CultureNest RequestHub Privacy Policy

CultureNest LLC (“CultureNest,” “we,” “us,” or “our”) respects the privacy of individuals who access or use RequestHub.

This Privacy Policy explains how CultureNest collects, uses, discloses, retains, and protects information in connection with RequestHub and related applications, portals, dashboards, integrations, communications tools, reporting features, artificial intelligence-assisted functionality, and other RequestHub services (collectively, the “Services”).

This Privacy Policy applies specifically to RequestHub. It does not govern unrelated CultureNest websites, consulting services, managed services, or other products unless expressly stated.

By accessing or using RequestHub, you acknowledge the practices described in this Privacy Policy.

Use of RequestHub is also governed by the RequestHub Terms of Service.

1. Who Uses RequestHub

RequestHub is a business-to-business operational platform.

Organizations that subscribe to, receive access to, or otherwise use RequestHub are referred to in this Privacy Policy as “Customers.”

Individuals who access RequestHub on behalf of a Customer may include employees, contractors, administrators, managers, vendors, or other authorized users (“Users”).

RequestHub is not intended for personal, household, or consumer use.

2. CultureNest’s Role

Depending on the information involved, CultureNest may process information either:

on its own behalf to operate, secure, administer, and improve RequestHub; or

on behalf of a Customer when information is submitted to RequestHub by that Customer or its Users.

For information submitted by or on behalf of a Customer, the Customer generally determines why the information is submitted, who may access it, and how it is used within its organization.

If you use RequestHub through your employer or another organization, questions about that organization’s collection or use of your information should generally be directed to that organization.

3. Information We Collect

We may collect the following categories of information.

A. Account and Identity Information

We may collect information used to create, authenticate, administer, and support RequestHub accounts, such as name, business email address, business telephone number, company or organization, job title or role, user permissions, account identifiers, authentication information, and other information associated with an account.

B. Customer Content

RequestHub allows Customers and Users to submit information in connection with operational requests, tasks, messages, comments, attachments, vendor communications, workflows, reports, assignments, and related activities.

We refer to this information as “Customer Content.”

Customer Content may include request descriptions, task information, messages and comments, names and business contact information, documents and attachments, vendor information, workflow and assignment information, status information, deadlines and requested completion dates, internal business information, and other information a Customer or User chooses to submit.

Customers are responsible for determining what Customer Content is appropriate to submit to RequestHub.

C. Usage and Activity Information

We may automatically collect information regarding use of RequestHub, including login activity, features accessed, pages or screens viewed, requests created or modified, actions taken within the Services, timestamps, referring pages, session information, application events, error information, and similar usage information.

D. Device and Technical Information

We may collect technical information such as IP address, browser type and version, operating system, device type, device identifiers, network information, approximate location derived from an IP address, log information, and security and authentication events.

E. Communications and Support Information

If you contact CultureNest for support or otherwise communicate with us regarding RequestHub, we may collect the contents of those communications and information necessary to respond to or resolve the matter.

F. Information from Customers and Third Parties

We may receive information about Users from their organization, an administrator, a vendor, an integration provider, an identity provider, or another authorized third party in connection with providing RequestHub.

4. Protected Health Information Is Strictly Prohibited

REQUESTHUB IS NOT DESIGNED, INTENDED, AUTHORIZED, OR OFFERED FOR THE CREATION, RECEIPT, MAINTENANCE, STORAGE, PROCESSING, OR TRANSMISSION OF PROTECTED HEALTH INFORMATION (“PHI”) AS DEFINED UNDER THE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT OF 1996 AND ITS IMPLEMENTING REGULATIONS (“HIPAA”).

CUSTOMERS AND USERS MUST NEVER, UNDER ANY CIRCUMSTANCES, ENTER, UPLOAD, ATTACH, SUBMIT, TRANSMIT, STORE, DISCLOSE, OR OTHERWISE MAKE PHI AVAILABLE THROUGH REQUESTHUB.

This includes, without limitation, patient-identifying information associated with health information, medical record numbers, patient account numbers, diagnoses, treatment information, clinical information, patient photographs, medical records, or screenshots or attachments containing PHI.

Customers are responsible for informing and training their Users regarding this prohibition and for preventing PHI from being submitted to RequestHub.

CultureNest does not provide RequestHub as a HIPAA-regulated PHI processing service and does not agree to act as a Customer’s business associate under HIPAA in connection with RequestHub unless CultureNest expressly agrees otherwise in a separate written agreement signed by CultureNest.

If PHI is submitted to RequestHub contrary to this prohibition, the submission is unauthorized.

If a Customer or User discovers that PHI has been submitted to RequestHub, the Customer or User should notify CultureNest promptly so appropriate action can be taken.

CultureNest may remove, delete, restrict access to, isolate, or otherwise address information reasonably believed to contain PHI.

5. Other Sensitive Information

Unless expressly authorized by CultureNest, Users should not submit highly sensitive information through RequestHub, including Social Security numbers, passwords or authentication secrets, payment-card information, bank-account credentials, biometric identifiers, genetic information, government-issued identification credentials, classified information, export-controlled information, or other information whose processing through RequestHub is prohibited by law.

Customers are responsible for determining whether information is appropriate for submission to the Services.

6. How We Use Information

CultureNest may use information collected through RequestHub to provide, operate, maintain, and administer the Services; create and manage accounts; authenticate Users; process requests and Customer instructions; route and assign operational requests; facilitate communications between Users and authorized recipients; facilitate approved communications with vendors; provide reporting, dashboards, analytics, and workflow functionality; provide customer support; troubleshoot technical issues; monitor system availability and performance; maintain security and prevent unauthorized access; detect, investigate, and prevent fraud, abuse, misuse, and security threats; improve and develop RequestHub; enforce our agreements and policies; comply with applicable legal obligations; establish, exercise, or defend legal claims; and protect the rights, safety, property, and security of CultureNest, Customers, Users, and others.

We may also use aggregated, anonymized, or de-identified information for analytics, benchmarking, product development, security, research, operational improvement, and other legitimate business purposes, provided that such information does not reasonably identify an individual or Customer.

7. Artificial Intelligence and Automated Processing

RequestHub may use artificial intelligence, machine learning, or automated technologies to assist with functionality such as request classification, summarization, routing, prioritization, reporting, drafting, recommendations, information retrieval, and workflow automation.

Information submitted to RequestHub may be processed by CultureNest systems or authorized service providers as necessary to provide these functions.

AI-assisted functionality does not eliminate the responsibility of Customers and Users to review information and outputs before relying on them.

Customer Content submitted through RequestHub is not used by CultureNest to train generalized artificial intelligence models for unrelated third-party purposes.

CultureNest may use usage information, feedback, aggregated information, de-identified information, and system-performance information to evaluate and improve RequestHub and its functionality.

8. How We Disclose Information

CultureNest may disclose information as reasonably necessary in the following circumstances.

Service Providers

We may use third-party service providers to support RequestHub, including providers of cloud hosting and infrastructure, database services, authentication, email and communications, cybersecurity, monitoring and analytics, customer support, artificial intelligence technology, software development and infrastructure, file storage, and other technology or operational services.

These providers may process information on our behalf to the extent necessary to provide their services to CultureNest.

Customer-Directed Recipients

RequestHub may transmit information to vendors, service providers, employees, contractors, or other recipients at the direction of a Customer or its authorized Users.

CultureNest is not responsible for the independent privacy practices of third parties after information has been transmitted to them at a Customer’s direction.

Within a Customer Organization

Information may be accessible to other Users or administrators within the Customer organization based on the permissions and configurations established by the Customer.

Legal and Safety Purposes

We may disclose information when we reasonably believe disclosure is necessary to comply with law, regulation, subpoena, court order, or lawful governmental request; enforce agreements or policies; investigate suspected fraud, abuse, or illegal activity; protect the security or integrity of the Services; protect the rights, property, or safety of CultureNest, Customers, Users, or others; or establish, exercise, or defend legal claims.

Business Transactions

If CultureNest is involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar corporate transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

9. Sale and Advertising

CultureNest does not sell personal information collected through RequestHub for monetary consideration.

RequestHub is a business operations platform and is not designed to serve third-party behavioral advertisements.

CultureNest does not use Customer Content submitted through RequestHub to serve third-party targeted or cross-context behavioral advertising to Users.

10. Customer Administrators and Permissions

Customers control which Users have access to their RequestHub environment and may control or configure roles, permissions, assignments, visibility, and other account settings.

Customer administrators may be able to create or deactivate accounts, assign permissions, review User activity, access requests and Customer Content, modify workflows, manage Customer information, and otherwise administer the Customer’s RequestHub environment.

Users should contact their organization’s administrator with questions about internal access, permissions, or organizational use of information.

11. Cookies and Similar Technologies

RequestHub may use cookies, local storage, session technologies, and similar mechanisms to keep Users signed in, authenticate accounts, remember preferences, maintain application functionality, protect against unauthorized access, identify security threats, understand system performance, and improve the Services.

Some cookies or similar technologies may be necessary for RequestHub to function properly.

Browser settings may allow Users to restrict certain cookies, but doing so may affect Service functionality.

12. Data Security

CultureNest uses administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

Our safeguards may include access controls, authentication measures, technical monitoring, infrastructure security, vendor controls, and other measures appropriate to the nature of the information and Services.

However, no Internet transmission, software platform, network, or electronic storage system can be guaranteed to be completely secure.

Users are responsible for protecting their account credentials, devices, networks, and authentication methods and for promptly reporting suspected unauthorized access.

13. Data Minimization

CultureNest seeks to collect and maintain information reasonably necessary to operate, secure, support, and improve RequestHub and provide the Services requested by Customers.

Customers and Users should likewise avoid submitting information that is not reasonably necessary for the operational request or workflow involved.

14. Data Retention

CultureNest retains information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and operational records, meet contractual obligations, resolve disputes, protect security, enforce agreements, and comply with applicable legal requirements.

Retention periods may vary depending on the type of information, the Customer relationship, contractual requirements, technical considerations, security needs, and applicable law.

After an account or Customer relationship ends, information may remain in backups, archives, security logs, or other systems for a reasonable period before deletion.

CultureNest may retain de-identified or aggregated information that no longer reasonably identifies an individual or Customer.

15. Customer Responsibility for Records

RequestHub is not intended to serve as a Customer’s sole or authoritative system of record unless CultureNest expressly agrees otherwise in writing.

Customers are responsible for maintaining copies of information they are legally, professionally, contractually, or operationally required to preserve.

16. Privacy Rights and Requests

Depending on where an individual resides and applicable law, that individual may have rights regarding certain personal information, which may include rights to request access to personal information; request correction of inaccurate information; request deletion of certain information; obtain information about categories of information collected or disclosed; obtain a portable copy of certain information; object to or restrict certain processing; opt out of certain uses of information where applicable; and exercise applicable privacy rights without unlawful discrimination.

These rights are not absolute and may be subject to exceptions under applicable law.

Certain privacy laws distinguish between information CultureNest controls directly and information CultureNest processes on behalf of a Customer.

If your request concerns information submitted to RequestHub by your employer or another Customer, CultureNest may direct you to that Customer or assist the Customer in responding to your request as appropriate.

To submit a request concerning information controlled directly by CultureNest, contact us using the information below.

CultureNest may take reasonable steps to verify identity and authority before responding to a request.

Authorized agents may be required to provide evidence of their authority to act on another person’s behalf.

17. California and Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law.

Where applicable, those rights may include rights to know or access personal information, request deletion or correction, obtain a copy of certain information, limit certain uses of sensitive personal information, or opt out of certain types of sale, sharing, targeted advertising, or profiling.

CultureNest will honor applicable rights to the extent required by law.

Nothing in this Privacy Policy is intended to provide rights that do not otherwise apply under applicable law.

18. Children’s Privacy

RequestHub is intended exclusively for business use and is not directed to children.

Individuals under 18 may not create or independently use a RequestHub account.

CultureNest does not knowingly solicit personal information from children through RequestHub.

19. Third-Party Services and Integrations

Customers may choose to connect RequestHub with third-party applications, vendors, or services.

Information transmitted to a third-party service at a Customer’s direction may be processed according to that third party’s terms and privacy practices.

CultureNest does not control and is not responsible for the independent privacy practices of third parties.

Customers should review the privacy and security practices of third-party services they choose to use with RequestHub.

20. International Processing

CultureNest and its service providers may process information in the United States and other locations where CultureNest or its service providers operate.

Where required by applicable law, appropriate safeguards may be used for transfers of personal information across jurisdictions.

21. Security Incidents and Legal Notifications

If CultureNest becomes aware of a security incident involving personal information, CultureNest will evaluate the incident and provide notifications where required by applicable law or contractual obligation.

Nothing in this Privacy Policy expands any notification obligation beyond what is required by applicable law or an applicable written agreement.

22. Do Not Track and Global Privacy Signals

Browser-based “Do Not Track” signals are not interpreted consistently across websites and services.

Where applicable law requires CultureNest to recognize a legally valid browser-based opt-out preference signal, CultureNest will do so with respect to processing to which that signal legally applies.

Because RequestHub is not designed for third-party targeted advertising or the sale of personal information, such signals may have limited applicability to the Services.

23. Changes to This Privacy Policy

CultureNest may update this Privacy Policy from time to time to reflect changes to RequestHub, our practices, technology, legal requirements, or other circumstances.

The revised Privacy Policy will become effective when posted or on the effective date identified in the updated policy.

Where required by law or where CultureNest determines a change is material, CultureNest may provide additional notice.

24. Contact Us

Questions or requests regarding this Privacy Policy or CultureNest’s privacy practices for RequestHub may be sent to:

CultureNest LLC

Phoenix, Arizona

hello@culturenest.io

© 2026 CultureNest LLC. All rights reserved.