PRIVACY POLICY

1. Overview

This Privacy Policy explains what information the R.A.T.E.S. Responsible AI Readiness Assessment™ app collects, how we use it, and the choices you have. New Skills Online, LLC (“we,” “us”) is the operator of the Service.

If you use the free Quick Scan without an account, the information below still applies, with the differences described in Section 2.

2. Information We Collect

• •Account information: your email address, name, and workspace role. If you register with Google, we receive the account details that provider shares.
• •Organization profile: the details you enter about your organization (name, type, size, industry, location).
• •Assessment content: your responses, quick scan answers, build-it notes, evidence notes and locations, action plan tasks, and leadership decisions you record. This is the content you create — you own it.
• •Usage information: basic analytics about how the app is used (for example, events like a scan being saved), used in aggregate to improve the Service.
• •Security information: records of rate-limit and suspicious-activity events (such as suspected automated scans), used to protect the Service. These are visible only to workspace administrators.
• •Local device storage: if you take the free Quick Scan without signing in, your in-progress answers are stored in your own browser's local storage on your own device. They stay there until you save them to an account or clear your browser.

3. How We Use Your Information

We use the information above only to:

• •Operate the Service — creating your account, saving your assessments, notes, evidence records, and action plans, and showing them back to you.
• •Authenticate you and send account-related emails (verification codes, password resets, invitations).
• •Protect the Service — rate limiting, abuse detection, and security monitoring.
• •Improve the Service, using aggregated, de-identified usage patterns.

We do not sell or rent your personal information, and we do not use your assessment content for advertising.

4. When We Share Information

We share information only as needed to run the Service:

• •Service providers: trusted vendors who host the app and its database, bound to process data only on our instructions.
• •Within your workspace: information such as assessments is visible to the workspace owner and administrators of your own organization's workspace.
• •Legal requirements: if we are required to disclose information by law, regulation, or valid legal process.
• •Business transfers: in the event of a merger or acquisition, we would transfer data only under confidentiality commitments consistent with this policy.

5. Your Rights and Choices

You can access and review your assessments, notes, and plans at any time within the app, and print your readiness report for a portable copy.

You may request correction or deletion of your personal information by contacting us through the app or the New Skills Online, LLC website. Deleting your account ends access to the Service; stored assessment content associated with the account can be deleted on request.

You may use the free Quick Scan without an account, in which case your in-progress answers remain on your own device only.

You can clear local device storage at any time through your browser settings.

6. Data Retention and Security

We keep your account and assessment information for as long as your account is active or as needed to provide the Service, and delete or de-identify it afterward in accordance with this policy.

We use reasonable administrative and technical safeguards to protect information, including encrypted connections, access controls, and server-side abuse detection. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Note: the Evidence Portfolio is designed to record where evidence lives (for example, 'Board policy folder, SharePoint') — not to store the sensitive documents themselves. Please do not enter the actual contents of sensitive records into any notes field.

7. Children's Privacy

The Service is intended for adults acting for organizations and is not directed to children under 13. We do not knowingly collect personal information from children under 13; if you believe a child has provided information, contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the effective date above; continued use of the Service after changes means you accept the updated policy.