Business MRI™

Privacy Policy

Last updated: July 17, 2026

1. Who we are

Business MRI™ is a product of Extreme Results Technologies Inc. ("Business MRI", "we", "us", or "our"), located at 1000 Brickell Avenue, Miami, FL 33131. This policy explains what personal information we collect through businessmri.ai and mri.extremeresultstechnologies.com (the "Service"), why we collect it, and the choices you have.

2. Information we collect

When you use the Service, we collect:

Assessment data — your answers to the Business MRI™ assessment questions, and the organization details you provide (e.g. industry, revenue range, employee count, country).
Contact data — if you choose to receive your report by email, your name, email address, and (optionally) phone number.
Payment data — if you purchase the Executive Blueprint™, payment is processed entirely by Stripe. We never receive or store your full card number, CVV, or bank details — only a confirmation that payment succeeded and the amount charged.
Usage and device data — pages visited, referring page, browser/device type, and approximate location (derived from IP address), collected automatically via cookies and similar technologies (see Section 4).
Communications — anything you send us directly, e.g. support requests to support@businessmri.ai.

3. How we use your information

We use your information to:

generate and deliver your Executive Intelligence Report and, if purchased, your Executive Blueprint™;
process payment, prevent fraud, and issue refunds where applicable;
respond to support requests and send transactional emails (e.g. delivery notifications, resume links);
measure and improve the Service, including which parts of the assessment are difficult or abandoned (in aggregate, not to profile you individually); and
measure the effectiveness of our own advertising (see Section 5) and, if you opt in to marketing communications, send them to you.

We do not sell your personal information, and we do not use your assessment answers to train third-party AI models beyond what is strictly necessary to generate your own report.

4. Cookies and tracking technologies

We and our service providers use cookies, pixels, and similar technologies for:

Essential functioning — keeping your assessment session and secure report links working.
Analytics — Google Analytics (gtag.js), to understand aggregate traffic and usage patterns.
Advertising and conversion measurement — the Meta (Facebook) Pixel, to measure the effectiveness of our advertising campaigns and to build custom or lookalike audiences for future ads. See Section 5 for the specific disclosures Meta requires we make about this.

You can control cookies through your browser settings, and where applicable we honor the Global Privacy Control (GPC) signal as an opt-out request under CCPA/CPRA (see Section 7).

5. Advertising through Meta (Facebook/Instagram) Business Tools

We use the Meta Pixel, a Meta Business Tool, on the Service. As required by Meta's Business Tools Terms, we disclose the following:

The Meta Pixel collects information about your visit to the Service (e.g. pages viewed, whether you started or completed an assessment, whether you purchased) and shares it with Meta Platforms, Inc.
We use this data to measure the performance of our Facebook and Instagram advertising, to attribute conversions to specific campaigns, and to build custom and lookalike audiences for future campaigns.
Meta may combine the information it receives from our Pixel with other information it has about you from your use of its own services, in accordance with Meta's Data Policy.
You can control how Meta uses your data for ads through Meta's own Ad Preferences and can opt out of interest-based advertising via the Digital Advertising Alliance.
We only send the Pixel the minimum data needed for measurement and do not intentionally send it sensitive information (e.g. health, financial account numbers) beyond the fact that a purchase occurred and its amount.

6. Third-party service providers

We share information with the following processors, each bound to process it only to provide their service to us:

Stripe (payments) — stripe.com/privacy
Supabase (database/hosting of assessment data) — supabase.com/privacy
Resend (transactional email delivery) — resend.com/legal/privacy-policy
Meta Platforms, Inc. (advertising/Pixel) — see Section 5.
Google (Google Analytics) — policies.google.com/privacy

We do not otherwise sell, rent, or trade your personal information to third parties for their own independent marketing purposes.

7. Your privacy rights

Depending on where you live, you may have some or all of the following rights. To exercise any of them, contact us at support@businessmri.ai.

If you are in the European Economic Area or United Kingdom (GDPR/UK GDPR)

You have the right to access, correct, delete, or export your data; to restrict or object to certain processing; and to withdraw consent at any time. Our legal bases for processing are: performance of a contract (to deliver your report/Blueprint), legitimate interests (service improvement, fraud prevention, and, for existing customers, direct marketing), and consent (advertising cookies, marketing emails). You may lodge a complaint with your local data protection supervisory authority. [Insert an EU representative contact before launch if the business processes EEA/UK data at scale.]

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect, to request deletion or correction of it, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising — which, under CCPA/CPRA's broad definition, includes our use of the Meta Pixel described in Section 5. You can opt out by enabling the Global Privacy Control in your browser or by contacting us at support@businessmri.ai. We will not discriminate against you for exercising these rights.

If you are in Brazil (LGPD)

You have the right to confirm whether we process your data, to access, correct, anonymize, or delete it, to request portability, and to revoke consent, under Lei Geral de Proteção de Dados (Law No. 13,709/2018). You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

8. Data retention

We retain assessment and report data for as long as your account/session is active plus a reasonable period afterward to allow you to return to it, and in any case no longer than necessary for the purposes above or as required by law (e.g. payment records for tax/accounting purposes). [Insert the exact retention windows before launch — e.g. N months after last activity for incomplete sessions, N years for paid-purchase and tax records.] You may request earlier deletion at any time by contacting support@businessmri.ai.

9. International data transfers

Our service providers may process data outside your home country, including in the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

10. Children's privacy

The Service is intended for business professionals aged 18 and over. We do not knowingly collect personal information from anyone under 18.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit and access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where required by law, notify you by email or an in-product notice.

13. Contact us

Questions about this policy, or to exercise any of the rights above, can be sent to support@businessmri.ai.

Business MRI™