Privacy Policy

Who we are

This assessment is run by Architecting Influence. We are the data controller for the information described here. Contact details are at the end of this policy.

What we collect

When you take the Influence Architecture self-assessment, we collect:

• Your first name and email address — provided when you submit the assessment
• Your assessment answers and scores — your responses to the 20 questions and the scores calculated from them
• Your marketing preference — whether you ticked the (unticked by default) box to receive insights, and if so when you ticked it and the wording you agreed to
• Login activity — when you last logged in, and short-lived login links and session tokens, which are stored only as one-way hashes
• Request counts by IP address — used only to limit abuse (for example, too many submissions from one address) and kept for no more than two hours
• Anonymous usage events — for example that an assessment was completed, with the scores but no name or email, and the page that referred you
• Site analytics — Cloudflare Web Analytics records page views and load times. It is cookie-free, does not fingerprint your browser, and does not track you across sites

Cookies

We set two strictly necessary cookies and no tracking or advertising cookies:

• results_view — lets the browser that just submitted an assessment see that one result for one hour
• session — keeps you logged in for 30 days after you use a login link

Cloudflare Web Analytics, described above, works without cookies.

How we use your data

• Delivering your results — we email you a link to your results and use your email address to send login links
• Personalised recommendations — your scores determine which book chapters, course modules and development areas we suggest
• Marketing communications — only if you ticked the box. We will send occasional insights on building pre-sales skills. Every email includes an unsubscribe link, or you can contact us
• Workshop enquiries — if several people from the same organisation complete the assessment, we are notified internally with the email domain and the count only, so we can offer that organisation a workshop. No names or individual results are included
• Keeping the service running — rate limiting, preventing misuse, and understanding overall usage

Our lawful bases are your consent (marketing), performance of the service you asked for (results, login, recommendations) and our legitimate interests (security and workshop enquiries).

Who we share it with

We do not sell your data. We use these providers to run the service, each only for the purpose listed:

• Cloudflare — hosting, the database that stores your data, sending of results and login emails, bot protection, and cookie-free web analytics
• Brevo — holds our marketing contact list. Your name and email are added only if you ticked the marketing box, and removed when you delete your account
• Slack — receives the internal workshop notification described above (email domain and count only)

Shared results

When you share your results via a unique link, recipients can see your first name and scores only. Your email address and individual answers are never exposed in shared results. Share links expire after one year.

How long we keep it

• Your account, answers and scores — until you delete your account
• Login links and sessions — removed within seven days of expiring (login links expire after 15 minutes, sessions after 30 days)
• Results view access — one hour after submission
• Rate-limit counters — two hours
• Anonymous usage events — twelve months
• Marketing contact in Brevo — until you unsubscribe or delete your account

Data security

Data is stored in Cloudflare D1, encrypted at rest, and all traffic is served over HTTPS. We do not store passwords: login uses time-limited single-use links, and all login tokens are stored as one-way hashes. Submissions are rate limited to prevent misuse.

Your rights

Under UK data protection law you can ask us to access, correct or delete your personal data, object to or restrict how we use it, withdraw marketing consent at any time, and receive a copy of your data in a portable format.

The quickest way to delete everything is the "Delete my account" button on your dashboard. It removes your account, answers, scores and login tokens immediately, and removes you from our marketing list. For anything else, contact us at the address below. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Contact

For questions about this policy or your data, contact: [email protected]