Consent & Data Usage Framework

1. Purpose

This Consent & Data Usage Framework defines the principles, responsibilities, permissions, disclosures, and governance expectations related to the collection, processing, analysis, and usage of data within TRIKARAA powered by Hexateal.

The objective of this framework is to:

• support responsible organisational intelligence practices
• establish transparent consent expectations
• protect user and organisational trust
• promote ethical and lawful data usage
• support enterprise governance and compliance
• maintain clarity regarding AI-enabled processing and analytics

This framework applies to:

• organisations
• enterprise administrators
• authorised users
• workforce participants
• leadership teams
• implementation stakeholders

2. Nature of the Platform

TRIKARAA operates as:

• an organisational intelligence environment
• a leadership decision-support system
• a contextual reflection and decision clarity framework

The platform may process:

• workforce analytics
• organisational intelligence data
• behavioural interaction signals
• operational and business information
• leadership decision-support inputs
• enterprise integration data
• AI-generated insights and reflections

TRIKARAA is not designed to:

• replace human accountability
• autonomously determine organisational actions
• function as a substitute for legal, medical, psychiatric, or employment advisory services

3. Consent Principles

TRIKARAA and Hexateal are committed to responsible, transparent, and lawful data practices.

Data processing activities should be based on:

• lawful organisational authority
• appropriate enterprise approvals
• transparent user communication
• legitimate business purposes
• applicable legal and regulatory requirements

Client organisations remain responsible for:

• obtaining required permissions or notices
• ensuring lawful workforce data usage
• maintaining governance oversight
• communicating applicable policies internally

4. Categories of Data That May Be Processed

Depending on enterprise configuration and platform usage, TRIKARAA may process:

4.1 User Information

• name
• email address
• organisational role
• department information
• login and authentication information
• usage preferences

4.2 Organisational Intelligence Data

• workforce analytics
• organisational structures
• engagement information
• leadership and capability data
• learning and development information
• operational metrics
• business performance indicators
• workforce planning inputs

4.3 User-Generated Inputs

Users may voluntarily provide:

• leadership reflections
• contextual narratives
• organisational scenarios
• decision-related inputs
• responses to prompts or frameworks
• planning considerations

4.4 Behavioural and Interaction Signals

The platform may process:

• usage behaviour
• interaction patterns
• engagement signals
• decision-support interactions
• session activity information

4.5 Technical Information

• device information
• browser details
• IP address
• session logs
• diagnostic information
• system interaction metadata

5. Purpose of Data Usage

Data may be processed for purposes including:

• organisational intelligence generation
• leadership decision-support functionality
• workforce and capability analysis
• analytics and reporting
• platform functionality and improvement
• AI and machine learning processing
• system reliability and diagnostics
• governance and security monitoring
• enterprise administration

Data processing is intended to support:

• leadership clarity
• organisational understanding
• contextual decision consideration
• workforce and operational insight generation

6. AI and Analytics-Enabled Processing

TRIKARAA may utilise:

• Artificial Intelligence (AI)
• Machine Learning (ML)
• predictive analytics systems
• behavioural analysis frameworks
• organisational intelligence models
• contextual decision-support processing

These systems may generate:

• prompts
• summaries
• patterns
• insights
• reflections
• organisational intelligence interpretations

Users and organisations acknowledge that:

• AI-generated outputs are interpretive and probabilistic
• outputs may not always be complete or contextually sufficient
• human judgment and organisational oversight remain essential
• outputs should not be treated as autonomous organisational decisions

7. Voluntary User Participation

Certain platform interactions may involve voluntary user participation.

Users should avoid submitting:

• unlawful content
• confidential information without authorisation
• sensitive personal information unrelated to organisational purposes
• information that violates organisational policies or legal obligations

Users remain responsible for the appropriateness of information voluntarily submitted into the platform.

8. Sensitive Situations and Escalation Responsibility

TRIKARAA is not intended to independently manage:

• harassment complaints
• discrimination investigations
• mental health emergencies
• workplace misconduct investigations
• threats or violence
• self-harm situations
• legal disputes
• emergency interventions

Where such situations arise:

• users must escalate matters through appropriate organisational or professional channels
• formal HR, legal, ethics, or safety processes should be followed

The platform does not replace formal reporting mechanisms or professional intervention.

9. Organisational Consent Responsibilities

Client organisations are responsible for:

• determining lawful processing bases
• obtaining required notices or consents where applicable
• communicating platform usage appropriately to workforce participants
• maintaining internal governance and transparency practices
• ensuring lawful cross-border data handling where applicable

TRIKARAA and Hexateal do not independently verify whether organisations have obtained all required workforce permissions.

10. Data Access and Visibility

Access to data may be governed by:

• organisational permissions
• enterprise configuration settings
• role-based access controls
• governance restrictions
• administrative policies

Client organisations remain responsible for:

• defining internal access structures
• approving authorised users
• governing visibility rights and permissions

11. Confidentiality and Data Protection

TRIKARAA and Hexateal implement commercially reasonable safeguards designed to protect:

• confidentiality
• integrity
• authorised access
• operational security

Safeguards may include:

• authentication controls
• access management
• monitoring systems
• secure hosting practices
• activity logging
• role-based permissions

No digital platform can guarantee absolute security.

Users and organisations acknowledge inherent risks associated with digital systems and internet-based processing.

12. Data Sharing and Third Parties

Data may be shared only:

• with authorised organisational stakeholders
• with approved infrastructure or operational service providers
• where legally required
• for security or governance purposes
• during lawful business restructuring events

TRIKARAA does not knowingly sell personal data to unrelated third parties.

13. Data Retention and Deletion

Data may be retained:

• for the duration of enterprise engagement
• according to contractual obligations
• for security, audit, legal, or governance purposes
• according to enterprise retention configurations where applicable

Deletion or anonymisation requests may be subject to:

• legal obligations
• operational requirements
• enterprise governance policies
• backup retention cycles

14. User Rights and Requests

Subject to applicable laws and enterprise agreements, users may have rights related to:

• access to personal data
• correction of inaccurate information
• restriction of processing
• deletion requests
• withdrawal of consent where applicable
• information regarding data usage

Certain requests may require organisational approval or governance review.

15. International Data Processing

Depending on infrastructure configuration and enterprise requirements, data may be processed or stored outside the user's local jurisdiction.

Commercially reasonable safeguards will be implemented where cross-border processing applies.

16. Governance and Human Accountability

TRIKARAA is intended to support organisational intelligence and leadership thinking.

All organisational decisions remain the responsibility of authorised human stakeholders.

The platform does not:

• autonomously approve actions
• replace organisational governance
• eliminate the need for leadership judgment
• determine workforce outcomes independently

Human oversight and contextual evaluation remain essential.

17. Updates to This Framework

This framework may be updated periodically to reflect:

• evolving legal requirements
• AI governance developments
• enterprise governance improvements
• platform evolution
• security and operational changes

Continued use of the platform constitutes acceptance of updated framework terms.

18. Contact Information

For questions regarding consent, data usage, privacy, or governance matters, please contact:

TRIKARAA powered by Hexateal — info@trikaraa-ai.com — https://trikaraa-ai.com/

19. Governing Law

This framework shall be governed in accordance with applicable laws, enterprise agreements, and contractual governance frameworks.