Privacy & Data Policy
Last updated: July 2026
Assessment Disclosure
This conversation is designed to explore your experience working with AI tools. We'll ask about your workflows, past projects, and how you approach different challenges. Your responses will be used to assess your practical AI skills.
There are no trick questions—just a chance to discuss how you actually work with these tools.
Individual Users & Business Users
Individual users
If you take an assessment for yourself, your results belong to your account. Nobody else sees them unless you share them or you were invited by an employer (see below).
Business users & invited candidates
If an employer invited you to take the assessment, that employer receives your assessment results (scores, evidence, and report). This is disclosed in the invitation. If you use the employer dashboard on behalf of a company, the data you see about candidates is limited to assessments connected to your organisation.
Data Collection & Storage
Conversation Logs
We retain conversation transcripts for assessment purposes. These logs include your messages and the AI's responses during the assessment session.
Assessment Report
Scores, evidence quotes, and evaluation reasoning are stored separately from raw transcripts. This structured data is used to generate your assessment report and may be shared with employers who have invited you to take the assessment.
Session Metadata
We track session timing, persona selection, and technical metrics (such as response latency) to ensure assessment quality and detect potential issues.
Google Sign-In & Third-Party Authentication
AISA offers Google Sign-In as an authentication option. When you choose to sign in with Google, we access the following data from your Google account:
Data Accessed
- Email address — used to create and identify your AISA account
- Display name — used to personalise your experience and appear on your assessment report
- Profile picture URL — referenced for display purposes only; not downloaded or stored separately
Data Usage
Google user data is used solely for authentication and account creation. Your email address serves as your account identifier and is used to send assessment results and transactional emails (such as report delivery and account notifications). Your display name appears on your profile and assessment reports. We do not use Google user data for advertising, profiling, or any purpose beyond operating your AISA account.
Data Storage & Sharing
Google account data is stored securely in our authentication database (hosted by Supabase) and is subject to the same retention and security policies as all other account data described in this policy. We do not share your Google user data with third parties except our infrastructure providers (Supabase for authentication, Resend for transactional email delivery), who are contractually obligated to protect your data. We do not sell, transfer, or use Google user data for purposes unrelated to the core functionality of AISA.
Scope of Access
AISA requests only basic profile and email scopes from Google. We do not access your Google Drive, Calendar, Contacts, Gmail, or any other Google services. You can revoke AISA's access to your Google account at any time via your Google Account permissions.
Data Retention
We retain assessment data — conversation transcripts, scores, evidence, and session metadata — indefinitely, unless you request deletion. This data is what allows us to keep improving assessment accuracy over time, benchmark scores fairly across the growing pool of assessments, and support your own history (retakes, progress, certificates) for as long as you use AISA.
Retained data is always handled under the protections described in this policy: it is used in anonymised form for research and improvement, and is never sold. You can request deletion of your personal data at any time (see Your Rights below).
Company-Specific & Proprietary Information
Assessment conversations are about how you work, and sometimes that means mentioning your employer's projects, tools, or internal details. Here is exactly what happens to that information:
- It stays confidential. Business information mentioned in an assessment is never sold, shared with third parties, or exploited for any purpose outside delivering the assessment.
- It is never attributed. When assessment data is used for research or product improvement, it is anonymised first — never linked to you, your name, or your company.
- You don't need to share secrets. The assessment measures how you work with AI, not what you're working on. You can describe your workflows in general terms — scores are never improved by naming confidential specifics.
Your Rights
Right to Access
You can view your assessment results and request a copy of your conversation logs at any time.
Right to Deletion
You may request deletion of your data at any time. We will delete your conversation logs, assessment results, and associated metadata within 30 days of your request. Note that if your assessment was shared with an employer, we may retain anonymized aggregate data for analytics.
Right to Correction
If you believe any information in your assessment is incorrect, you can request a review or retake the assessment.
How We Use Assessment Data
Assessment data makes AISA better at what it does. We use retained data in two ways, and in both cases it is anonymised first — never linked to your name, your identity, or your company:
- Improving the assessment. We analyse anonymised conversations and scores to calibrate scoring accuracy, reduce bias, and make Aisa a better interviewer.
- Public research. We publish aggregate insights about global AI fluency and adoption — for example, State of AI reports. These contain statistics and trends, never individual data.
We do not sell your data, and we do not share identifiable conversation data with third parties beyond the service providers listed below.
Data Sharing
With Employers
If you were invited to take an assessment by an employer, your assessment results (scores, evidence, and report) will be shared with that employer. Raw conversation logs are not shared unless explicitly requested and authorized by you.
Service Providers
We use the following third-party services to operate the platform. Each provider is contractually obligated to protect your data and use it only for service delivery:
- Supabase — authentication, database hosting, and user account management
- Google — optional sign-in authentication (see Google Sign-In section above)
- Anthropic — AI model provider for assessment conversations and scoring
- Vercel — application hosting and delivery
- Resend — transactional email delivery (report results, notifications)
- Stripe — payment processing (we do not store card details)
Legal Requirements
We may disclose your data if required by law, court order, or to protect our rights and the safety of our users.
Security Measures
We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security audits. However, no system is 100% secure, and we cannot guarantee absolute security.
Questions & Requests
AISA is operated by Common Wisdom Consultancy Ltd, registered in England and Wales, No. 11259477, registered office: 28 Wilton Road, Bexhill On Sea, East Sussex, TN40 1EZ, United Kingdom — the data controller for the personal data described in this policy.
If you have questions about this policy or wish to exercise your rights, please contact us at info@aisa.to or through the feedback mechanism in the application.
The Science Behind AISA
In 2026, Anthropic published the AI Fluency Index — the largest empirical study of AI fluency to date, analysing nearly 10,000 conversations. AISA covers 93% of the behaviours Anthropic identified as markers of AI fluency and goes even deeper with 4 additional dimensions. The U.S. Department of Labor's AI Literacy Framework (TEN 07-25) defines what every worker needs to know about AI — AISA covers 100% of its 25 sub-competencies.Read our analysis: Anthropic's AI Fluency Study & AISA · DOL AI Literacy Framework & AISA
AISA's framework is developed by a team with deep roots in tech, behavioural science, and AI product leadership — the rubric is informed by backgrounds spanning the Metropolitan Police, Harvard, Crowdbotics (Silicon Valley), and the European School of Economics.
