Xavigate Website Privacy Policy
1. Introduction and Overview
At Xavigate International, LLC (“Xavigate”, “Company”, “we”, “our”, or “us”), we are committed to protecting your privacy and personal information. Whether you are a learner, practitioner, educator, or organization using our platform, we take seriously the responsibility to handle your data with care, transparency, and security.
This Privacy Policy explains how we collect, use, store, and share information across our website (xavigate.com) and our services, including assessments, training, the practitioner directory, and community tools (e.g., the Xavigate Lab, forums, or chats).
Please Note: Xavigate International provides a platform that includes access to Multiple Natures tools (such as the MNTEST) under agreement with Multiple Natures International (MNI). However, Xavigate does not control the data collection, privacy, or certification processes of MNI.
If you are using the MNTEST, enrolled in an MN Practitioner Certification, or accessing any content governed by MNI, please refer to MNI’s Privacy Policy at: 🔗 https://www.multiplenatures.com/legal/privacy
1.1 Purpose of This Policy
This Privacy Policy explains:
- What personal information we collect
- How we use and safeguard your information
- Your rights and choices regarding your data
- How we handle cookies and analytics
- How to contact us regarding privacy concerns
This policy applies to Xavigate’s platform, including:
- Courses and learning tools
- Community forums and chat groups
- Practitioner directory and profiles
- App integrations (including the Xavigate app)
1.2 Key Definitions
To help clarify this policy:
- “Personal Information” means information that can identify you (e.g., name, email, IP address).
- “User” means any person accessing or interacting with our services (including learners, coaches, educators, or organizational representatives).
- “Service” means the products and tools offered by Xavigate (excluding MN tools governed directly by MNI).
- “MNI Content” means any assessments, reports, or certification content controlled by Multiple Natures International.
1.3 Policy Updates and Notifications
We may update this Privacy Policy to reflect changes in our services, technologies, or legal obligations.
- For minor changes: We’ll update the “Last Modified” date at the top of the policy and post the updated version on our website.
- For material changes (that significantly affect your rights):
- We’ll provide at least 30 days’ notice before the changes take effect.
- We may notify users via email, platform notice, or other appropriate means.
Your continued use of Xavigate after updates are posted constitutes your acceptance of the revised policy.
1.4 Company Information & Contact
Xavigate International, LLC
611 South DuPont Highway, Suite 102
Dover, DE 19901
USA
📧 Email: support@xavigate.com
For any privacy-related questions or data requests, please include “Privacy Policy Question” in the subject line for faster processing.
1.5 Our Commitment to Privacy
We are committed to:
- Following global privacy laws and best practices (e.g., GDPR, CCPA, COPPA)
- Collecting only the data necessary to deliver and improve our services
- Never selling your personal data
- Offering clear privacy options and honoring your preferences
- Responding promptly to privacy inquiries or concerns
1.6 Acceptance of Terms
By accessing or using the Xavigate platform, including our website, app, community, and related services, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please discontinue use of the platform. Your continued use of our services after changes are posted constitutes your acceptance of those changes.
2. Our Privacy Commitments
Xavigate International serves a diverse audience—including students, educators, parents, practitioners, and organizations. Whether you’re a young learner taking your first assessment or a professional deepening your expertise, we are committed to protecting your information with care, respect, and transparency.
2.1 Our Privacy Principles
We follow these core principles when handling your data:
- We protect student and educational data in line with COPPA (Children’s Online Privacy Protection Act) and FERPA (Family Educational Rights and Privacy Act).
- We do not sell personal information.
- We only collect what is necessary to deliver learning experiences and support your progress.
- We are transparent about how your data is used.
- We give you and/or your parent/guardian control over your information.
2.2 Student Data Protection (Including Under 13)
Xavigate is committed to protecting the privacy of all students, including children under the age of 13.
If you are a school, parent, or legal guardian:
- We may collect a child’s personal information (e.g., name, age, assessment answers) only with appropriate consent.
- When used in school settings, schools shall act as agents in providing consent under COPPA, provided it is for educational use only.
- We never:
- Ask children for unnecessary personal details
- Use student data for advertising or profiling
- Sell or transfer student data to unrelated third parties
Parents and guardians have the right to:
- Review their child’s personal data
- Request deletion
- Refuse future data collection
To make such a request, email us at support@xavigate.com with the subject line: Children’s Privacy Request.
2.3 FERPA Compliance (Schools and Educators)
When used by schools, districts, or educational programs, we treat student information as protected educational records and:
- Act as a “school official” under FERPA when providing services on behalf of a school.
- Only use student data to deliver contracted educational services.
- Never disclose personally identifiable student information without proper school authorization.
- Provide schools with tools to access, update, or delete student data.
2.4 Privacy for Adult Learners and Practitioners
We also work with adults using our platform for:
- Personal development
- Training and certification
- Professional practice and coaching
For these users:
- You retain full control over your personal data
- We do not access or use your client or coaching data without your explicit request or consent
- You may request deletion of your account or any stored data at any time
2.5 Organizational and Institutional Use
If you represent an organization (e.g., a company, school, nonprofit, or coaching center):
- You retain ownership and control over your group’s data and member participation
- We only use your organizational data to deliver services, provide technical support, or improve platform performance
- You can request full data deletion when the business relationship ends
2.6 Retention, Deletion, and Control
You or your authorized guardian/school may request:
- Access to your data
- Correction of inaccurate data
- Deletion of personal or student data
- Restriction of how your data is used
- Information about what data we’ve collected and shared
We honor these requests within applicable legal timeframes and obligations.
To exercise your rights, please contact us at: 📧 support@xavigate.com
2.7 In Case of Business Changes
If Xavigate undergoes a company change (e.g., acquisition, merger, etc.):
- All privacy protections will remain in place
- Student and educational data will only be transferred to organizations with equal or greater privacy protections
- You will be notified, and we will honor your choice to opt out or request deletion when possible
3: What Information We Collect and Why
Xavigate collects only the information necessary to provide a meaningful and secure experience for our users. This includes supporting assessments, training, certification, community access, and organizational tools.
We organize the types of data we collect into categories based on how you use our platform.
3.1 Assessment and Learning Tools
When you use tools like the MNTEST, Alignment Dynamics exercises, or other Xavigate assessments or activities, we may collect:
- Name and contact details (e.g., email, phone – if provided)
- Age range or date of birth (to personalize experiences)
- Self-assessment responses
- Reflections, activity answers, or journaling
- Career goals or interests
- School or organization (if part of a group program)
Why we collect this:
- To deliver personalized results and feedback
- To store and display your progress over time
- To support trainers or educators working with you
- To ensure your experience is age-appropriate
3.2 Account and Profile Information
When you register for a Xavigate account, we may collect:
- Full name
- Email address and password
- Profile photo (optional)
- Preferred language
- Country or location
- Communication preferences
Why we collect this:
- To create and manage your user account
- To let you log in securely
- To send updates and important notifications
3.3 Practitioner or Partner Profiles
If you’re a certified practitioner, educator, or organizational partner listed on our site, we may also collect:
- Biography, photo, credentials
- Languages you speak
- Country or region of service
- Availability or contact method (if provided)
Why we collect this:
- To feature you in our public or private directories
- To help users find practitioners aligned with their needs
We will always ask for your consent before publishing your profile publicly.
3.4 Communications and Support
When you contact us or interact with our support team, we may collect:
- Name and email
- Details of your question, issue, or request
- Any attachments or screenshots you provide
- Notes from our support conversations
Why we collect this:
- To respond to your inquiries
- To improve our support services
- To track and resolve technical issues
3.5 Community Interaction
If you participate in the Xavigate Lab, Telegram group, forum, or other community feature, we may collect:
- Messages you send in chats or discussion threads
- Reactions or comments
- Any profile information visible to others
Why we collect this:
- To facilitate peer connection and collaborative learning
- To ensure community safety and appropriate use
We do not monitor private conversations unless flagged for moderation or abuse.
3.6 Device and Technical Information
Like most websites and apps, we automatically collect basic device and browser data, such as:
- IP address
- Device type (e.g., phone, tablet, computer)
- Operating system and browser version
- Referring site or link (if you came from another site)
- Pages visited and time spent on each
- Date and time of access
Why we collect this:
- To keep the site secure
- To optimize performance across different devices
- To understand how users navigate and improve usability
3.7 Cookies and Analytics
We use cookies and tools like Google Analytics to understand how our site is used and improve user experience.
Cookies help us:
- Keep you logged in across sessions
- Store your language or display preferences
- Measure website traffic and performance
You can control cookie preferences in your browser settings. For more, see our full Cookie Policy [link or refer to Section 7 if included].
3.8 Optional Information You Provide
You may also choose to share other information voluntarily, such as:
- Feedback or testimonials
- Responses to surveys or polls
- Course reviews or completion reflections
We will only use this information for the purpose you intended, and you can withdraw permission at any time.
3.9 Legal and Administrative Records
For billing, security, and legal compliance, we may collect:
- Payment history (processed securely via Stripe – Xavigate never stores your credit card number)
- Order or subscription records
- Contractual documents (if applicable)
- Internal logs for security, access, or technical troubleshooting
4: How We Use and Protect Your Information
We collect personal data only to provide you with a better, safer, and more personalized experience on Xavigate. We never sell your information, and we limit access to only what’s necessary.
4.1 How We Use Your Information
Here’s how we use the information we collect, depending on how you interact with Xavigate:
To Provide Services:
- Deliver assessments, training, and course content
- Generate personalized feedback and reports
- Track your progress and activity
- Provide practitioner tools and resources
To Support Community & Connections
- Enable discussion forums and messaging features
- Help you connect with trainers, peers, or practitioners
- Show practitioner or partner listings (only with consent)
To Communicate with You
- Send updates about courses, assessments, or your account
- Share announcements, content releases, or feature changes
- Respond to questions, requests, or feedback
To Improve Our Platform
- Analyze usage patterns and site traffic
- Fix bugs and troubleshoot issues
- Understand how users engage with our tools
- Test new features or layouts
To Ensure Safety & Compliance
- Detect, prevent, and investigate misuse or unauthorized access
- Meet our legal or regulatory obligations
- Protect the rights, safety, and property of our users and company
4.2 Data Security Practices
We use a multi-layered approach to protect your personal data. This includes:
Technical Protections
- Data is securely hosted on Amazon Web Services (AWS)
- All personal data is encrypted in transit (TLS/SSL) and at rest
- Firewalls, intrusion detection, and backup systems are in place
- Regular security audits and vulnerability scans are performed
Administrative Protections
- Only authorized staff can access user data
- Team members undergo privacy and security training
- We log access and take misuse seriously
- We limit access by role (e.g., support vs. tech team)
Physical Protections
- Our data infrastructure is stored in secure, access-controlled data centers
- Servers are monitored 24/7 with environmental safeguards and redundancy
4.3 Third-Party Technology
We partner with trusted providers to help us deliver services, including:
- AWS (hosting and infrastructure)
- Stripe (payment processing)
- Google Workspace (email and business tools)
- Vimeo (video hosting)
- Telegram (community chat)
Each of these companies is required to:
- Follow strong privacy and security practices
- Process your data only on our instructions
- Not use your data for their own purposes
We do not share your data with third parties for advertising, profiling, or resale.
4.4 How Long We Keep Your Information
We keep your information only as long as needed to:
- Provide services you’ve signed up for
- Maintain records for support, compliance, or analytics
- Comply with legal or financial requirements
Unless you request otherwise:
- Assessment and learning data is typically retained for 3 years
- Support inquiries and chat records for 2 years
- Billing and contract-related data for up to 7 years
If you request deletion, we will remove your data unless we’re required to retain it for legal or security reasons.
4.5 Your Role in Security
While we take strong measures to protect your data, you also play a part.
To help keep your account secure:
- Use a strong, unique password
- Don’t share your login information
- Enable two-factor authentication (if available)
- Log out on shared or public devices
- Contact us if you notice suspicious activity
4.6 In the Event of a Security Breach
If we ever detect a data breach that affects your information:
- We will investigate and resolve it immediately
- We will notify you and relevant authorities as required by law
- We will explain what happened and what steps you can take
5. Information Sharing
We believe in transparency about how and when your information is shared. We share personal data only when necessary to provide services, meet legal obligations, or improve your experience—and we do so with strict safeguards.
5.1 We Do Not Sell Your Data
We do not sell, rent, or exchange your personal information with advertisers or unrelated third parties. Your data belongs to you.
5.2 Sharing with Service Providers
We work with trusted third-party service providers who help us operate the Xavigate platform. These companies only receive the minimum information required to perform their services and are contractually obligated to:
- Protect your information
- Use it only for the purpose of delivering services on our behalf
- Delete it when no longer needed
Our core service providers include:
- Amazon Web Services (cloud hosting and data storage)
- Stripe (payment processing)
- Google Workspace (communications and document tools)
- Vimeo (video delivery)
- Telegram (community messaging, where applicable)
These companies may process or store your information in the United States or other countries with appropriate data protection measures in place.
5.3 Sharing with Organizational Partners
If you are part of a school, company, or other organization using Xavigate:
- We may share progress reports, usage summaries, or assessment data with authorized representatives of that organization
- These reports are used only for educational or training purposes
- Your personal information will never be shared beyond the organization unless you explicitly request or consent to it
We do not disclose individual user data to other participants or teams without your permission.
5.4 Practitioner and Directory Listings
If you are a certified practitioner and choose to be listed in our public or internal directory:
- We will display your profile, credentials, and other information you explicitly approve
- You may update or remove your listing at any time
We do not disclose private assessment data from your work with clients, unless you explicitly authorize sharing or request support.
5.5 Legal Requirements
We may share personal information if required to do so by law or legal process, including:
- Responding to a subpoena, court order, or lawful request by authorities
- Investigating suspected fraud, security threats, or policy violations
- Protecting the safety, rights, or property of our users or company
When permitted, we will notify you of such disclosures unless prohibited by law.
5.6 Business Transfers
If Xavigate is involved in a merger, acquisition, reorganization, or asset sale:
- We will continue to protect your information under the terms of this policy
- We will notify you before your information is transferred and becomes subject to a different privacy policy
- You will have the option to request deletion prior to transfer, where feasible
5.7 Sharing Aggregated or Anonymized Data
We may share de-identified or aggregated data that cannot reasonably be used to identify individuals. This may be used for:
- Research or educational purposes
- Platform improvement and analytics
- Reporting to partner organizations or funders
This information is statistical and does not include personal identifiers.
5.8 Your Choices and Control
You may request:
- A summary of who has access to your data
- A list of any third parties your data has been shared with
- To opt out of specific sharing where legally allowed
You can make these requests by contacting us at support@xavigate.com.
6. Your Rights and Choices
You have important rights over your personal data, no matter where you live. We aim to make it easy for you to access, update, manage, or remove your information—and to understand how it is being used.
6.1 Access Your Information
You have the right to request:
- Confirmation of whether we process your personal data
- A copy of the data we hold about you
- A summary of how we use and share your information
To make a request, email support@xavigate.com with the subject line: “Data Access Request.” We typically respond within 30 days.
6.2 Correct or Update Information
You can correct or update information in your account settings at any time. If you are unable to make a change yourself, or if your data is incorrect, you may contact us to request a correction. We will verify your identity before making changes to protect your privacy.
6.3 Delete Your Information
You may request that we delete your personal data in the following situations:
- You no longer use our services
- You withdraw your consent (where applicable)
- The data is no longer needed for the purposes for which it was collected
- You object to our processing and there is no overriding reason to continue
Some legal or administrative obligations may require us to retain certain records for a limited period. If this applies, we will let you know.
To request deletion, email us at support@xavigate.com and include the subject line: “Delete My Data.”
6.4 Limit or Restrict Processing
You may ask us to restrict the use of your personal information if:
- You dispute its accuracy
- Our processing is unlawful and you prefer restriction to deletion
- You need the data to pursue legal claims
- You have objected to our use of your data and we are reviewing the request
During this period, your data will be stored but not used for other purposes.
6.5 Object to Use
In some cases, you may object to how we use your data. This includes:
- Use of your data for analytics or product development
- Receipt of marketing emails (you can also use the unsubscribe link in any message)
If we process your information on the basis of legitimate interest, we will assess whether your request overrides our need to continue using the data.
6.6 Withdraw Consent
If we are using your information based on your consent (for example, for a newsletter or optional profile field), you may withdraw consent at any time. This does not affect the legality of any processing done before withdrawal.
6.7 Portability
If applicable under your local laws (e.g., GDPR), you may request a copy of your data in a machine-readable format to move to another service.
6.8 Your Rights as a Parent or Guardian
If your child under the age of 13 has used our services through a school or family account:
- You may access, review, or delete their data at any time
- You may withdraw consent for future data collection
To exercise these rights, contact us at support@xavigate.com with the subject line: “Children’s Privacy Request.”
6.9 How to Exercise Your Rights
To make any request listed above:
- Email support@xavigate.com
- Use a clear subject line such as “Privacy Request,” “Data Access Request,” or “Delete My Data”
- Provide enough information to verify your identity and locate your records
We will never ask you for your password. We may request additional information to confirm your identity before completing sensitive requests.
We do not charge a fee for standard requests. If a request is unusually complex or repetitive, we may charge a reasonable fee or decline the request as permitted by law.
6.10 Your Right to File a Complaint
If you believe your privacy rights have been violated:
- Please contact us first so we can try to resolve the issue
- You also have the right to lodge a complaint with your local data protection authority or seek legal action if needed
We are committed to respecting and upholding your privacy rights.
7. Cookies and Technology Use
Xavigate uses cookies and related technologies to ensure the platform functions properly, to enhance your experience, and to understand how users interact with our services.
7.1 What Are Cookies?
Cookies are small text files that websites store on your browser or device. They allow a site to recognize your device, remember your preferences, and keep you logged in.
Cookies can be:
- Essential: Required for the website or app to work
- Functional: Help remember user preferences or settings
- Analytical: Help us understand how users navigate the platform
- Optional: Used for enhancements or non-essential features
We do not use cookies for advertising or behavioral profiling.
7.2 How We Use Cookies
Xavigate uses cookies for the following purposes:
- Keeping you logged in during sessions
- Remembering your preferences (such as language settings)
- Identifying usage trends and technical performance issues
- Securing your account and detecting suspicious activity
For example, we use a session cookie (connect.sid) to maintain your login across pages. This cookie expires automatically after a short period of inactivity.
We also use Google Analytics to help us understand how users interact with our website. Google Analytics cookies collect information such as:
- Browser type and version
- Pages visited and time spent
- Referring websites or links
- IP address (which may be anonymized)
This helps us improve usability and performance, but does not allow us to identify individual users.
You can read Google’s privacy policy at: www.google.com/policies/privacy/
7.3 Managing Your Cookie Preferences
You can manage or delete cookies using your browser settings. You may:
- Block all cookies
- Allow only certain types of cookies
- Delete cookies after each session
- Be notified when a cookie is being set
For more detailed guidance, you can visit:
Please note: Blocking or deleting essential cookies may prevent some parts of the Xavigate platform from functioning properly.
7.4 Device and Browser Information
When you access our services, we also collect standard technical information from your browser or device, such as:
- IP address
- Device type and operating system
- Browser type and language settings
- Screen size and display capabilities
- Referring site or URL
- Timestamp of access
This information helps us:
- Optimize the platform for different devices
- Detect and prevent fraud or misuse
- Improve design, layout, and compatibility
7.5 Third-Party Tools and Hosting
We rely on third-party technologies and infrastructure to deliver our services securely and reliably. These include:
- Amazon Web Services (cloud hosting and storage)
- Google Workspace (for communications and administration)
- Vimeo (video hosting)
- Stripe (payment processing)
Each of these providers has its own privacy and security commitments. We only work with providers who meet industry standards for data protection.
7.6 Future Technology Changes
As Xavigate evolves, we may introduce new tools or technologies to enhance your experience. When we do:
- We will update this Privacy Policy to reflect those changes
- We will notify you if the changes significantly affect how your data is collected or used
You will have the opportunity to review and adjust your preferences where applicable
8. Children’s Privacy
We are committed to protecting the privacy of all learners, including children. When students under the age of 13 use our services, we handle their information with heightened care and in compliance with the Children’s Online Privacy Protection Act (COPPA) and other applicable laws.
8.1 Use by Children Under 13
Xavigate services may be used by students under the age of 13, typically under the guidance of a parent, guardian, or school representative. In such cases:
- We collect only the minimum amount of personal information required to deliver educational services
- We do not collect unnecessary or sensitive personal details such as home address, social media accounts, photos, or phone numbers
- We never display or share children’s information publicly
Information collected from children may include:
- First name or a username (chosen by a teacher or guardian)
- Age range or grade level
- Responses to assessments or exercises
- School or classroom code (if part of a group program)
8.2 Consent Requirements
We require verifiable consent before collecting personal information from children under 13.
This may include:
- Parental or guardian consent, when a child uses the service independently
- School or district consent, when the service is provided through an educational program
Educators may act as agents of parents in providing consent for educational purposes, as allowed under COPPA.
8.3 How We Use Children’s Information
We use children’s data only for educational and support purposes, including:
- Delivering age-appropriate content
- Generating personalized assessment reports
- Supporting school-based learning and engagement
- Tracking progress and participation
We never use children’s data for:
- Advertising
- Behavioral profiling
- Selling to third parties
- Marketing to children
8.4 Parent and Guardian Rights
If your child is under 13, you have the right to:
- Review the personal information we have collected
- Request corrections or updates
- Withdraw your consent at any time
- Request the deletion of your child’s data
To exercise these rights, please contact us at support@xavigate.com with the subject line: “Children’s Privacy Request.” We may ask for verification of your identity and relationship to the child.
8.5 Deletion and Data Retention
We retain children’s data only as long as necessary to fulfill the educational purpose for which it was collected. If an account becomes inactive, we will delete the associated child data within a reasonable time, typically within 60 to 90 days unless otherwise agreed with an institution.
You may request early deletion at any time.
8.6 Additional Safeguards
When we process data from children, we apply stricter internal protections, including:
- Role-based access to child data
- Encryption in transit and at rest
- Enhanced employee training for handling student records
No use of third-party marketing tools or trackers on child-accessible pages
9. Contact and Support
We are committed to maintaining open, transparent communication regarding your privacy. If you have any questions, concerns, or requests related to your personal information or this Privacy Policy, please contact us directly.
9.1 How to Contact Us
Xavigate International, LLC
611 South DuPont Highway, Suite 102
Dover, DE 19901
USA
Email: support@xavigate.com
We aim to respond to all privacy-related requests within 2 business days. For complex requests (such as data access or deletion), we will provide a full response within 30 days, or explain the reason for any delay.
9.2 Privacy Requests
If you wish to exercise your rights under this policy (such as accessing or deleting your data), please include a clear subject line such as:
- Privacy Request
- Data Access Request
- Delete My Data
- Children’s Privacy Request
Be sure to include enough information to help us locate your account or records. We may ask for additional details to verify your identity before processing sensitive requests.
9.3 Privacy for MNTEST and Multiple Natures Services
If you are using the MNTEST or accessing services that are governed by Multiple Natures International (MNI), please note that Xavigate does not control those data policies. For all matters related to MNI’s assessments, tools, or training programs, please refer to:
Multiple Natures International, LLC
1512 Palisade Ave., #12N
Fort Lee, New Jersey 07024
USA
Email: support@multiplenatures.com
Privacy Policy: https://www.multiplenatures.com/legal/privacy
Any data collected by MNI is governed by their separate privacy policy. Please contact them directly for inquiries or requests relating to the MNTEST, practitioner certification data, or other MNI-governed services.
