Privacy Policy

The Myers-Briggs Company (“we,” “us,” or “our”) operates GoStrong.dev (the “Platform”), which delivers the Strong Interest Inventory® assessment. We are committed to protecting your personal information and being transparent about how we use it. This Privacy Policy explains what data we collect, why we collect it, and the choices you have.

1. Information We Collect

Information You Provide

• Account information — your name, email address, and password when you register.
• Assessment responses — your answers to Strong Interest Inventory questions.
• Demographic information — optional details such as education level, career stage, and industry that help contextualize your results.
• Payment information — billing details entered at checkout. We do not store your payment card data; all transactions are processed securely by Stripe (see Section 5).
• Gift and redemption details — recipient names and email addresses when you purchase a gift report.

Information Collected Automatically

• Usage data — pages visited, features used, and time spent on the Platform.
• Device and browser information — IP address, browser type, operating system, and referring URLs.
• Cookies — session and preference cookies used to maintain your login state and improve your experience (see Section 8).

2. How We Use Your Information

We collect only what we need to deliver a high-quality, research-backed assessment experience. Specifically, we use your information to:

• Create and manage your account and authenticate your identity.
• Administer the Strong Interest Inventory and generate your personalized results report.
• Process payments and fulfil gift purchases.
• Send transactional emails — account confirmation, password reset, and results notifications.
• Improve the Platform through aggregated, anonymized analytics and research.
• Comply with applicable legal obligations.

We do not sell your personal information to third parties. We do not use your assessment responses for targeted advertising.

3. How We Share Your Information

We share your information only in the following limited circumstances:

• Service providers — trusted vendors who help us operate the Platform, including Supabase (database and authentication), Stripe (payment processing), Amazon Web Services (email delivery), and Vercel (hosting). Each provider is contractually required to protect your data and may not use it for their own purposes.
• Research — anonymized, aggregated data may be used by Myers-Briggs researchers to study career interests and assessment validity. Your name and contact details are never shared in this context.
• Legal requirements — we may disclose information if required by law, court order, or governmental authority, or to protect the rights and safety of our users.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy commitments.

4. Data Security

We maintain administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS on all connections.
• Passwords stored as one-way bcrypt hashes — we cannot retrieve your plaintext password.
• Row-level security on our database, ensuring users can only access their own data.
• Regular security monitoring and vulnerability scanning.

No security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

5. Payment Processing

All payment transactions on the Platform are processed by Stripe, Inc., a leading payment infrastructure provider. Stripe is certified as a PCI DSS Level 1 Service Provider — the most stringent level of payment security certification available. When you enter your payment card details, that information is transmitted directly to Stripe's secure servers. We never receive, process, or store your full card number, CVV, or other sensitive payment credentials on our systems. For more information, please review Stripe's Privacy Policy.

6. Research & Assessment Data

The Myers-Briggs Company conducts ongoing research to validate and improve the Strong Interest Inventory. Your assessment responses may be included in this research in a strictly anonymized and aggregated form. At no point will researchers receive your name, email address, or any other directly identifying information in connection with your assessment data.

If we ever wish to invite you to participate in a specific research study, we will ask for your explicit consent in advance. Participation is always voluntary and will not affect your access to the Platform or your results.

7. Data Retention & Deletion

We retain your account and assessment data for as long as your account is active or as needed to provide the Platform. If you request deletion of your account, we will permanently delete your personal information from our systems within 30 days, subject to any legal retention obligations.

Anonymized, non-identifying research data derived from your assessment responses may be retained indefinitely as part of our ongoing normative research database.

To request deletion of your account and data, please contact us at privacy@gostrong.dev.

8. Cookies

We use the following types of cookies:

• Essential cookies — required for authentication and session management. The Platform cannot function without these.
• Analytics cookies — help us understand how users interact with the Platform so we can improve it. These are anonymized and aggregated.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from signing in.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal information.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain uses of your data, including direct marketing.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@gostrong.dev. We will respond within 30 days.

10. Children's Privacy

The Platform is intended for users aged 16 and older. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information promptly. If you believe a minor has registered an account, please contact us at privacy@gostrong.dev.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform prior to the change becoming effective. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact: