This policy is written for the current AI Readiness Assessment service and may be updated as the product, data flows, payment setup, or legal requirements change.
1. Scope
This policy applies to the AI Readiness Assessment website, individual assessment flow, organization assessment flow, dashboards, reports, PDF downloads, payment unlock flow, and related support communications. It does not control Paddle's own payment processing, checkout, buyer support, tax, fraud prevention, or legal compliance activities.
2. Information we collect
We may collect the following categories of information:
- Account details, such as name, email address, phone number, password credentials, and login/session information.
- Professional profile details, such as organization, job title, department, industry, role type, organization size, tools used, AI goals, and optional Enneagram type.
- Organization details, such as organization name, industry, size, contact person, contact email, contact phone, transformation goals, website URL, LinkedIn URL, registration number, departments, and participant invitation links.
- Assessment responses, including answers, progress state, completion status, response timing, readiness scores, generated summaries, recommendations, and report outputs.
- Payment and unlock status, such as whether a report has been paid for and unlocked. Full card details are handled by Paddle and are not stored by us.
- Technical information, such as IP address, browser type, device information, timestamps, pages visited, security logs, cookies, and similar operational data.
- Support communications, such as emails, consultation requests, issue reports, refund requests, and related correspondence.
3. How we use information
We use information to operate, secure, and improve the service. This includes registering users, creating assessments, saving progress, generating reports, producing dashboards, enabling PDF downloads, managing report access, arranging discussion sessions, responding to support requests, detecting abuse, maintaining records, and complying with legal, tax, accounting, security, and payment obligations.
4. Assessment and report data
Assessment responses are used to calculate readiness scores, identify adoption patterns, generate individual reports, and create organization or department-level insights where applicable. Organization reports may aggregate participant data to show readiness patterns, risks, opportunities, and executive recommendations. We aim to avoid presenting incomplete or placeholder data as a real organizational signal.
5. Payment processing through Paddle
Payments are processed securely through Paddle. Paddle may collect and process buyer information, payment details, billing details, tax information, fraud-prevention signals, invoice information, refund information, and transaction records as merchant of record or payment processor. Paddle's own privacy notices and buyer terms apply to Paddle's processing.
6. Legal bases where applicable
Where privacy laws require a legal basis, we may process personal information because it is necessary to provide the service, because you or your organization consented, because we have a legitimate interest in operating and improving the service, because processing is needed for legal obligations, or because processing is needed to protect the service, users, or organization data.
7. How we share information
We may share information with:
- Paddle, for checkout, payments, taxes, invoices, refunds, fraud prevention, and buyer support.
- Service providers that help host, maintain, secure, email, analyze, or support the service.
- Organization administrators, where an assessment is created for or connected to an organization and report access is part of the organization workflow.
- Professional advisers, auditors, insurers, legal representatives, regulators, authorities, or courts where required or appropriate.
- Successors or acquirers if the service is reorganized, transferred, merged, or sold, subject to appropriate protections.
We do not sell personal information as a standalone data product.
8. Cookies and similar technologies
The service may use cookies or similar technologies to keep users logged in, protect sessions, remember security tokens, support application functionality, understand usage, and improve reliability. You can control cookies through your browser settings, but disabling necessary cookies may prevent login, assessment progress, or report access from working correctly.
9. Data retention
We retain information for as long as needed to provide the service, maintain report access, support organization dashboards, meet legal, accounting, tax, dispute, security, and audit obligations, and resolve support issues. We may retain aggregated or de-identified information for product improvement and benchmarking where it no longer identifies a specific person.
10. Security
We use administrative, technical, and operational safeguards designed to protect account, assessment, and report information. These may include access controls, session protections, CSRF protections, secure payment processing through Paddle, and restricted administrative access. No system is completely secure, so you should protect your login details and notify us if you suspect unauthorized access.
11. International processing
Your information may be processed in countries other than the country where you live, including South Africa and countries where our service providers or Paddle operate. Where required, we rely on appropriate contractual, operational, and legal safeguards for cross-border processing.
12. Your privacy rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of certain automated processing. To exercise privacy rights, contact privacy@signitiveit.co.za. We may need to verify your identity before acting on a request. Some requests may be limited by legal, security, payment, dispute, tax, reporting, or organization record obligations.
13. Organization users and participants
If your assessment is connected to an organization, the organization may receive aggregate or report-level information depending on the assessment setup and permissions. Organization administrators are responsible for explaining their internal use of results and complying with workplace, privacy, and consultation obligations that apply to them.
14. Children's privacy
The service is intended for professionals, teams, and organizations. It is not directed to children. If you believe a child has provided personal information through the service, contact us so we can review and remove it where appropriate.
15. AI and automated report generation
The service may use structured scoring, rules, templates, and AI-assisted interpretation to generate report content. Reports are intended to support human review and decision-making. You should not treat a report as the sole basis for high-impact decisions about individuals.
16. Changes to this policy
We may update this Privacy Policy to reflect product, legal, operational, or payment changes. The effective date above shows when this version took effect. Material changes may be communicated through the website or other appropriate channels.
17. Contact
For privacy requests or questions, contact privacy@signitiveit.co.za. For general support, contact support@signitiveit.co.za. For payment data, invoice, tax, or checkout questions, you may also need to contact Paddle through its buyer support channels.