Objective320 is operated by Red Diamond Strategic, LLC ("we," "us," "Objective320"). This policy explains what information we collect when you use objective320.com and our tools, how we use it, and the choices you have. Questions? Email support@objective320.com.
Information we collect
- Information you provide. If you ask us to email your results or save your progress, we collect the email address you enter and the self-assessment answers you submit (control selections and gap notes). If you buy the Starter Kit, our payment processor collects your payment details; we receive your email address and a confirmation that payment succeeded — we never see or store your full card number.
- Usage data. To understand how the tools are used and where visitors come from, we log basic request data: the page visited, an approximate referrer, coarse country, and browser user-agent. We use a Reddit advertising pixel on our marketing and tool pages for conversion measurement and retargeting; it is not present on signed-in pages. Our first-party analytics uses a random anonymous identifier stored in a cookie on your device to count visits and understand how the site is used; it contains no personal information and is never shared.
- Local storage. The SPRS and SSP tools may save your in-progress answers in your own browser (localStorage) so you can resume. That data stays on your device unless you ask us to email or save it.
How we use it
- To deliver what you asked for — your results, your saved-resume link, your Starter Kit download link, and your receipt.
- To operate, secure, and improve the tools and content.
- To send occasional CMMC/NIST updates only if you opt in to our newsletter. Every newsletter email includes an unsubscribe link.
Service providers we use
We share the minimum data needed with vetted processors who act on our behalf: Cloudflare (hosting and delivery), Stripe (payment processing), Resend (transactional email such as your results and receipt), and beehiiv and Kit (newsletter delivery, if you subscribe). Each has its own privacy and security terms. We do not sell your personal information.
Accounts & your saved packet
If you create a free account, we store your email address and your CMMC packet so you can pick up your work on any device. Your packet is the control statuses you select plus any milestone text you type — it does not contain, and should never contain, actual CUI. We keep up to the last 10 versions of your packet so you can restore earlier work. If you sign in with Google or Microsoft, we receive your verified email address and a provider account identifier used only to link that sign-in to your account.
Your account and packet remain until you delete them. You can delete your account and packet at any time from your dashboard (Settings → Delete my account & packet). Deletion permanently erases your account, your packet, and all saved versions; we retain only an anonymized, non-identifying record for aggregate reporting. You can also sign out of all devices from the same place.
Data retention
We keep lead and purchase records only as long as needed to provide the service, meet legal and tax obligations, and support you. Account data is kept until you delete it; we may remove accounts that stay dormant for more than 24 months. You can ask us to delete your information at any time (see below).
Your choices
- Unsubscribe from the newsletter using the link in any email.
- Access or delete your data by emailing support@objective320.com. Depending on where you live (for example, under GDPR or the CCPA), you may have additional rights to access, correct, delete, or restrict use of your information; we honor those requests.
- Clear your browser's storage to remove locally-saved tool progress.
Security
We use reputable infrastructure and encryption in transit (HTTPS), and we limit access to the data we hold. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
Children
This is a business tool and is not directed to children. We do not knowingly collect information from anyone under 16.
Changes
We may update this policy as the site evolves. Material changes will be reflected by the "last updated" date above.
Contact
Red Diamond Strategic, LLC · support@objective320.com