PRIVACY POLICY

When you take the assessment, we store:

• Your email address. Used to send you the magic link, the receipt, and the link to your report. Required.
• Your responses to the 70 assessment questions. Required to score the assessment and generate your report.
• The time you spent on each question. Used internally for response-quality validation. We do not show this to you and we do not share it.
• Your computed scores and assigned archetype. Generated from your responses.
• Payment metadata via Stripe. When you check out, Stripe collects your payment details directly. We never see or store your card number. We store the Stripe session ID, the amount paid, and the payment status.

We do not collect anything else. No tracking pixels from third parties. No advertising cookies. No fingerprinting beyond what your browser sends to any web server.

Three things, all listed:

1. To generate your report. Your responses produce your scores. Your scores produce your archetype. Your archetype, your scores, and your stated motivation feed into the LLM that writes the personalized sections of your report. The report is delivered to your email and persisted at a stable URL you can return to.

2. To improve the test by refining the scoring model. Periodically, we run a recalibration analysis against aggregated production data to refine the empirical percentile distributions and per-archetype weights the scorer uses. The analysis runs against aggregated data. No individual report is regenerated. No individual response is identifiable in the calibration outputs.

3. To send you transactional emails. The magic link to start, the receipt, the link to your report, the refund confirmation if you request one. We do not run a marketing list. We do not send promotional emails.

• We do not sell your data to third parties. Ever.
• We do not share your individual responses or report with anyone except you.
• We do not use your responses to train AI models. The LLM that writes your report is a hosted Anthropic model called via API; the request and response are processed under Anthropic's commercial API terms, which state that data submitted through the API is not used to train Anthropic's models (per Anthropic's commercial Terms of Service and Usage Policy as of the "Last updated" date at the top of this page; we monitor for changes).
• We do not run an ad network, retargeting, or behavioral profiling.

We use the following service providers to operate the product:

Each of these processes data on our behalf under their own published privacy and security commitments.

You can request deletion of your data at any time. Submit a request from the data deletion page. We will send a confirmation magic link to your email. Once you confirm, we delete your individual responses, your scores, your archetype assignment, and your report within 30 days.

What deletion does not remove: the aggregate scoring parameters that have already been derived from the data set. These are statistical summaries of the population, not your individual data, and they cannot be reverse-engineered to identify your responses. Your individual record is gone. The math the population produced lives on.

If you are in the EU/EEA or in California, you have specific rights:

• Right to access. Email us and we will export your responses, scores, and report.
• Right to deletion. Use the data deletion page.
• Right to correction. If you believe a stored field is incorrect, email us.
• Right to portability. We will send your data in a machine-readable format on request.
• Right to object. If you do not want your assessment included in periodic recalibration analysis, email us and we will exclude your record from the aggregate. After a calibration run has executed, individual records can still be deleted but the aggregate cannot be unwound.

We do not have a Data Protection Officer at this stage. The contact for privacy questions is the email below.

Your assessment record and report stay at their stable URL indefinitely so you can return to them. If you want them gone, request deletion. We do not impose a forced expiry.

The product is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted an assessment, email us and we will delete the record.

If we change this policy materially, we will update the "Last updated" date at the top and email anyone with an active assessment record. Trivial wording changes will not trigger an email.

For privacy questions, requests, or to invoke any of the rights above:

hello@reckon.report