Privacy Policy
MOR Associates
Maximizing Organizational Resources Associates, Inc.
462 Main Street, Suite 300
Watertown, MA 02472
Last updated: May 22, 2026
MOR Associates (“MOR,” “we,” “us,” or “our”) provides leadership development programs, assessments, and related services to organizations and the professionals they enroll. This Privacy Policy explains what information we collect, how we use it, and the choices and rights you have, across all of our services — including our leadership program assessments, our website at morassociates.com, and the MOR mobile application (the “App,” available on iOS and Android).
1. Scope of this Policy
This policy covers personal information we receive or generate in connection with:
- Leadership program assessments and surveys (including 360° feedback collection)
- The MOR website at morassociates.com
- The MOR mobile application and its companion web platforms at m.morassociates.com and portal.morassociates.com
If you participate in an assessment but do not use the App, the App-specific sections of this policy will not apply to you. If you use the App, all relevant sections apply.
2. Information We Collect
2.1 Assessment Participants
When your employer enrolls you in a MOR assessment program, your employer will provide MOR with your first name, last name, and email address. You may also be asked to provide optional demographic information such as job title, department, and pronouns.
You will also be asked to complete a self assessment for your 360° survey; these 360° ratings and comments will be collected and held in the MOR App. This retention applies to any subsequent self-assessment data, including but not limited to program evaluations and the MOR Influence Impact Indicator©.
2.2 Assessment Respondents
If you are invited to provide feedback as a respondent in someone else’s 360° assessment, MOR will collect your first name, last name, email address, and optional demographic information about your familiarity with the assessed participant(s).
360° ratings and comments you provide regarding the assessed participant(s) will be collected and kept in the MOR App.
It is possible to be a participant and respondent, e.g. you participate in a program and are also a respondent for a peer partaking in a MOR program before/after/with you. In this case, retention of 360° data in sections 2.1 and 2.2 both apply.
2.3 MOR App Account & Profile Information
When you use the MOR App, we collect:
- Account credentials (email address and password, stored using industry-standard hashing) or, if you choose, the email and profile information from your Google account via Sign-In with Google
- Profile fields you provide, including: legal first and last name, preferred first name, name pronunciation guide, preferred pronouns, profile photo, job title, department or unit or campus, employer/organization, LinkedIn or website URL, phone number, work address, a short biography, interests, present duties, and previous positions
- Information about your enrollment in MOR programs (program name, cohort, assigned coach)
- Your consent preference for the use of your photo or video in MOR publications, alumni communications, and social media
- Notification preferences and consent records
2.4 Personalization, Dietary, and Accessibility Information
To support in-person program events, formal recognition, and program logistics, MOR optionally collects:
- Your full name as you would like it to appear on a certificate or formal recognition of completion
- Food allergies (selected from a predefined list, with an optional free-text “other” field)
- Preferred diet (selected from a predefined list including pescatarian, vegetarian, and vegan, with an optional free-text “other” field)
- Accommodations or other needs (e.g., wheelchair access, lactation rooms, hearing or visual accommodations) — provided as free-text
- Email reminder frequency preference
- Per-notification-type push and email preferences
We recognize that some of this information — particularly dietary restrictions, allergies, and accessibility needs — may relate to health, disability, or religious practice. We collect these only because you provide them, we use them only for program logistics and accommodation, and we share them only with the operations staff who need them to fulfill the relevant logistical purpose (e.g. event catering). By submitting your dietary information, you grant consent for it to be shared with partnering operational staff for logistical purposes only.
2.5 Content You Create in the App
When you use the App’s features, the content you create is stored on our systems:
- Journal entries, weekly reflections, goals, and action items you write
- Notes and feedback authored by your assigned coach in connection with your participation Survey and assessment responses (separate from program-level assessments described in 2.1)
- Messages you send or receive through the App’s in-program messaging features
2.6 Device and Usage Information from the App
- Push notification tokens (so we can deliver notifications you’ve opted in to receive)
- Device model and operating system version
- Session identifiers and timestamps of significant actions (e.g., when a notification was read)
- Diagnostic information including crash reports, performance traces, and error logs collected to maintain App reliability
2.7 Web and App Analytics, and Cookies
Our website uses cookies to deliver web content specific to individual user interactions. Cookie consent is requested when the website is loaded, and can be declined. We collect basic analytics through Google Analytics on both our website and within the MOR App’s web platform, including the IP address of the computer being used, pages or routes visited, referring web page, browser used, and the date and time of access. In the App, analytics page tracking is enabled in production only and is sent to Google Analytics with route paths normalized so that user-specific identifiers in URLs (such as goal IDs) are replaced with placeholders rather than the literal values.
You can disable in-App analytics collection through a browser-based opt-out mechanism; contact MOR support if you would like assistance enabling this.
3. How We Use Your Information
Personally identifiable information plus 360° ratings and comments collected as part of a MOR program or survey assessment are used for the purpose of:
- Providing assessment-related services, such as individual and aggregate reporting
- In aggregate form, to do research and calculate normative benchmarks
360° ratings and comments are reported confidentially, without name or title, categorized only by relationship to the assessed participant. Exceptions include self and primary manager submissions.
Typically, text comments are reported verbatim, with no effort made to filter or edit them. If your writing style is unique, you should assume that your comments will be identifiable by the assessed participant(s). For more information on 360° data collection and reporting, see MOR Associates – 360° FAQs.
Information we collect through the MOR App is used to:
- Provide the App’s core functionality — your content, your in-program communications, and your program participation
- Deliver coaching feedback and program-related notifications
- Send push notifications about new activity, reflections, and program reminders (only with your permission)
- Generate optional weekly summaries of your participant notes using artificial intelligence (see Section 4)
- Maintain security, prevent fraud, and detect abuse
- Improve the App’s reliability and user experience
- Comply with legal obligations
MOR may analyze information collected through leadership programs, assessments, surveys, coaching-related tools, and program evaluations to understand participant growth, program effectiveness, common leadership themes, organizational benefits, and opportunities for improvement.
MOR may use aggregated and de-identified information for purposes including program evaluation, program improvement, benchmarking, research, development of norms, thought leadership, client education, business development, and marketing communications.
When using information for these purposes, MOR will not identify individual participants, assessment respondents, or client institutions unless MOR has obtained appropriate permission. MOR will take reasonable steps to remove or avoid names, email addresses, job titles, departments, institution-specific details, small-group results, or other information that could reasonably identify an individual or institution.
MOR will not use direct quotations from participant, respondent, or client comments in public marketing materials without permission. MOR may summarize, paraphrase, or aggregate common themes from written responses, provided the information is presented in a way that does not reasonably identify the individual, respondent, participant, or client institution.
Use of tools (such as AI) when summarizing, paraphrasing, or aggregating will not reproduce or share back (for machine learning) identifying information such as name or organizational affiliation.
MOR does not distribute or sell personal information to third-party organizations for marketing purposes.
4. AI-Generated Content Processing
The App uses OpenAI’s API to power two optional content-generation features. For both features, the content transmitted to OpenAI is the text being summarized; the API request does not include user identifiers, names, email addresses, account information, or other personal metadata. OpenAI’s API terms state that data sent via the API is not used to train OpenAI’s models.
4.1 Weekly Summaries of Your Journal Entries
The App can generate short weekly summaries based on the journal entries you have written. The feature is intended to help you notice themes and progress in your own writing.
When this feature is enabled for your account, the text content of your journal entries from the previous calendar week (Monday through Sunday) is transmitted to OpenAI for processing. The generated summary is stored on our servers. By default, only you can see your generated summary; however, the App offers an optional “Share with peers” toggle on each weekly summary.
When that toggle is on, the summary appears in your cohort’s activity feed, visible to other peers in your program. You control sharing on a per-summary basis and can toggle it on or off at any time.
This feature is enabled by default for new accounts and can be disabled entirely at any time from your account settings. When disabled, no notes are sent to OpenAI for summary generation.
4.2 AI Overview in Resource Search
When you search the MOR knowledge base (resources, articles, and other MOR-authored content) within the App, you may see an “AI Overview” section above the search results that synthesizes the most relevant documents into a brief leadership-coaching framing of the topic you searched.
To produce this overview, your search query and the text content of the relevant MOR-authored documents are transmitted to OpenAI. The content being summarized is MOR’s own knowledge-base content, not your personal content. The API request does not include your user identifier, name, email address, or other personal metadata; OpenAI sees only the search query and the document text. Generated overviews are returned to your device and not stored.
5. Service Providers and Sharing
MOR does not distribute or sell personal information to third-party organizations for marketing purposes.
We do share information with service providers that help us operate our services. These providers are contractually limited to using your information only to perform services for MOR. The principal categories of service providers we use are:
| Provider | Purpose | Information shared |
|---|---|---|
| Sendbird, Inc. | Real-time in-program chat infrastructure | Your account identifier; your full name (used as your chat display name and for member discovery); your profile photo URL (if you have one); discovery keys derived from your name; a Sendbird-issued access token associated with your account; and the content of messages you send or receive in the App |
| Google LLC (Sign-In with Google) | Optional authentication method | Your Google account email and basic profile, only if you choose Sign-In with Google |
| Firebase (Google LLC) | Push notification delivery | Device push notification tokens and the content of notifications |
| Sentry (Functional Software, Inc.) | Crash reporting and error monitoring | Diagnostic logs and error context, which may include device and session identifiers |
| SendGrid (Twilio Inc.) | Transactional and program email delivery | Recipient email address, sender email address, message subject, and message body for emails sent by MOR (including program notifications, digests, and reminders) |
| OpenAI, L.L.C. | AI-generated content processing (see Sections 4.1 and 4.2) | Text content of your journal entries when the weekly summary feature is used; your search query together with the text of MOR-authored documents matched by the resource search when the AI Overview is requested. No user identifiers, names, email addresses, account information, or metadata are transmitted. |
| Survey services including Qualtrics | Data collection | Data will be collected using a mailing list created from information provided to the MOR App (Section 2). In some instances, an anonymous link will be deployed: first name, last name, email address, and name(s) of affiliated participant(s) may be collected with this method. |
| Communication platforms (such as Mailchimp) | Email distribution, newsletters, and opt-in marketing comms | Email address and data as outlined in Section 2.3, bulleted items 2-4. Mass email platforms such as Mailchimp use Web Beacons or tracking pixels. These functions may collect the following behavioral and analytics data, which we use to measure campaign/communication effectiveness:
|
| Cloud infrastructure providers (including Railway, JawsDB, Google Drive, and Amazon Web Services) | Hosting and data storage | All MOR data, encrypted in transit and at rest |
| Google Analytics (Google LLC) | Website and in-App analytics | Usage information described in Section 2.7, including pages or routes visited (with user-specific identifiers normalized to placeholders in the App), referring page, browser, IP address, and time of access |
We may share aggregated and de-identified information that cannot reasonably be used to identify you, for research, benchmarking, or service improvement purposes. We will share information when required by law (subpoena, court order, regulatory request) and where we believe in good faith that sharing is necessary to protect the rights, property, or safety of MOR Associates, our users, or others.
6. Push Notifications
The App can deliver push notifications about new activity, weekly reflection reminders, and program-related events. You can enable or disable push notifications at any time:
Within your device’s operating system settings (iOS Settings or Android Settings)
Within your account preferences in the App
To deliver notifications, the App registers a device-specific push notification token with Apple Push Notification service (APNs) on iOS and with Firebase Cloud Messaging (FCM) on Android. Tokens are stored on our servers solely to enable notification delivery and are removed when the underlying push service reports the token as no longer valid (for example, after the App is uninstalled or notifications are turned off at the operating-system level). You can request earlier removal of stored tokens associated with your account by contacting MOR support.
7. In-Program Messaging
The App includes in-program messaging features that let you communicate with other enrolled participants and your assigned coach. Messages you send are visible to the recipients you address them to (individual participants, coaches, or group channels you participate in). Messaging is delivered via Sendbird (see Section 5). Messages are not visible to participants outside your program scope.
If you encounter content or behavior in the App that concerns you, please contact MOR support using the information in Section 14. Our operations staff can mute, ban, or remove participants from chat channels and take other appropriate actions on a case-by-case basis. (Self-serve in app reporting and blocking features are on the product roadmap; until they ship, reports go through support contact.)
8. Data Security
We use industry-standard administrative, physical, and technical measures to protect your information, including:
- Encryption of data in transit between your device and our servers using TLS (HTTPS)
- Encryption of data at rest on our cloud infrastructure
- Access controls limiting employee and contractor access to personal data on a need-to know basis
- Role-based access to data
- Audit logging of administrative access
- Standard authentication safeguards including password hashing
No system is perfectly secure. You can help by using a strong, unique password for your MOR account and by notifying us promptly at the contact information in Section 14 if you suspect unauthorized access to your account.
9. Data Retention
MOR will retain personally identifiable information in our assessment database indefinitely, or until you or your employer request that we remove it.
For MOR App data, we retain your account information and content for as long as your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes. When you request deletion of your App account, we will delete or de-identify your personal data within a reasonable period (typically within 30 to 60 days) of receiving the verified request, except for information we are required to retain for legal, accounting, or security purposes.
Other data we collect is retained only for as long as we need it, given the purposes for which it was collected.
10. Your Privacy Rights
10.1 General Rights
You have the right to contact MOR to request a review or erasure of your personal data, or to request the limitation of use and disclosure. To exercise these rights, contact us using the information in Section 14.
10.2 European Union and United Kingdom Residents (GDPR / UK GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (EU) 2016/ 679 (GDPR) and its UK equivalent:
- The right to access the personal data we hold about you
- The right to correct inaccurate or incomplete personal data
- The right to request deletion of your personal data
- The right to object to or restrict certain processing
- The right to data portability — to receive a copy of your data in a structured, machine readable format
- The right to withdraw consent at any time for processing based on consent
- The right to lodge a complaint with a supervisory authority in your country
10.3 California Residents (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:
- The right to know what personal information we collect, the sources, the purposes for collecting it, and the categories of third parties with whom we share it
- The right to request deletion of your personal information, subject to legal exceptions
- The right to correct inaccurate personal information
- The right to opt out of the sale or sharing of personal information — MOR does not sell or share personal information for cross-context behavioral advertising
- The right to limit the use and disclosure of sensitive personal information
- The right to non-discrimination for exercising any of these rights
To exercise your California rights, contact us using the information in Section 14. We will verify your request and respond within the timeframe required by law (generally 45 days).
11. Children’s Privacy
The MOR App and our services are intended for adult professionals enrolled in MOR
Associates’ leadership development programs. We do not knowingly collect personal information from children under the age of 13 (or under 16 where required by applicable law, including in the European Economic Area).
If we learn that we have collected personal information from a child without verified parental consent, we will delete that information. If you believe we may have collected information from a child, please contact us using the information in Section 14.
12. International Data Transfers
MOR Associates is based in the United States, and the information we collect is processed and stored on servers located in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence. By using our services, you consent to this transfer and processing.
Where required by applicable law (including the GDPR), we use appropriate safeguards for international data transfers, including standard contractual clauses with our service providers.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The “Last updated” date at the top of this policy indicates when it was most recently revised. Material changes will be communicated through the App, by email, or by posting prominent notice on our website. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
For questions about this Privacy Policy or to exercise your rights described above, please contact MOR Associates:
Phone: 617-924-4501
Email: [email protected]
Mailing address:
MOR Associates
462 Main St. Suite 300
Watertown, MA 02472
End of Privacy Policy, MOR Associates