Privacy

Nothing you enter is stored. The intake is encoded into the report link and recalculated every time the link is opened. Anyone with the link can read the report, so share it as you would the answers themselves.

• Your name, email, a scrypt hash of your password, and your workspace memberships.
• Assessments you save: the answers, every version, and a snapshot of the verdict and the engine versions.
• The workspace profile you give at setup (industry, size, regions, data classes, regimes, engineer count) and the owners, status and mitigations you record on a risk register.
• Sign-in sessions, stored only as hashes of the session token, for up to 14 days.
• An activity log per workspace (saves, exports, membership and billing changes), visible to admins.
• If billing is on: what was bought, the subscription status, and a payment history (amounts, dates, outcomes) as reported by Stripe. Card details stay with Stripe; this app never sees them.
• Rate-limit counters keyed by a hash of the email or network address, kept for minutes.

• If you send the “Get a follow-up from ARC” form: your email, the optional name, company, role and message, what you are interested in, the page you sent it from and the campaign that brought you (for example utm_source). ARC Transformation Group uses it only to reply. It may be forwarded to ARC's CRM.
• Page views and a few named events (assessment started, report viewed, form sent, booking link clicked) are counted with Vercel Web Analytics, which uses no cookies and does not identify you.
• The campaign that first brought you here is remembered in this browser only, to attribute a form or a booking to it.
• Advertising pixels (Meta, Google, LinkedIn) load only if the operator configured them and you accept them in the cookie banner.
• Email (password reset, invites, receipts) is sent through Resend when the operator has set it up. Messages are plain text with no tracking.

• Download everything stored about you from the Account page.
• Delete your account from the Account page. Workspaces only you belong to are deleted with their data.
• Admins can delete any saved assessment, with all its versions.

• “Suggest answers” sends the job's name and description to Anthropic's API. Suggestions change the form only when you click Apply.
• “Explain this in plain language” sends the structured decision, never the description, and cannot change the decision.
• Neither is stored by this app. Logs record a hash of the request, not its content.

• Scoring is rules in this codebase; no language model scores or decides anything. Answers are sent to a model only if the operator turned on AI assistance and you click one of its buttons (see below).
• Nothing is sold or shared with vendors that appear in a recommendation. No vendor pays for placement.
• Exports to ARC Control happen only when an admin starts one, and only to an endpoint the operator configured.