This Privacy Policy explains how [LEGAL ENTITY NAME], doing business as Emergent Skills ("ES", "we", "us"), collects, uses and shares personal information when you use ES Decision Review, the document checks and the website at stresstest.emergentskills.com (the "Service"). It forms part of our Terms of Service.
The short version
- We collect what you give us to run your account and your checks and reviews, plus basic technical data.
- The text of your documents and answers is sent to OpenAI to be read, with OpenAI's storage option turned off. Your company's name, address and phone are never sent to the AI.
- We don't sell personal information, and we don't use your content to train AI models.
- Results are deleted after 365 days, and you can delete your account and its data at any time.
1. Information we collect
Information you give us
| Category | Examples |
|---|---|
| Account details | Email address, username, password (stored only in hashed form), role or title, phone number |
| Company details | Company name, address and phone number |
| Content you submit | Files you upload, the text extracted from them, your answers on the Decision Review form, answers to follow-up questions, outcomes you record, and payoff worksheet inputs |
| Billing details | Plan, purchases and credits. Card details are collected and held by Stripe, not by us. |
| Communications | Messages you send us and support requests |
Your documents may contain personal information about other people, such as names in a budget or a staff list. Please only upload what you're authorized to share, and avoid sensitive personal data (see the Terms, Section 4).
Information collected automatically
- Technical data: IP address, browser and device type, pages visited and timestamps, kept in server and security logs.
- Usage records: for example, when you sign up, run a check or review, view plans or click to buy.
- Sign-up records: the time and IP address at which you accepted the Terms and this Policy, and your IP address for limiting repeated sign-ups.
- Cookies: see Section 7.
2. How we use information
- to create and run your account and provide checks, reviews and related features;
- to send service emails, such as links to your results and the 30- and 90-day follow-ups after a Decision Review;
- to give later Decision Reviews for your company short summaries of your earlier decisions and outcomes ("company memory");
- to process payments and manage plans and credits;
- to provide support, and for staff to review results that are held for review;
- to secure the Service, prevent spam and abuse, and enforce our Terms;
- to understand how the Service is used and improve it, using aggregated or de-identified data where possible;
- to comply with law.
We don't sell personal information, share it for cross-context behavioral advertising, or use your content to train AI models.
3. Legal bases (EEA, UK and similar laws)
Where these laws apply, we rely on: performance of our contract with you (providing the Service); our legitimate interests (security, abuse prevention, improving the Service and business communications); compliance with legal obligations; and consent where we ask for it, which you can withdraw at any time.
4. How we share information
We share personal information only with service providers that process it for us under contract, and as described below:
- OpenAI, to read your documents and produce checks and reviews. Requests are sent with OpenAI's response-storage option turned off, and your company is identified only by a random Company Code.
- Stripe, to process payments.
- Hosting, email and infrastructure providers, including [HOSTING PROVIDER] and [EMAIL PROVIDER].
- Google, for website analytics (see Section 7).
We may also disclose information if required by law or to protect rights and safety, and in connection with a merger, acquisition or sale of assets, subject to this Policy.
5. How long we keep information
- Uploaded files for document checks are deleted once their text has been extracted.
- Results, including extracted text, are deleted after 365 days, or sooner if you delete them or your account.
- Account and company details are kept while your account is open.
- When you delete your account, we delete your Decision Reviews, Decision Review form answers and uploads, document checks, payoff worksheets and related records.
- Billing records are kept as long as tax and accounting law requires.
- Logs are kept for a limited period for security and troubleshooting.
6. Security
We use reasonable safeguards, including access controls, encrypted connections and refusing unsafe file types. Access to customer content is limited to staff who need it. No system is completely secure; if a breach affects your personal information, we'll notify you as the law requires.
7. Cookies and analytics
- Essential cookies keep you signed in and protect forms. The Service doesn't work without them.
- Analytics cookies: Emergent Skills websites use Google Analytics, which sets cookies such as
_gaon the emergentskills.com domain, including this site. They help us understand visits in aggregate. You can block them in your browser or with Google's opt-out add-on.
We don't use advertising cookies.
8. Your choices and rights
You can update your account and company details in My profile and company. To delete your account and its data, use "Cancel account" in My profile and company, or email [PRIVACY EMAIL]. Depending on where you live, you may also have the right to:
- access the personal information we hold about you, or receive a copy;
- correct or delete it;
- object to or restrict certain processing;
- withdraw consent;
- complain to your data protection authority.
To make a request, email [PRIVACY EMAIL]. We'll verify your identity and respond within the time the law requires. We won't discriminate against you for exercising your rights.
If your organization gave you access, it may control some of your content; we may refer your request to it.
9. International transfers
We're based in the United States, and our providers may process information in the United States and other countries. Where required, we use appropriate safeguards, such as standard contractual clauses, for transfers.
10. Children
The Service is for business use by adults. We don't knowingly collect information from anyone under 18.
11. Changes to this Policy
We may update this Policy. We'll post the new version with its effective date and, for material changes, notify account holders by email or in the Service.
12. Contact
Privacy questions or requests: support@emergentskills.com