How we handle your data

We collect the minimum necessary.

• Required: your email address, your selected answers and computed results.
• Your optional per-question notes, in three parts:
  • They are not stored with your finished result — what is saved for a completed assessment has no field for them.
  • But if you save your progress with “continue on another device”, that saved draft does contain them verbatim. It is destroyed once the “abandoned drafts” period in §3 passes.
  • They are sent to the AI processor in §4 to generate your diagnosis, and the AI’s written commentary on whether they support your answers IS stored in your report, which reaches you on the web, in the PDF and by email. That commentary may summarise or quote what you wrote.
  Neither your notes nor the commentary is provided to a buyer (§5).
• Automatic: usage logs and browser/device data (security and error handling).
• Usage statistics: which step of the assessment was reached and how far it got. Nothing identifying is included — no IP address, browser data, email, answer text or score is stored, and the only correlator is a random temporary id that lives in one browser tab and disappears on reload, so visits cannot be linked to one another.
• Only if you apply for a buyer account: the company name and contact email address you enter, plus the contact name, business registration number and message if you choose to give them. We do not look up or verify the registration number — an operator uses it to check you against the public registry themselves. Once a request has been decided it is destroyed after the “decided account requests” period in §3.

Taking an assessment does not require your name or phone number.

• Email delivery and web viewing of your report.
• Passwordless (magic-link) account creation and identity confirmation.
• (With optional consent) product updates.
• (With optional consent) anonymous, non-identifying benchmark statistics.
• Non-identifying usage statistics, to improve the service.

We delete your data without undue delay once its purpose is met, or when you delete your account or withdraw consent, except where law requires retention.

The items below are destroyed automatically once their period passes. A daily job finds and deletes what is due, and the periods in this table come from the same place that job reads them from.

• Unclaimed anonymous assessments90 days

  The assessment and everything computed from it — answers, scores, the saved report.

• Abandoned drafts (signed in, never completed)180 days

  The saved in-progress answers and the draft row.

• Email records with no remaining purpose90 days

  The address and its consent record, once the assessment it belonged to is gone and no marketing consent is held.

• Non-identifying usage statistics180 days

  Step-progression counters. These carry no address, IP, user agent or answer.

• AI cost accounting365 days

  Token counts and prices. No prompt, no answer, nothing about a visitor.

• Decided account requests365 days

  The company name, contact address and anything written in the request, once it has been approved or declined.

Records carrying marketing consent are not on this table: they are destroyed when you withdraw, not on a clock. Deleting your account destroys everything immediately, regardless of the periods above (§6).

We use the following processors (including cross-border processing):

• Supabase, Inc.Database, authentication, hosting
• Resend (Plus Five Five, Inc.)Transactional email delivery
• OpenRouter, Inc.AI analysis of assessment inputs
• Anthropic PBCAI analysis of assessment inputs (fallback provider)
• Vercel Inc.Application hosting / CDN

We do not provide your data to third parties as a rule. The one exception: if you were invited to assess yourself by a customer of yours, and only if you tick a separate, explicit consent at the end of the assessment, we provide the following. Declining costs you nothing — you still complete the assessment and receive your own full report.

• Who receives it: the buyer that invited you.
• Why: to review its suppliers’ ESG maturity and decide where to offer support.
• What: overall score and grade, a score for each domain, which maturity step you reached on each question with its points, flagged priority items, and how much of the questionnaire applied to you.
• What is never provided: your free-text notes and the AI commentary. Neither has a field in what is stored for the buyer.
• For how long: until you withdraw.

Whether or not you consent, the buyer sees that you responded and when. That is how they track their own request; it carries none of your answers.

If you joined through a shared campaign link rather than a personal invitation, the email address you signed in with appears on that buyer’s participant list.

Withdraw at any time from Dashboard → Who can see this. Withdrawing deletes what the buyer could see, immediately. We keep a record of who viewed it, available to you on request.

You may access, correct, delete, restrict processing of, or withdraw consent for your data at any time.

You can delete your account yourself: sign in and go to Settings → Delete account. It happens immediately, with no request and no waiting, and takes your assessments, answers, scores, reports and email records with it. Anything a buyer was holding is deleted too. It cannot be undone.

One exception: if you are the sole owner of an organization, deletion is held back — otherwise that organization would be left with nobody able to administer its campaigns. The screen tells you which organization it is; transfer ownership to someone else and try again.

Unsubscribe links opt you out of marketing.

Row-level security (RLS), encryption in transit, least-privilege access, server-only service keys, and an access record for anything provided to a third party.

The service targets business users and does not knowingly collect data from children under 14.

Privacy inquiries: esgbrain@gmail.com. Changes to this policy are posted here with a new effective date.

Informational only — not a substitute for an official ESG evaluation.