Privacy Policy

We collect information you voluntarily provide, including: • Email address — when you subscribe to the newsletter, download a Field Guide resource, take the Five Modes Assessment, or submit a contact or inquiry form. • Name — when you submit a contact form, assessment, or Code Lab registration. • Assessment responses — your answers to the Five Modes Assessment questions, used to generate your mode result. • Inquiry and form data — role, organization, team size, and other context fields you complete on inquiry forms. • Usage data — anonymized analytics (page views, session duration). We use privacy-first analytics that do not use cookies and do not track you across sites or devices. This site does not collect full card numbers directly. Code Lab purchases are processed by Stripe, which handles your card details under its own terms and privacy policy. Purchases made through Amazon or other third-party retailers are governed by those platforms' own policies. See Section 12 for what transaction metadata we retain.

If you use the Code Lab (the private practice application at thefourthturningleader.com/app), we collect and store: • Account information — email address and name used to create and identify your account. • Assessment results — your Five Modes Assessment scores and dominant mode designation. • Private reflections — including but not limited to: Shadow Audit entries, Honor Code drafts, Decision Room memos, Midnight Review entries, Endurance Ledger records, and Transmission Plan drafts. • Session and usage data — to maintain your account, restore session state, and improve the application. Private reflection data is associated with your account and is not visible to other users, organization administrators, or the public by default. See Sections 4–7 for specific treatment of each data type.

The Code Lab is designed for private leadership practice. Depending on which tools you use, your reflections may include: • Personal values, commitments, and ethical lines. • Descriptions of past decisions, dilemmas, and pressures you have faced. • Notes about colleagues, direct reports, or organizational dynamics. • Descriptions of sensitive business situations. Important: You should not enter information that is legally privileged (e.g., attorney-client communications), subject to confidentiality agreements with third parties, or regulated (e.g., protected health information, material nonpublic information) unless you have the authority to do so and have reviewed whether this platform is an appropriate context for that information. The platform is a reflection environment, not a secure legal or compliance system.

Your Five Modes Assessment results are: • Stored on your account for use across Code Lab tools (Shadow Audit, Honor Code Builder, etc.). • Used in aggregate — stripped of identifying information — to understand overall assessment patterns across the platform. • Not shared with your employer, organization, or any third party without your explicit consent. If you take the assessment without creating an account, your results are stored temporarily to generate your results page. They may be retained in aggregate form without personal identifiers.

The following data types are treated as private by default: • Honor Code drafts and final code — visible only to you. You may export or share them at your discretion. • Decision Room memos — private to your account. Not shared with organization administrators. • Shadow Audit entries — private to your account. • Midnight Review and Endurance Ledger entries — private journaling records, not shared. • Transmission Plan — private to your account unless you explicitly share a component with a named successor or facilitator. If you participate in a Six-Week Code Lab cohort, the cohort facilitator may see deliverables you explicitly submit as part of cohort requirements. What you submit for cohort review is separate from your private journal and memo data (see Section 9).

The Code Lab may include AI-assisted reflection prompts, response scaffolding, or language analysis tools (e.g., Generic Language Detector) within the private application. These in-app AI tools are reflection aids. They are not: • A source of legal, financial, medical, therapeutic, tax, compliance, employment, or professional advice. • A substitute for professional judgment. • A reliable record of fact or a legally admissible document. AI outputs within the Code Lab may be incomplete, incorrect, or contextually limited. You remain responsible for your decisions and their consequences. See the no-advice notice below.

If your organization has arranged a group engagement (diagnostic, workshop, or organizational Code Lab), the following rules apply by default: • Organization administrators and facilitators see aggregate results only — for example, mode distribution across a team, not individual raw responses. • Individual raw reflections — including your personal honor code drafts, decision memos, shadow audit entries, and journal records — are not shared with organization administrators by default. • Team Mode Maps and Shadow Heat Maps show patterns across the group without attributing individual responses by name unless you have explicitly consented to named attribution. If a specific engagement requires a different sharing arrangement, that will be disclosed clearly before you begin and will require your affirmative consent.

In a Six-Week Code Lab cohort or facilitated engagement: • You choose what to share with the cohort group and facilitator. • Where a cohort requires a specific deliverable (e.g., a final Code Packet or a Hard Call Clinic submission), that requirement will be disclosed clearly in the cohort materials before enrollment. • Cohort facilitators are bound by confidentiality expectations communicated at enrollment. • Peer cohort members are expected — but not contractually required — to treat shared content with discretion. The platform cannot enforce confidentiality among peers.

The Hard Call Clinic is available only when enabled for eligible programs (such as cohort or facilitated engagements). It is not part of the standard self-guided experience. When the Hard Call Clinic is active for a program you have joined: • Participation requires explicit informed consent before any submission is shared for review. Submission-specific consent language is shown to you at the moment of submission and describes who will see the material, how it will be used in the session, whether it will be recorded, and retention terms. • You may modify or withdraw your submission before the session begins. Withdrawal after a session begins may not be possible if material has already been shared with reviewers. • Facilitators are bound by the confidentiality expectations communicated at enrollment. Peer participants are expected to treat shared content with discretion; the platform cannot enforce confidentiality among peers.

When you subscribe to the newsletter or request resources: • Your email address is added to our email platform (currently Substack). • You may receive leadership dispatches, resource announcements, and relevant updates. • You can unsubscribe at any time using the link in any email. • We do not sell your email address to third parties. Transactional emails (account confirmation, password reset, Code Lab notifications) are sent via our email service provider and are not marketing communications.

Code Lab payments are processed by Stripe. Stripe handles your card data under its own terms and privacy policy. We do not store your full card number on our servers. We do retain transaction metadata associated with your account, which may include: • Amount, date, and currency of each transaction. • Product or plan purchased and access level granted. • Payment status (succeeded, refunded, disputed, cancelled). • Stripe customer, checkout session, payment intent, and subscription identifiers. • Refund and dispute records. • Billing email and, where required for fulfillment, shipping name, address, and phone. This metadata is retained to support access control, fulfillment, accounting, fraud prevention, dispute handling, taxes, and support, and to comply with applicable record-keeping obligations.

You have the right to: • Export your Code Lab data — request a copy of your stored reflections, assessment results, and account data. • Delete your account and associated data — submit a deletion request and your data will be removed within 30 days, except where retention is required for legal or accounting purposes. • Correct inaccurate account information — update it in your account settings or contact us directly. • Unsubscribe from email at any time using the unsubscribe link in any email. To exercise any of these rights: Email: chris@bsidecapital.com Or use the contact form at thefourthturningleader.com/about This Privacy Policy was last updated in April 2026. We may update it periodically. Continued use of the site or Code Lab after an update constitutes acceptance of the revised policy.