Privacy Policy

1. Introduction

Neen is operated by Vigilante. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at theneen.app. References to "we," "us," or "Vigilante" refer to Vigilante and its authorized representatives. References to "you" refer to the individual using the platform.

2. Information We Collect

In the course of creating and maintaining your learner profile on the Neen platform, we collect only the data necessary to evaluate your readiness, deliver targeted training, and support placement. We do not collect data for advertising or speculative future use. The categories we collect are:

• Identity and account data: Your name, email address, and authentication information used solely for account access and consent management.
• Work and artifact data: Portfolios, project submissions, code samples, documentation, and other work outputs you voluntarily provide. These are used to build and update your Global Professional Record (GPR).
• Assessment and evaluation data: Results from your Skills Assessment, Cognitive Assessment, and Learning Style Assessment. This data is used to identify skill gaps and personalize your training and readiness pathway.
• System-generated data: Inferred skills, readiness scores, training plans, and progress metrics generated by AI-assisted processes. These are always tied to your actual work and assessment evidence.

We do not collect behavioral tracking data unrelated to readiness, advertising identifiers, or third-party marketing data.

3. How We Use Your Information

Your data is collected and used only for the following purposes:

• To create, maintain, and update your Global Professional Record (GPR) on the Neen platform
• To calculate and display your readiness score and GPR dashboard
• To personalize your learning experience, including training recommendations and skill development guidance
• To allow you to track your progress over time and revisit your profile history
• To support placement opportunities based on your readiness score and profile, only with your explicit authorization
• To improve our platform and develop new features
• To send you updates about your account and application status

Your personal data will never be sold to third parties. Vigilante does not monetize your data. The platform is supported through subscriptions and services only.

4. Use of Depersonalized Data for Platform Metrics

In addition to the personal uses described above, Vigilante may use anonymized, depersonalized versions of your data for the following purposes:

• To measure and evaluate how the Neen platform performs across its user base
• To identify trends, patterns, and areas for platform improvement
• To generate aggregate metrics and reports that may be shared with investors, partners, and stakeholders to demonstrate platform effectiveness

Depersonalized data cannot be traced back to you as an individual. Your identity is never disclosed in any reporting, investor materials, or external communications.

5. Information Sharing

We share your information in the following circumstances:

• With Recruiters and Partners: Your GPR and professional information may be shared with recruiters or partner organizations, only with your explicit authorization and for a defined purpose. You control who can view your GPR and can revoke access at any time.
• Service Providers: We work with third-party services including Supabase (database), Anthropic (AI processing), and Resend (email delivery). These providers are authorized to process your data only as necessary to support platform operations.
• Legal Requirements: We may disclose information when required by law or to protect our rights.

6. Your Global Professional Record (GPR)

Your GPR is your core asset on the Neen platform and is treated as sensitive, long-lived personal data. The following protections apply:

• You own your GPR. Vigilante does not claim ownership over your work history, skills, assessments, or inferred readiness.
• Your record is not publicly discoverable. It is keyed to an internal identifier and only accessible through your account.
• Organizations can only view your GPR if you explicitly share it with them for a defined purpose.
• You can revoke access at any time and review a history of who has viewed your record and why.
• Your GPR is designed to be portable across roles, organizations, and career stages.

Access to your GPR is permission-based, purpose-limited, and revocable. You are always in control.

7. How AI Is Used in Your Evaluation

Neen uses AI to evaluate your work artifacts, infer skills, and compute your readiness score. The following safeguards apply to all AI-driven decisions that affect your record:

• Structured decision-making: AI operates within defined rubrics and scoring logic. It does not make unconstrained judgments about you.
• Decision logging: Significant AI-driven actions are logged with their inputs, outputs, and summarized reasoning so outcomes can be explained.
• Traceability: System-generated outputs (readiness scores, skill inferences, training recommendations) are always tied to evidence from your actual work and assessments.
• Continuous validation: System outputs are continuously evaluated to identify failure modes, bias, and accuracy limitations.

AI supports decision-making on this platform. It does not operate without constraints, oversight, or traceability. You can see how your readiness score is generated.

8. Data Security

Vigilante takes the security of your personal data seriously. The following measures are in place:

• Encryption at rest: Your work artifacts, assessments, and personally identifiable data are encrypted using 256-bit AES encryption.
• Encryption in transit: All data transmitted between your device and our systems is protected using 256-bit SSL/TLS encryption.
• Access controls: Databases and storage systems are hosted in secure cloud environments with network isolation and role-based access controls. Only authorized Vigilante personnel can access your data.
• Least privilege: We apply the principle of least privilege across all systems, meaning no one has access beyond what their role requires. All data access is logged and auditable.

Data is retained for as long as your account is active or as otherwise required to fulfill the purposes described in this policy. You may request deletion of your data at any time (see Section 9).

9. Your Rights

As a learner on the Neen platform, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you at any time.
• Right to Correction: You may request that we correct any inaccurate or incomplete information in your profile.
• Right to Deletion: You may request that your personal data be deleted from our systems. Upon verified request, we will remove your identifiable information, subject to any legal obligations to retain certain records.
• Right to Revoke Consent: You may withdraw your consent to data processing at any time. Please note that doing so may affect your access to the Neen platform.
• Right to Audit GPR Access: You may review a history of who has accessed your Global Professional Record, when, and for what purpose.
• Right to Export: You may request an export of your professional record data at any time.

To exercise any of these rights, please contact Vigilante support through the Neen platform or reach out to your designated program contact.

10. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or sell your data to advertisers.

11. Children's Privacy

Neen is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

Vigilante may update this Privacy Policy as the platform evolves. If material changes are made, you will be notified and asked to review and re-confirm your consent before continuing to use the platform. The updated policy will always be posted on this page with a revised date at the top.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us directly: