Privacy

Plainly stated.

The diagnostic stores research responses. This page says what is kept, how it is used, when it expires, and what we can remove.

How responses are used

Answers are used only in aggregate. We never analyse, quote, report, or publish one response as an individual response. We may read an individual session internally to debug a result, check whether a question is working, or review suspected abuse; that access is never an output shown to a third party.

Phase 0 answers use closed choices and numbers, so there is nowhere in the questionnaire to type your name or company. A session still has a random id, timestamps, a short-lived hashed network address, and any campaign or referring-site information that brought you here. We do not claim that this makes identification mathematically impossible.

What changes if you give an email

Without an email, we cannot reach you. If you choose to give one, we also store that address and any optional name or organization you provide so a person can reply about your result. Your answers are still used only in aggregate. Giving an email does not put your name on your responses, and the optional follow-up checkbox starts unchecked.

We never name you or your organization in a case study, quote, or example without asking for explicit consent for that particular use.

How long things are kept

Answers, result, and the unlinked session
Indefinitely, as the closed-vocabulary research corpus.
Hashed network address
30 days, then it is removed. The salt rotates daily, so the hash cannot link sessions across days.
Campaign and referring-site information
12 months.
Contact details without follow-up consent
90 days.
Contact details with follow-up consent
Until you withdraw that consent.

Automated retention work runs daily, so time-based removal happens within one day of the stated boundary.

Browser access lasts 24 hours

A diagnostic session can be continued, and its result reopened in the same tab, for 24 hours. The session id, access token, and any answers waiting to save live in that tab's session storage. When browser access expires, answers already saved do not disappear; they remain under the retention rules above.

What we publish

A fact about a question is published only when all four rules pass:

A fact that fails any rule is silently withheld, not rounded or softened. The public participation count is a count of completed responses, not people, teams, or organizations; repeat completions cannot be detected.

Deletion and withdrawal requests

Email privacy@aframintelligence.com. Kwaku owns that mailbox. We complete the request and tell you what was done within 30 days, without restating the answers or contact details we held.

Withdrawal only leaves contact details in place but excludes the session from counts and future published aggregates. Deletion removes contact details and permanently prevents the session from being linked to contact again; it also excludes the session from counts and future published aggregates.

What deletion leaves behind: the session row remains, excluded from every count, along with its closed-vocabulary answers and result; creation, completion, and deletion timestamps; browser class; the hashed network address until its 30-day expiry; and campaign or referring-site information until its 12-month expiry. What is left has no name or address and, after 30 days, no network fingerprint of any kind.

The session leaves the public completion count within 15 minutes of the request being executed. Aggregates already published before a request are not retracted or reissued; every aggregate computed after it excludes the session.