Privacy Policy

What we collect, and when

Browsing the site

No account is required and no advertising or cross-site tracking cookies are set. If analytics are enabled, they are described under “Analytics” below.

The AI Opportunity Audit

The audit can be completed without giving any contact details, and the complete result is shown without an email address. When you submit it we store your answers, the scores calculated from them, the risk signals detected, the generated report and the version of the audit engine that produced it. We also store the page you arrived from and any campaign parameters in the link you followed.

While you are still working through the questions, your answers are held only in your own browser tab and are not sent to us until you submit.

Two of the questions accept free text. You choose what to put in them. Please do not enter passwords, confidential customer data or sensitive personal information; if you type personal data there, it is stored with the rest of your answers.

Contacting us

This website has no contact form. It cannot receive, process or store an enquiry. The contact page offers two links that hand you over to software you already control: an optional booking link, and a mailto: link that opens your own email program with the address filled in.

If you write to us, your message reaches us the way any email does, through your email provider and ours. Nothing about that is handled by this website, and nothing you write is added to a mailing list.

Abuse prevention

To stop automated abuse we apply rate limits per connection, using a counter stored in our own database. Your IP address is combined with a secret value and hashed before storage, so the stored record cannot be read back as an address. These records expire with their window, which is 1 hours for audit submissions. No third-party bot-verification service is used.

What we do not collect

• No name, email address, phone number or company contact details. There is no form to enter them into.
• No marketing consent, because there is no mailing list.
• No advertising identifiers, and no cross-site tracking.
• No special category data. Please do not send any.
• No free-text answers in analytics. Company descriptions, notes, result tokens and full results are never sent to an analytics provider.
• No payment details are taken through this website.

How your audit result link works

Your result lives at a private address containing a random token with 256 bits of entropy. Only a hash of that token is stored, so the live links cannot be reconstructed from our database. The address contains no name, email address or database identifier. Result pages are marked not to be indexed by search engines, and lookups are rate limited so links cannot be guessed at volume.

Anyone holding the link can view the result, so treat it as you would any private link.

How long we keep things

• Audit results stay reachable through their link for 90 days, after which the link stops working.
• Rate-limit records expire with their window, within hours.
• Any email you choose to send us is kept in our mailbox while we are in contact and for as long as we need it for our own records. That is ordinary correspondence, not something this website stores.

Who else is involved

This list is short because the site is built to keep it short. Your audit answers are processed on our own server and are not sent anywhere else.

• Our hosting and database provider, which stores the data described above.
• No language model provider. Your audit report is generated entirely by our own code. No AI service receives your answers, your scores or your report.
• No email provider. This website sends no email at all, so no email service receives anything about you.
• Cal.com, only if a booking link is offered and you choose to open it. At that point you are on Cal.com’s website and their privacy policy applies. We put nothing about your audit into that link.
• Your own email provider, only if you use the email link. We put no audit data into it either: it carries an address and a subject line, nothing more.

Automated processing

Your audit scores, the risk signals and the recommendations are all calculated by fixed, published rules applied to your answers. The exact rules and weights are documented in the project’s docs/scoring.md. No language model is involved at any point, and no free-text answer is interpreted: what you write is stored and shown back to you, but it does not affect any number or recommendation. None of this produces a decision with legal or similarly significant effects.

Analytics

Analytics are off by default. If they are enabled, the provider is privacy-conscious and only a fixed list of non-identifying properties may be sent: which page an action came from, which step of the audit was reached, and coarse score bands. A runtime filter enforces that list, and values that look like an email address or a long digit sequence are discarded before sending. Free-text answers, result tokens and full reports are never sent. Where consent is required, nothing is sent until you agree.

Your rights

Depending on where you live you may have the right to access, correct, export or delete the information we hold about you, to object to or restrict its processing, and to withdraw consent at any time. To exercise any of these, contact us using the details above. We will respond within the period required by the applicable law.

You can also ask us to revoke an audit result link, which stops it working immediately.

Changes

If this policy changes materially we will update the review date at the top of this page.