Your data, protected.

We collect only the minimum personal information necessary to provide our Services, fulfill legal obligations, and improve our offerings. The categories of information we may collect include:

Sources of information:

• Directly from you — through forms, our website, calls, and emails. You are the primary source of information we collect.
• Indirectly — through cookies and similar technologies (see Section 4).
• Service providers — form intake (Formspree), payment processing (Stripe), email delivery, and website hosting providers.
• Public records — limited use of publicly available professional information (e.g., LinkedIn profiles) when sourcing candidates for employer searches.

We use the information we collect for legitimate business purposes only, including:

• Providing our Services — executive search, candidate-employer matching, and career-building coaching.
• Processing payments — through our payment provider for invoiced services such as career-building coaching and retained-search retainers.
• Communicating with you — sending transactional emails (coaching materials, receipts, search updates), responding to inquiries, and conducting calls related to your engagement.
• Improving our Services — analyzing site usage and refining our coaching and matching outcomes.
• Legal compliance — fraud detection, responding to subpoenas, fulfilling tax and reporting obligations.

Sensitive personal information. We limit our use of any sensitive personal information to what is necessary to provide the Service you requested. Sensitive information may include account credentials, financial information, precise geolocation, racial or ethnic origin, religious beliefs, sexual orientation, health information, biometrics, and the contents of your communications with us. You may request that we limit the use of sensitive personal information by contacting legal@vextapoint.com. This right is not absolute and we may decline under qualifying legal exemptions.

We minimize sharing of personal information. We may disclose your information only to:

• Service providers — third parties who perform functions on our behalf, including form intake (Formspree), payment processing (Stripe), email delivery, website hosting, and analytics. These providers have access only to the information needed to perform their function and are contractually obligated to maintain confidentiality.
• Employer clients (for candidates) — if you are a candidate placed through one of our employer searches, we share your finalist profile (4-Pillar brief, résumé, interview notes) with the employer engaging that search. We do not share candidate information with employers who have not engaged a search.
• Legal & government — when required by law, such as in response to a subpoena, court order, or lawful request from a public authority.
• Business successors — if VextaPoint Solutions LLC is acquired or merges with another entity, your information may be transferred (with notice to you).

We use cookies and similar technologies (such as web beacons) to provide and improve our Services.

• Essential cookies — required for site functionality, security, and basic navigation.
• Analytics cookies — help us understand how visitors use our site so we can improve it. We do not currently run advertising or behavioral retargeting pixels.

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies. If you choose to decline cookies, some features of our Services may not function as intended.

The use of tracking technologies by our service providers is governed by their own privacy policies. If we add advertising or behavioral retargeting tools (such as Meta Pixel or Google Analytics) in the future, this policy will be updated to disclose them and you will be given a meaningful opportunity to opt out where required by law.

Depending on your state of residence, you may have the following rights:

• Access / Know — request a copy of the personal information we hold about you, including categories, sources, and purposes of collection over the past 12 months.
• Correct — request that we correct inaccurate or incomplete information.
• Delete — request that we delete your personal information, subject to legal exemptions (such as records we must retain for tax or compliance purposes).
• Opt out — opt out of the sale or sharing of personal information (note: we do not sell or share for advertising purposes).
• Limit use of sensitive information — request that we limit our use of sensitive personal information.
• Portability — receive your data in a structured, portable format.
• Appeal — in certain states (including Texas), you have the right to appeal denial of a request. If we deny an appeal, you may contact your state Attorney General.
• Non-discrimination — we will not discriminate against you for exercising any of these rights.

How to exercise your rights. Submit a request by emailing legal@vextapoint.com with the subject "Privacy Rights Request." We will verify your identity using information we have previously collected before fulfilling your request, in accordance with applicable law. You may designate an authorized agent to make a request on your behalf with written authorization or a power of attorney; we may also require government-issued identification for both you and the agent.

We aim to respond to verified requests within 45 days, with a possible extension of 45 additional days where reasonable.

Security. Personal information is stored in operating environments that are not available to the public. We use industry-standard security measures to protect against unauthorized access, theft, or loss. We request proof of identity before disclosing personal information. While we work hard to safeguard your data, no transmission over the internet can be guaranteed to be 100% secure. We continuously review and update our security procedures.

Retention. We retain your personal information for as long as necessary to provide our Services and to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Career-building coaching data (résumé, goals, assessment and operating-pattern results) — retained for the duration of your engagement, plus up to 1 year afterward unless you request earlier deletion.
• Talent Search intake data — retained for the duration of the engagement, plus 7 years for legal and tax compliance.
• Payment records — retained for 7 years per IRS requirements.
• Email and call records — retained for 2 years unless related to an active engagement.

You may request deletion of data outside these retention periods at any time, subject to applicable legal exemptions.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or our Services. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where required, provide you with notice through email or a prominent notice on our Services.

Your continued use of our Services after any update constitutes acceptance of the revised Privacy Policy.

If you have questions or comments about this Privacy Policy or our privacy practices, please contact us at legal@vextapoint.com.

VextaPoint Solutions LLC
Attn: Privacy
legal@vextapoint.com