CAPIT Privacy Policy

We are Humarix Solutions LLC, with a principal place of business at 2501 Chatham Rd Ste N, Springfield, IL 62704-4188.

For privacy-related inquiries, contact info@humarixsolutions.com.

(a) United States Only. The Services are designed for and offered to businesses and individuals located in the United States. Humarix does not knowingly collect Personal Information from individuals located outside the United States, and the Services are not currently intended for use by individuals located outside the United States. Humarix may expand its offering to additional jurisdictions in the future; this Privacy Policy will be updated accordingly.

(b) Business Customers, Not Consumers. CAPIT is sold to businesses (typically through CEOs, CFOs, COOs, CHROs, VPs of HR, and PE operating partners). Individuals access the Services as Authorized Users designated by a customer organization (a “Customer”).

(a) Information Provided Directly. When Authorized Users access the Services, we collect account information (name, business email, role, employer), authentication information (passwords, multi-factor authentication tokens), and any segment-level workforce data and business inputs entered into the Platform.

(b) Information Collected Automatically. We automatically collect log data (IP address, browser type, device type, operating system, referring/exit pages, date/time stamps, and clickstream data), and essential cookies as described in Section 7.

(c) Information from Customers. Customer organizations may provide us with the names and business contact information of their Authorized Users for the purpose of account provisioning.

(d) Information We Do Not Collect. We do not collect, and we contractually prohibit Customers from submitting: individual employee names, employee identifiers, individual salary or compensation records, individual performance evaluations, dates of birth, social security or government identifiers, health information, biometric information, or other categories of sensitive personal information.

(a) Provide and Improve the Services. We use information to operate the Platform, authenticate Authorized Users, deliver analytical outputs, support Customers, prevent fraud and abuse, and improve the security and functionality of the Services.

(b) No Training of External AI Models. We do not use Customer-provided information, inputs, prompts, parameters, narratives, or outputs derived therefrom to train, fine-tune, develop, or improve any machine learning model, neural network, generative model, large language model, or other artificial intelligence system, whether internal to Humarix or operated by any third party.

(a) Service Providers. We share information with service providers acting on our behalf. For the Platform, this includes cloud hosting and infrastructure providers, identity and authentication providers, transactional email providers, and our AI/ML processing partner. For the Marketing Site, this additionally includes website analytics providers, marketing email and customer relationship management platforms, and (only if and when we activate paid advertising) advertising platforms. Service providers are bound by contractual confidentiality, security, and use-limitation obligations. A current list of our service providers and subprocessors is available on written request to info@humarixsolutions.com.

(b) Customer Organizations. Information submitted by an Authorized User on behalf of a Customer is made available to that Customer's other Authorized Users in accordance with the Customer's account configuration. Humarix is not responsible for what Customers do with their own Customer Data within the Services.

(c) Legal Requirements. We may disclose information when required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect rights, comply with legal obligations, or address fraud, security, or safety.

(d) Business Transfers. We may share or transfer information in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to the surviving entity assuming this Privacy Policy or providing notice and an opportunity to opt out.

We retain account information for as long as the Customer's subscription is active, and for a reasonable period thereafter as needed to fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce our agreements. Workforce data submitted to the Platform is retained subject to the Customer's instructions and the data deletion provisions of the applicable customer agreement. Aggregated and de-identified data may be retained indefinitely.

We use cookies and similar technologies on the Marketing Site and the Platform. The Platform (capithumancapital.com) is invite-only and uses only essential cookies necessary for authentication, session management, and platform security. The Marketing Site (humarixsolutions.com) may set cookies from the categories below, based on the consent choices made by each visitor through our cookie consent banner. Our cookie categories are: (1) Essential cookies, which are required for the Services to function and are always active (no consent required under applicable law); (2) Functional cookies, which remember visitor preferences such as language and display options, set only after consent; (3) Analytics cookies, which help us understand how visitors use the Marketing Site, set only after consent; and (4) Advertising cookies, which support marketing campaigns and retargeting on third-party platforms. Advertising cookies are not active at this time; if and when we begin running paid advertising, they will be available only after consent. Visitors can change their cookie preferences at any time through the cookie preferences link in the footer of the Marketing Site, or by configuring their browser to refuse cookies, though doing so may impair functionality.

We send marketing emails only to individuals who have requested them, including by submitting a form on the Marketing Site, attending a Humarix event, or otherwise affirmatively opting in. Every marketing email we send includes a clear unsubscribe link and a physical mailing address. You may unsubscribe from them using the hyperlink at the bottom of the email message. Transactional messages — such as account verification, security alerts, billing notices, and other communications necessary to support a Customer's use of the Services — are not subject to the marketing-email unsubscribe option and will continue regardless of marketing-email preferences.

We maintain administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, or destruction. CAPIT is SOC 2 Type 1 compliant covering the AICPA Trust Service Criteria. No security program is perfectly secure; we cannot guarantee absolute security.

The Platform uses artificial intelligence and machine learning technologies as part of its analytical capabilities. This section describes how those technologies are used and the safeguards we maintain.

(a) Role of AI. AI is used within the Platform to execute calculations using Humarix's proprietary models and user-supplied inputs, and to synthesize narrative text from the structured outputs those models produce. AI does not independently generate strategic recommendations, financial projections, or investment figures — those are produced by Humarix's proprietary methodology. The underlying AI technology is provided by third-party partners; however, for security and competitive reasons, Humarix does not publicly identify its AI vendors.

(b) Human Oversight. The Platform is designed as a decision-support tool, not an autonomous decision-maker. All outputs — including financial projections, implementation roadmaps, and strategic recommendations — are intended for review, evaluation, and independent judgment by qualified professionals (such as CEOs, CFOs, COOs, CHROs, HR leaders, and executive teams) before any business or employment-related decision is made. Humarix does not intend for Platform outputs to serve as the sole or determinative basis for any consequential decision affecting individuals.

(c) No AI Training on Customer Data. As described in Section 4(b), we do not use Customer-provided information, inputs, or outputs to train, fine-tune, or improve any AI or machine learning model, whether internal or third-party. This commitment is reflected in our Terms of Service, Master Services Agreement, and applicable data processing agreements.

(d) Fairness and Bias Mitigation. Humarix is committed to designing the Platform to produce outputs that are fair and do not reflect impermissible bias. Because the Platform processes segment-level workforce data (not individual employee data), and because strategic outputs are subject to human review before implementation, the risk of automated bias affecting individual employment outcomes is limited by design. We periodically review our models and outputs for potential bias as part of our ongoing product development practices.

(e) Evolving AI Regulation. The legal landscape governing AI in the United States is developing rapidly. Several states — including Colorado, Illinois, and others — have enacted or are considering legislation governing AI systems used in employment-related contexts. Humarix monitors these developments and will update this Privacy Policy and its practices as applicable requirements take effect. If you have questions about how AI is used in the Platform, contact info@humarixsolutions.com.

Several US states — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, and others — have enacted comprehensive privacy laws that grant residents rights such as access to, correction of, deletion of, and portability of their Personal Information, as well as the right to opt out of targeted advertising, the sale of Personal Information, and certain profiling activities. The specific rights available to you depend on the state where you reside and on whether Humarix meets the applicability thresholds established by that state's law. Humarix does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals and Universal Opt-Out Mechanisms to the extent required by applicable law. To exercise any right that may be available to you, or to inquire about the applicability of a specific state law to our processing of your information, contact us at info@humarixsolutions.com. We will not discriminate against you for exercising your privacy rights.

Before processing a rights request, we will take reasonable steps to verify your identity. The verification methods depend on the nature of your request and the sensitivity of the Personal Information involved. We may decline requests we cannot verify.

The Services are not directed to children under the age of 18, and we do not knowingly collect Personal Information from children. If we learn that we have collected Personal Information from a child under 18, we will delete it promptly.

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes will be communicated through the Services or by other reasonable means, including (where appropriate) re-acceptance via the first-login Terms acceptance flow.

Questions about this Privacy Policy or our privacy practices may be directed to:

Humarix Solutions LLC

Attn: Privacy

Humarix Solutions LLC, 2501 Chatham Rd Ste N, Springfield, IL 62704-4188

info@humarixsolutions.com