ACS BUSINESS OPERATIONS DIAGNOSTIC
Privacy Policy
Affiliated Corporate Services, LLC (“ACS,” “we,” “us”) operates the ACS Business Operations Diagnostic (the “Diagnostic”), a questionnaire that produces a complimentary two-page operational snapshot. This policy explains what information the Diagnostic collects, how we use and share it, how long we keep it, and the choices you have.
- We collect only what is needed to run the Diagnostic: your account details, your organization details, your answers, and the resulting scores and report.
- Sharing your report with ACS is optional and separate from receiving it yourself.
- We do not sell your information, and we do not use it for advertising.
- Unfinished assessments are available for 7 days after your last saved answer. Completed assessments and reports are available for 30 days after completion. Expired content is removed through scheduled cleanup, subject to the exceptions below. Download your report before it expires.
- Scores are preliminary indicators based on your answers. They are not an audit.
1. Who we are and how to reach us
Affiliated Corporate Services, LLC, a North Carolina limited liability company.
Email: info@acsllc-nc.com · Telephone: 336.338.3454
2. Information we collect
Information you provide
| Category | Examples | Why we need it |
|---|---|---|
| Account information | Email address; your name if provided; password if you choose password-based registration (handled by our authentication service and not visible to ACS staff); Terms acceptance version and time supplied at registration | To create and verify your account and let you sign in |
| Organization information | Company name, industry or business category, business contact email, your role in the organization, and team members you invite | To associate assessments and reports with the correct organization and control who can see them |
| Assessment responses | Your answers to the 25 questions about scheduling, work execution, quality, administration and cost control | To calculate scores and generate your report |
| Results and reports | Area scores, overall score, priority findings, and the PDF report generated from them | To deliver the Diagnostic to you |
| Email retrieval and sharing choices | Respondent email, assessment reference, and your choices about emailing the report to you or sharing it with ACS | To send a one-time verification link, deliver the report, and honor your choices |
| Messages to ACS | Anything you send when you email or call us, such as asking about the complimentary 30-minute assessment | To respond to you |
Please answer based on your business operations. Do not enter unnecessary personal information about employees or customers, social security numbers, payment card numbers, health information, or other sensitive personal data in any field. The Diagnostic does not need them. Your own requested name and business contact details are permitted.
Information collected automatically
- Technical information. Like most websites, our hosting and backend providers receive your IP address, browser type and the dates and times of requests. This is used to deliver the site, keep it secure and troubleshoot problems.
- Browser storage. To keep you signed in and let you resume your work, your browser stores a sign-in session and reference numbers for your most recent draft and completed assessment. This is stored on your device, not used for advertising, and can be cleared using your browser settings. Signing out clears the active session; assessment references may remain on that device for recovery.
- No advertising or analytics trackers. The Diagnostic does not currently use advertising cookies, social-media pixels or third-party analytics.
3. How we use information
- To create and secure accounts, and to verify email addresses.
- To save your answers, calculate scores and generate your report.
- To let you retrieve your report, including through a private one-time verification link sent to your email.
- To operate organization features, including invitations and role-based access for your team.
- To send service messages such as verification links and report-access emails.
- To respond to your questions and, if you ask, to discuss your priorities with you.
- To maintain, secure and improve the Diagnostic, and to comply with legal obligations.
Receiving your report, or sharing it with ACS, does not subscribe you to marketing. We will send you marketing only if you separately ask for it.
We use technical and service-level records to maintain and improve the Diagnostic. We do not publish customer assessment answers or identifiable results as marketing examples without permission.
4. How we share information
We do not sell your personal information and we do not share it for advertising. We share information only as follows.
- Optional ACS review and follow-up. Sharing your completed report with ACS for review and follow-up is optional and separate from receiving your own access email. You can withdraw these permissions in the report email preferences or contact us for help. Withdrawal blocks unused verification links and subsequent access through the affected emailed links. It cannot recall an email, a downloaded PDF, or an already issued PDF link before its short expiration.
- Authorized ACS support and administration. Separately authorized ACS operators may access available assessments for a recorded support or administrative purpose. Operator access requires multi-factor authentication and is audited. This operational access is separate from optional sharing for follow-up.
- Within your organization. Organization owners, administrators and managers can see assessments and reports according to their role and the assessment assignments in your organization. Invitation links are created by your organization’s authorized administrators, who may choose to email an invitation to the specified recipient or share it privately.
- Service providers that run the Diagnostic on our behalf. These providers process information only to provide their services to us:
- Supabase, for authentication, database, file storage and server functions;
- Netlify, for website hosting;
- Turbify / Yahoo Business Mail, for sending verification and report emails.
- Legal and safety. We may disclose information if required by law or legal process, or to protect the rights, property or safety of ACS, our users or others.
- Business transfers. If ACS is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, and we would require the recipient to honor this policy.
5. How long we keep information
| Item | Retention |
|---|---|
| Unfinished assessments | Access expires 7 days after your most recent saved answer; eligible content is then queued for scheduled deletion. |
| Completed assessments and generated reports | Access expires 30 days after completion; eligible content is then queued for scheduled deletion. |
| Secure PDF download links | Expire after 5 minutes; you can request a fresh link while your report is available |
| Organization invitation links | Expire after 7 days and can be used once |
| Account and organization profile | Kept separately from assessment expiration while your account or organization remains in use. Contact ACS to request deletion; authorization and legal obligations may affect what can be removed. |
| Security and technical logs, and backups | Separate from the 7- and 30-day assessment periods. Consent, access-audit and deletion-safety records currently have no automatic deletion period. Provider logs and any backups follow provider settings and schedules; removal from active service does not imply immediate erasure from every provider record or backup. |
| Messages you send to ACS | Retained separately as business correspondence for handling your request and related business or legal needs; no automatic assessment-based deletion period applies. |
Because completed reports are available for only 30 days, please download or print your copy before then.
Sharing through the Diagnostic sends a private access link, not a PDF attachment, and does not extend report availability. If ACS downloads a copy for an agreed engagement, its handling and retention are addressed separately. Authorized holds, legal requirements, cleanup retries and security investigations may delay physical deletion. Expiration continues to restrict ordinary access.
6. How we protect information
We use reasonable administrative, technical and organizational safeguards. These include encrypted connections (HTTPS), account verification, role-based access controls, private storage for reports, short-lived download links, and multi-factor authentication for ACS staff who have operator access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please choose a strong, unique password and do not share download or invitation links.
7. Your choices and rights
- Access and correction. You can view and update your name and organization details in the Account section after signing in.
- Delete your information. Contact us to ask that we delete your account, organization profile, assessments or reports. We verify the requester’s identity and authority, review the scope of the request, and explain the action taken or any retention exception. We respond within any applicable legal deadline; organization records may also involve the organization’s authorized owner.
- Withdraw sharing. Use the report email preferences to withdraw respondent delivery or ACS sharing separately, or contact us for assistance. Withdrawal does not remove your own account-based access to an otherwise available assessment.
- Email choices. Verification and report-access emails are service messages. Respondent delivery and sharing with ACS are separate, optional choices.
- Browser storage. You can clear stored data in your browser settings. Signing out also clears your session.
Depending on where you live, you may have additional rights under state privacy laws, such as the right to know, correct, delete or obtain a copy of your personal information. You may exercise any of them by contacting us. We will not discriminate against you for doing so.
8. Business use and children
The Diagnostic is intended for business owners, managers and their authorized team members. It is not directed to children, and we do not knowingly collect information from anyone under 18.
9. Third-party sites
The Diagnostic links to other websites, such as acsllc-nc.com. This policy does not apply to those sites, and we encourage you to read their policies.
10. Where information is processed
ACS is based in North Carolina, United States. The Diagnostic’s Supabase backend is configured in the U.S. West (Oregon) region. Netlify delivers the website through a distributed network, and hosting, email and other providers may process technical information in additional locations under their service arrangements. If you use the Diagnostic outside the United States, information may be transferred to the United States and other provider processing locations.
11. Reports and results are not professional advice
Scores and findings describe operational friction as reported in your answers. They are preliminary indicators, not verified audit findings or validated industry benchmarks, and they are not legal, financial or other professional advice. See our Terms of Use.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the “Last updated” date. If a change is material, we will give additional notice where appropriate.
13. Contact us
Questions or requests about this policy or your information:
Affiliated Corporate Services, LLC
info@acsllc-nc.com · 336.338.3454