Private Policy

01 Scope of This Policy

This Privacy Policy explains how Reality-Ready Training ("RRT," "360Works," "we," "us," or "our") collects, uses, and protects information across the 360Works platform, including our marketing site (360works.org), our course-builder and admin application (app.360works.org) (together, the "Services").

360Works is a business-to-business platform. Our direct customers are universities, enterprises, associations, and other organizations ("Clients") who use 360Works to build and deliver training. Clients' employees, students, or members who take that training are "Learners." This policy describes our practices toward both groups, and distinguishes between data we control directly and data we process on a Client's behalf.

02 Information We Collect

Information you provide to us

• Contact and demo requests: name, email, company, phone number, and message content submitted through our contact form or "Schedule a Call" booking.

• Account information: name, work email, password (encrypted), organization, and role when you or your organization create an account on app.360works.org.

• Billing information: billing contact details and payment information, processed via our third-party payment provider (we do not store full payment card numbers).

• Communications: any information you send us directly by email or during a call.

Information collected automatically

• Usage data: pages visited, features used, time spent, referring URLs, and general interaction patterns within the Services.

• Device and log data: IP address, browser type, operating system, and device identifiers.

• Cookies and similar technologies: as described in the Cookies section below.

03 Client-Uploaded Content & Learner Data

Clients upload their own training materials to the platform — including 360° video, standard 2D video, images, and text-based content — and this content may depict real locations, facilities, or individuals. Clients are responsible for having the necessary rights and consents to upload this content, including consent from any identifiable individuals appearing in it.

As Learners use the platform, we process data on the Client's behalf, including: Learner name and email (as provided by the Client), course progress, quiz and assessment results, completion status, and, where a course includes LiveOps remote-assistance sessions, session recordings.

For this Learner data, the Client is the data controller and 360Works acts as a data processor (or "service provider," under CCPA terminology). We process this data only as instructed by the Client, to operate the Services, and do not use it for our own marketing purposes. Learners with questions about how their data is used should contact their organization directly; we will support the Client in responding to Learner requests where required.

04 How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Services, including course building, delivery, and LiveOps sessions

• Respond to inquiries, demo requests, and support questions

• Process transactions and manage Client accounts

• Generate the analytics and completion reporting Clients rely on (e.g. completion rates, assessment scores, time-to-competency)

• Improve and develop the Services

• Send administrative communications, and — where you've opted in — marketing communications about 360Works

• Detect, prevent, and address security incidents, fraud, or misuse

• Comply with legal obligations

05 How We Share Information

We do not sell personal information. We share information only in the following circumstances:

• With the relevant Client: a Learner's progress, assessment, and completion data is shared with the organization that assigned the training.

• Service providers: vendors who help us operate the Services (hosting, scheduling, form processing, analytics, customer support, payment processing), bound by contractual confidentiality and data protection obligations.

• Legal and safety reasons: where required by law, subpoena, or other legal process, or to protect the rights, property, or safety of RRT, our users, or others.

• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

• With your consent: for any other purpose disclosed to you at the time we collect the information.

06 Cookies & Tracking

We and our service providers use cookies and similar technologies to operate the Services, remember preferences, and understand how visitors use our marketing site. This may include analytics cookies (to understand site traffic) and functional cookies (to support features like scheduling and forms). You can control cookies through your browser settings; disabling certain cookies may affect site functionality.

07 Third-Party Services

The Services rely on a small number of third-party tools, each with its own privacy practices:

• Calendly: Scheduling demo calls

• Wufoo: Processing contact form submissions

• YouTube: Hosting and displaying embedded product videos

• Squarespace: Hosting our marketing website and related site analytics

We encourage you to review each provider's own privacy policy for details on their data practices.

08 Data Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction — including encryption in transit, access controls, and role-based permissions within the platform. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

09 Data Retention

We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Learner and course data is generally retained for the duration of the Client's contract with us, plus a limited period afterward, unless the Client requests earlier deletion or a longer retention period is required by law.

10 Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. If you are a Learner, please direct these requests to your organization first, since they control the data; we will assist them as needed. Clients and website visitors can reach us using the contact details below to exercise applicable rights.

You can opt out of marketing emails at any time using the unsubscribe link in those emails.

11 Children's Privacy

The Services are intended for business use by adult professionals and, where used in an educational setting, by university-level students. The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can address it.

12 International Users

We are based in the United States, and information we collect may be stored and processed in the United States or other countries where our service providers operate. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in a country with data protection laws that may differ from those of your home country.

13 Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify Clients directly. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.