Privacy Policy

Who we are

PrimeITPM ("we," "us") is operated by Niks Projects LLC, 136 NJ-10 #120, East Hanover, NJ 07936, United States. This policy describes how we collect, use, disclose, and protect information when you use primeitpm.com, our client portal, tools, and programs (together, the "Services"). Questions: nik@primeitpm.com.

Information we collect

• Account information — name and email address when you create a portal account (managed by our authentication provider, Clerk) or contact us.
• Purchase information — name, email, purchase details, and billing country when you buy a program or tool. Payments are processed by Stripe; your full card details never touch our servers.
• Program content you submit — deliverables, project work, reflections, and resumes you upload while using the portal and tools.
• Skill-Gap Analyzer responses — the experience selections you make in the free PM Skill-Gap Analyzer, your resulting scores and report, and (if you request the report by email) your first name and email address; analyses not claimed with an email address are deleted after 7 days.
• Usage data — pages visited, actions taken, device and browser information, approximate location, collected via cookies and similar technologies (Google Analytics, Microsoft Clarity).
• Advertising data — ad-interaction and conversion data (for example, that a checkout or purchase followed an ad), collected via the Meta Pixel and Google Ads tag only if you accept advertising cookies.

How we use it

• Deliver the Services you purchased, including portal access, coaching, and tools
• Send transactional messages (receipts, access details, onboarding, support)
• Send marketing emails — with your consent, or as otherwise permitted (for example, to existing customers about our own similar products) — which you can unsubscribe from at any time
• Improve the Services, measure site performance, and understand how pages are used
• Measure our advertising and show our ads to relevant audiences — only if you accept advertising cookies
• Prevent fraud, enforce our terms, and comply with legal obligations

Legal bases (UK/EU visitors)

If the UK or EU GDPR applies to you, we rely on the following legal bases:

• Performance of a contract — to deliver the Services you purchased and provide support.
• Legitimate interests — to measure and improve the Services, secure the site, and prevent fraud, balanced against your rights.
• Consent — for marketing email where consent is required, and for non-essential (analytics and advertising) cookies. You can withdraw consent at any time.
• Legal obligation — to meet tax, accounting, and record-keeping duties.

Who we share it with

We do not sell your personal information. We share it only with service providers who help us run the business, under their own security and privacy obligations:

• Stripe — payment processing and receipts
• Clerk — account authentication
• Supabase — application database and file storage
• Vercel — website hosting
• Bunny.net — course video delivery
• Google (Analytics, Ads) and Microsoft (Clarity) — site analytics and ad measurement
• Meta — ad measurement and audiences (Meta Pixel), if you accept advertising cookies
• Email and CRM providers — for the messages described above

We may also disclose information if required by law or to protect our rights, users, or the public.

Cookies and analytics

We use cookies and similar technologies in three categories:

• Essential — needed to sign you in, keep your session secure, and remember your basic preferences. These are always active.
• Analytics (non-essential) — Google Analytics helps us measure traffic and page performance. Microsoft Clarity records how visitors interact with pages (clicks, scrolling, and mouse movement) in masked/pseudonymized session recordings; Microsoft may also use this data as described in its own privacy statement.
• Advertising (non-essential) — the Meta Pixel and Google Ads tag measure whether our ads lead to visits and purchases, and help us reach relevant audiences on those platforms. Meta and Google may use this data as described in their own privacy policies; you can also manage ad preferences directly with Meta and Google.

Analytics and advertising cookies are optional. They are set only if you accept them in our cookie banner — until then, Google Analytics, Google Ads, the Meta Pixel, and Microsoft Clarity do not load. You can change your choice at any time (manage cookie preferences), and you can also control cookies through your browser settings. The site remains fully usable with analytics rejected.

The main cookies and tags we use:

• Clerk (session/authentication) — essential — session to ~1 year
• Google Analytics (_ga, _gid) — analytics — up to 2 years
• Microsoft Clarity (_clck, _clsk) — analytics / session recording — up to 1 year
• Meta Pixel (_fbp, _fbc) — advertising — up to 90 days
• Google Ads (_gcl_au) — advertising — up to 90 days

Security and retention

Data is stored with reputable providers using encryption in transit, access controls, and row-level security on our databases. We retain personal information for as long as needed to provide the Services, meet legal and tax obligations, and resolve disputes, after which it is deleted or anonymized.

Your rights

Depending on where you live (including US state laws, the UK/EU GDPR, and India's DPDP Act), you may have rights to access, correct, delete, or export your personal information, and to object to certain processing. To exercise any of these, email nik@primeitpm.com — we respond to all verified requests. You can unsubscribe from marketing email via the link in any message.

If you are in the UK or EU and believe we have not handled your data properly, you also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk). We'd appreciate the chance to resolve it with you first.

India (DPDP Act)

If you are in India, you may withdraw consent, access and correct your personal data, and request its erasure by emailing us. For any grievance about how we handle your data, you can contact our grievance officer, Nik, at nik@primeitpm.com, and we will respond within the timelines required by law. We will update this section as the DPDP Rules take full effect.

International transfers, children, and changes

We are based in the United States and process data there, including for users in India, the UK, and Canada. Where we transfer personal data out of the UK/EU, we rely on appropriate safeguards — such as the Standard Contractual Clauses (and the UK International Data Transfer Addendum) provided in our processors' data-processing agreements (Stripe, Google, Microsoft, and others). The Services are not directed to children under 16, and we do not knowingly collect their information. If we make material changes to this policy, we will update the date above and, where appropriate, notify you by email.