Privacy Policy

Draft for legal review

This Privacy Policy explains how AIVROs (the AI Value Readiness Operating System), operated by Skillement.ai, collects, uses, and protects information when you use our platform at app.aivros.ai.

Who We Are

AIVROs is a workforce AI readiness platform operated by Skillement.ai. We act as a data processor for our enterprise customers (sponsors) and as a data controller for the limited account information we hold about platform users.

Data We Collect

We collect only what is required to operate the platform:

• Account information: name, work email, role, and the sponsor organization that invited you.
• Assessment responses: answers you submit to AIQ, ProFit, and related instruments.
• Derived scores: SkilliScore, archetype results, and other computed analytics.
• Usage telemetry: session timestamps, page views, and feature interactions for product improvement.
• Support correspondence: messages you send to us or submit through our contact form.

We record when you sign in, which areas of the app you use and how often you open them, and an estimate of the time you are active (we do not count idle time over five minutes). We keep this for 90 days. AIVROs administrators can see it to support you and to understand how the product is used. Your organisation's sponsor sees only combined totals for the organisation, never your individual activity. We do not record what you write, or any answers, chats, documents or scores.

We do not sell personal data. We do not use assessment content to train third party models without explicit consent.

How We Use Your Data

• To deliver assessments and surface results to you and your sponsor.
• To compute readiness scores, archetypes, and program recommendations.
• To maintain service quality, monitor performance, and prevent abuse.
• To respond to your inquiries and provide customer support.
• To meet legal, audit, and regulatory obligations.

Legal Basis for Processing

We process personal data under one or more of the following bases: contractual necessity (operating your account), legitimate interest (product analytics and security), legal obligation (record keeping), and explicit consent (marketing communications, optional features).

Sharing and Disclosure

We share data only with:

• Your sponsor organization: the customer that invited you sees your assessment results as group figures, for groups of five people or more. Individual scores are private by default. Your sponsor can choose to view individual scores.
• Subprocessors: Supabase for the database and sign-in, Vercel for the website, Render for the API, OpenAI and OpenRouter when a feature uses AI and Enhance with AI is on, Stripe for payments, Resend for email, Sentry for error reports, Gamma for presentation decks a sponsor creates, Tavily and Exa for web research on public company information, and Google Analytics for website statistics after you allow analytics. Each one's job is listed on the Trust and security page. We don't train on your data.
• Films: Clicking a film on this site loads that film from YouTube. YouTube is a separate company, not one of our subprocessors, and its own privacy policy applies.
• Legal authorities: when required by law or to protect rights, safety, or property.

Data Retention

Active account data is retained for the life of your account. Inactive accounts and associated assessment data are archived after 24 months of inactivity and deleted on request, subject to legal retention obligations. An administrator can delete a workspace, which removes the login, the campaign files, and the voice recordings. Logs are kept for up to 90 days. Each campaign has an Enhance with AI control on Campaign Builder, on the Setup tab. It is on unless the workspace owner turns it off. A member has the same control for their own results in Settings. It is on unless they turn it off.

Security

Traffic is encrypted on the way. Stored data is encrypted where it sits. Each customer sees only their own workspace. Administrators sign in with a second factor. No system is perfectly secure, and we encourage you to use a strong unique password.

Your Rights

Depending on your jurisdiction (GDPR, CCPA, PIPEDA), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent at any time.

To exercise these rights, contact us through the methods listed below. We respond within 30 days. For results from an assessment your organisation gave you, your organisation decides. We pass your request to them.

Cookies and Tracking

On aivros.ai we ask which cookies may run, using an open source consent tool. Nothing that tracks you loads before you answer. There are three groups:

• Strictly necessary, always on. The cookies that keep you signed in and manage your session, the record of your cookie choice, and error monitoring by Sentry. Sentry tells us when a page breaks so we can fix it. It records no session replay, and it is set up to send no personal data: no cookies, request headers, form contents or user identity go with an error report.
• Analytics, off until you allow it. Google Analytics counts visits and shows which pages help. Optional analytics cookies are off by default and require your consent. Google Analytics loads on aivros.ai only after you allow analytics. If you turn it off later, its cookies are removed.
• Advertising. We do not use third party advertising cookies. If that ever changes, we will ask you first.

You can change your choices here at any time.

Change my cookie choices

International Transfers

Data may be processed in regions where our cloud providers operate. Where data leaves your jurisdiction, we rely on standard contractual clauses or equivalent safeguards.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. Continued use after changes take effect constitutes acceptance.

Contact

For privacy related inquiries, please use our contact form and select “Privacy” as the topic, or email info@skillement.ai.