Privacy

The short version

Your Navigator answers and Evidence Kit intake stay in your own browser. We do not receive them unless you choose to email yourself a result, and the documents are generated on your device. We use analytics, and we store an email address if you give us one.

Navigator answers and kit intake

Both are held in your browser's local storage so you can move between pages and come back without re-entering them. They are not sent to our servers as part of using the tools, and clearing your browser data deletes them. Document generation happens in your browser, so the organisation and system details you type do not reach us.

If you ask us to email you a result

We then receive your email address, the risk tier the Navigator reached, the answers behind it, and technical details of the request. We use these to send you the result and the change alerts you asked for, and to understand which parts of the law people are struggling with. We do not sell this data or share it for anyone else's marketing. Unsubscribe at any time from any email we send.

If you ask us to email your documents

Evidence Kit documents are generated on your device, and by default nothing in them reaches us. The delivery page offers an optional "email these documents to me" button. If you use it — and only if you use it — the document text, including the organisation and system details you typed, is sent to our server and on to our email provider so it can be delivered to the address on your purchase. We do not store it after sending, and we take the recipient address from your Stripe purchase rather than asking for it, so the documents can only ever go to you. Saving the documents from the page itself involves none of this.

If you buy something

Payment is handled by Stripe. We do not see or store your card details. Stripe receives your payment and contact information as an independent controller for its own compliance purposes; we receive confirmation that a payment succeeded and the product it relates to.

If your employer enrols you on the literacy course

For the AI literacy course we hold, per learner: the email address your employer supplied, an optional name, which sector module you took, which modules you opened and passed, your best quiz score per module, and the dates. That is the completion record your employer needs in order to evidence Article 4 training — it is the point of the product — and we hold nothing beyond it. There is no password: access is by an expiring signed link sent to your address.

Retention: three years from completion, after which the record is deleted. That is long enough to evidence training through the December 2027 high-risk deadline and an annual refresh, and short enough to be proportionate. Seats bought but never used are deleted after a year.

The database is Neon, hosted in an EU region, acting as a processor on our behalf. Your employer is the controller of the training record and we process it on their instructions, so a request to correct or erase it is best made to them — write to us and we will coordinate either way.

Analytics

Email is sent through Resend, which processes the recipient address and message content on our behalf as a processor. We use Google Analytics to count page views and to see whether people finish the Navigator or abandon it midway. We record which step was reached, which tier resulted, and that a lead or purchase happened — not the content of your answers.

Your rights

Where we hold personal data about you, the GDPR gives you rights of access, rectification, erasure, restriction, objection and portability. To exercise them, write to info@euai-act.com and tell us the email address concerned. You can also complain to your national data protection authority; ours is the Czech Office for Personal Data Protection, whose details are in our legal notice.

Retention

Email addresses are kept until you unsubscribe or ask us to delete them. Purchase records are kept as long as tax and accounting law requires. Analytics data is retained according to the Google Analytics settings for this property.