clients, and to satisfy legal, accounting, or reporting requirements, establish or defend legal claims, or prevent fraud. Account data and user content processed on behalf of a client are retained for the duration of the client's agreement with us and then returned or deleted in accordance with that agreement (generally within 30 days after the end of the engagement, subject to routine backup cycles). When we no longer require personal information, we delete it, de-identify it, or isolate it from further processing.
How we share your personal information
We do not sell your personal information, and we do not share it for targeted advertising. We share personal information only with the following parties:
Our clients. If you use the Tools through your employer, your employer (and authorized administrators it designates) can access your account data and the content you upload.
Service providers. Third parties that help us operate the Service and our business, such as our web hosting provider (Hostinger), our AI model provider (Anthropic), website analytics providers, and IT and security providers. They are contractually required to use personal information only to provide services to us and to protect it. A current list of the subprocessors we use for the Tools is available on request.
Professional advisors. Lawyers, auditors, and insurers, in the course of the professional services they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the security and compliance purposes described above.
Business transferees. Parties to an actual or prospective merger, acquisition, financing, sale of assets, or similar transaction, or in the event of insolvency, bankruptcy, or receivership, subject to appropriate confidentiality protections.
Your choices
Access or update your information. You can review and update certain account information in the Tools, or ask your organization's administrator to do so.
Opt out of business communications. You may opt out of our business-development emails by following the unsubscribe instructions in the email or by contacting us. You will continue to receive Service-related messages while you have an account.
Delete your content or account. You can delete content you have uploaded through the Tools where that feature is available. Account deletion requests for the Tools are generally handled through your organization, which controls your account.
Declining to provide information. We need your name and corporate email address to provide you with access to the Tools. If you do not provide them, we will not be able to create your account.
Other sites and services
The Service may contain links to websites and online services operated by third parties. We do not control those sites and are not responsible for their practices. We encourage you to read their privacy policies.
Security
We employ technical, organizational and physical safeguards designed to protect the personal information we collect, including encryption in transit and at rest, role-based access controls, and logging and monitoring. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.
Data location
We are headquartered in Frisco, Texas, and we store personal information in data centers located in the United States.
Children
The Service is intended for business use and is not directed to anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected personal information from a child, please contact us and we will delete it.
Changes to this Privacy Policy
We may modify this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date above and posting the updated policy on the Service, and, where appropriate, by email. Your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledgment that the modified Privacy Policy applies to your interactions with the Service and our business.
How to contact us
If you have questions about our practices or would like to exercise any privacy-related right, please contact us:
- Email: ravi.joshi@cxoinsights.ai
- Mail: CXO Insights Inc., Attn: Privacy, 10880 Manuel St, Frisco, TX 75035
- Phone: (682) 438-6440
State privacy rights notice
Except as otherwise provided, this section applies to residents of U.S. states that have privacy laws applicable to us that grant their residents the rights described below (collectively, the "State Privacy Laws"), including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states.
Information we process for clients. Where we process personal information on behalf of a client as its service provider or processor (see "When we act on behalf of our clients"), the client is responsible for responding to your rights requests. If you submit such a request to us, we will forward it to the client and assist the client as required by law.
For purposes of this section, "Personal Information" has the meaning given to "personal data," "personal information" or similar terms, and "Sensitive Personal Information" has the meaning given to "sensitive personal information," "sensitive data," or similar terms in the State Privacy Laws, except that in neither case does such term include information exempted from the scope of the State Privacy Laws.
Your privacy rights. Depending on your state of residence, the State Privacy Laws may provide you with some or all of the following rights. These rights are not absolute, and we may decline your request in certain cases as permitted by law.
- Information. You can request information about the categories of Personal Information we have collected, the categories of sources, the business purposes for collecting it, and the categories of third parties to which we disclosed it.
- Access. You can request a copy of the Personal Information that we have collected about you.
- Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.
- Deletion. You can ask us to delete the Personal Information that we have collected from you.
- Appeal. You can appeal our denial of any request validly submitted, by replying to our decision or contacting us at the email address below.
Opt-outs.
- Sale and targeted advertising. We do not sell your Personal Information and do not process it for targeted advertising purposes.
- Profiling and automated decision-making. We do not use your Personal Information to engage in profiling or automated decision-making that results in legal or similarly significant effects (such as impacts on financial services, housing, education, employment, health care, or criminal justice).
Consumers under 16. We do not have actual knowledge that we collect, sell or share the Personal Information of consumers under 16 years of age.
Sensitive Personal Information. We do not intentionally collect or process Sensitive Personal Information.
Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.
Exercising your rights. You may submit requests by email to ravi.joshi@cxoinsights.ai or by calling (682) 438-6440.
Verification of identity; authorized agents. We may need to verify your identity before processing your request. We will generally do so by asking you to confirm the request from the corporate email address associated with your account or our records, and we may request additional information where reasonably necessary. Under some State Privacy Laws, you may use an authorized agent to make a request on your behalf. We may require your agent to provide proof of authorization (such as a signed permission or a valid power of attorney) and may ask you to verify your identity directly.
Information practices. The following describes our practices currently and during the past 12 months:
- Sources and purposes. We collect Personal Information from the sources and use it for the business purposes described above in this Privacy Policy.
- Retention. We retain Personal Information as described in the "Retention" section above.
- De-identification. We do not attempt to re-identify de-identified information derived from Personal Information, except to test whether our de-identification processes comply with applicable law.
Personal Information that we collect, use and disclose. The chart below summarizes the Personal Information we collect, by reference to the categories in the "Personal information we collect" section above and the categories specified in the California Consumer Privacy Act (Cal. Civ. Code § 1798.140). Information you voluntarily provide to us, such as in uploaded files or free-form messages, may contain other categories of Personal Information not described below.
| Personal Information we collect | CCPA statutory category | Purposes | Categories of third parties to whom we "disclose" PI for a business purpose | Categories of third parties to whom we "sell" or "share" PI |
|---|---|---|---|---|
| Account data (name, corporate email address, Tool login credentials) | Identifiers; Professional or employment-related information; Account log-in credentials | Service delivery and operations; Security and compliance | Our clients (your employer); Service providers; Professional advisors; Authorities and others; Business transferees | None |
| Communications data (name, corporate email, job title, company, message content) | Identifiers; Professional or employment-related information | Service delivery and operations; Business communications; Security and compliance | Service providers; Professional advisors; Authorities and others; Business transferees | None |
| User content (files you upload) | Any category contained in the content you choose to upload | Service delivery and operations; Security and compliance | Our clients (your employer); Service providers; Authorities and others | None |
| Device and log data; usage data; analytics cookie data | Identifiers (IP address); Internet or other electronic network activity information | Service delivery and operations; Security and compliance; Service improvement and analytics | Service providers (including analytics providers); Authorities and others; Business transferees | None |
Additional information for California residents — Shine the Light. Under California Civil Code Section 1798.83, California residents who have an established business relationship with us for personal, family or household purposes may request information about our disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
Additional information for Nevada residents. Nevada residents have the right to opt out of the sale of certain personal information for monetary consideration. We do not engage in such sales. If you are a Nevada resident and would like to submit a request, please email ravi.joshi@cxoinsights.ai.
Contact us. If you have questions or concerns about our privacy practices, please contact us using the details in the "How to contact us" section above.