Privacy

Privacy policy for the assessment platform.

This covers the AI Fluency assessment platform at assess.aifluency.ai: the free assessment, organization accounts, and everything they store. It is written from what the platform actually does. Effective 11 October 2026.

1. Who we are

AI Fluency LLC, Catalyst Incubator at EngineWorks, 2425 Technology Blvd, Bozeman, Montana. Contact: info@aifluency.ai.

Our marketing site at www.aifluency.ai has its own policy. This one applies to the platform at assess.aifluency.ai.

2. Who is responsible for your information

If you take the assessment through your employer’s account, your organization is the controller of your answers, results and account details: it decides why and how they are used. AIFluency processes them on its behalf and under its instructions.

If you take the free assessment yourself, AIFluency is the controller of your information, as described here.

AIFluency owns the anonymous, aggregated data we derive from all assessments: patterns across many people and organizations, with no names, emails or individual results, that cannot reasonably be linked back to any person, in groups too large to identify anyone. We own the benchmarks, research and improvements to the assessment built from it, and may publish industry benchmarks from it. We never sell personal information.

3. What we collect

The free assessment

Your first name, last name and email address. All three are needed to start.
Your answers: the response you chose in each of the 15 scenarios, and how fluent you rated yourself before you began.
Your scores: one for each of the five dimensions, and an overall score, worked out from your answers.
Where you came from, if the link carried it: a group tag (for example an event), and the result that referred you when someone shared the assessment with you.
A one-way code made from your network address, not the address itself. It limits how many assessments one network can start in a day, and it is cleared after 48 hours.
A token in your browser that opens your full report only there. We store a one-way hash of it, never the token.
Which share buttons are used on a result, and when. Not who used them.

An account through your employer

Your name, work email address and password. The password is stored only as a one-way hash.
Your organization, your department, and your role (member or leader).
Your answers and scores, as above, with your department and organization recorded as they were when you took it.
When you agreed to the notice about what your organization can see, and which version you saw.
If you are a leader: the action plans you create, including the owner’s name you type, and the retention review period you set for your organization.

Optional, and only if your organization offers them

“In your own words”: four short answers about your work, typed or spoken. We store only the text you approve, a note of whether it was typed or transcribed, and the advice rewritten from it (section 6).
The work sample: which version of the task you were given, your three written answers, your conversation with the supplied AI tool, how many of its messages you used, whether you used a phone, tablet or computer, and the times at which you moved between its parts. The work sample is never scored: nothing in it changes your result, and your organization’s leadership never sees your answers or the conversation.

An organization can switch off voice and the work sample for its people.

Contact and technical information

If you write to us through the contact form when it is connected: your name, email, company, job title, company size, what you are interested in, and your message. Until then the contact page shows an email address instead.
Our hosting provider keeps standard request logs: IP address, browser type, the pages requested, and the time. Our own logs record error codes, not your answers or who you are.

We do not collect payment details, age, gender or other demographic details, and we use no advertising or analytics trackers.

4. How we use it

To score your assessment and show you your result and report.
To show your organization’s leadership group results, as described in section 5.
If you answered “In your own words”, to rewrite the advice in your report in terms of your own work.
To run the work sample for you, if your organization offers it.
To answer you when you contact us.
To improve the assessment: for example, to see which scenarios people find hard, using results from genuine takers rather than our own test runs.
For organization accounts, AIFluency processes personal data on the organization’s documented instructions. Data is used for benchmarking only after it has been irreversibly anonymized so it can no longer be linked to a person, and only as permitted by the customer agreement and data processing agreement.
To keep the service working and secure, for example the per-network limit.

We never sell personal information, and we do not use it for advertising.

Legal bases, if you are in the EU or UK

An account through your organization: your organization’s own legal basis, as the controller. We process the information on its instructions.
The free assessment: carrying out the service you asked for: scoring your answers and showing you your result.
Follow-up emails about your result: our legitimate interests. You can object at any time, and we stop (section 8).
Voice and “In your own words”: your consent. You can withdraw it at any time by deleting what you said (section 6).

5. Who sees what

You see your full result and report, in the browser you took it in or signed in to your account.
Anyone with your public result link sees your name and your overall score, including in link previews. The full report opens only in the browser that took the assessment.
Your organization’s leadership sees who has taken part (each member’s name, department and whether they have completed the assessment) and results for groups of five or more people, by department and dimension. A group smaller than that shows no results, and a second group is withheld where subtraction would reveal it. Leadership never sees an individual’s score, which response anyone chose, anything said or typed in “In your own words”, or a work sample.
AI Fluency can read the database to run and support the service. No screen shows a customer’s leadership an individual score, and automated tests check that on every change.

6. Voice and “In your own words”

After an assessment, if your organization offers it, you may describe your work in four short answers, by typing or by speaking. It is optional: skipping it is one click, and your score is already final before it appears. Nothing you say or type changes your score.

If you speak, the recording is sent to Deepgram to turn it into text and is then discarded. We never store it. You edit the text before saving, and only what you approve is stored.
The advice in your report is rewritten in your own terms by Anthropic’s Claude from the text you approved. That rewritten advice is saved with your words, and deleting your words deletes it.
You can delete what you said at any time, from your result page, for every assessment you saved it with. Your result does not change.
Your organization’s leadership never sees your words or the advice rewritten from them.

7. Companies that process data for us

These companies handle personal information for us, only to provide their service.

Company	What for	What it receives	Where
Neon	Database	Everything we store.	United States (AWS, Oregon)
Vercel	Hosting	Every request to the site, including your IP address and anything you submit, and its request logs.	United States
Deepgram	Speech to text	Your recording, only if you answer “In your own words” by voice. Every request asks Deepgram not to use it to improve its models.	United States
Anthropic	The rewritten advice, and the work sample’s AI tool	For the advice: the text you approved, the level word for each dimension, and the standard advice. For the work sample: the task’s documents and the messages you send its tool. Never your name, email or organization. Anthropic deletes what the API receives within 30 days under its standard terms.	United States
HubSpot	Contact form, when it is connected	What you enter in the contact form.	United States

Links to our booking page and to our marketing site take you to those services, which have their own policies. Nothing is sent to them unless you follow the link.

8. Emails

If you take the free assessment, we may email you about your result. You can stop those emails at any time by replying, or by writing to info@aifluency.ai.

If you have an account through your organization, you get only service emails: invitations, reminders and your result. Never marketing, unless you sign up for it yourself.

9. Cookies and storage in your browser

Name	What it does	Lasts
`aif_session`	Keeps you signed in to an organization account.	30 days, or until you log out
`aif_r_` followed by a result’s code	Opens the full public result only in the browser that took the assessment.	365 days
`aif-rubric-progress-v1` (browser storage, not a cookie)	Saves your answers while you take the free assessment, so a reload does not lose them. Cleared when your result is created.	Until your result exists

These are needed for the service to work. There are no advertising or analytics cookies.

10. How long we keep it

Information	How long
Free assessment: name, email, answers and scores	3 years, or until you ask us to delete them.
Organization accounts: everything in the account	For the length of the subscription and 90 days after the contract ends, then deleted. At any time, your organization can ask us in writing to delete its data, and we delete it within 30 days of the request. Within the subscription, a leader can also set a review period (12 months, 24 months, 36 months): results older than it are flagged for deletion and removed when a leader approves.
“In your own words” and the advice rewritten from it	Until you delete them, or the assessment they belong to is deleted. Recordings are never kept.
The work sample	Until you delete it, or the account is removed. Deleting it clears your answers and the conversation; the count of messages used is kept, so the limit cannot be reset.
The network code	48 hours.
Sign-in sessions	30 days.
Contact form entries	Until you ask us to delete them.
Backups	We keep encrypted backups of the database for 30 days. Anything deleted from the service is gone from every backup within 30 days.

11. Your rights

You can ask for a copy of what we hold about you, have it corrected, or have it deleted, by writing to info@aifluency.ai from the address you used. We answer within 30 days.

If you are in the EU or UK, the law gives you these rights over your personal information:

Access: a copy of what we hold about you.
Correction: having anything wrong put right.
Deletion: having it erased.
Restriction: limiting how it is used while a question about it is settled.
Objection: objecting to a use based on legitimate interests, such as follow-up emails.
Data portability: receiving what you gave us in a common, machine-readable format.
Withdrawing consent: at any time, for anything that relies on it, such as voice and “In your own words”.

You also have the right to complain to a data protection authority, such as the one where you live or work. We would welcome the chance to put things right first: write to info@aifluency.ai.

If you took the assessment through your organization’s account, your organization is the controller (section 2), so we may ask you to make the request through it, or involve it in answering.

Two things you can do yourself, without asking: delete what you said in “In your own words” from your result page, and download your own result as a spreadsheet from an organization account.

12. Security

Every page and request is served over an encrypted connection (HTTPS, TLS 1.2 or 1.3), and the site tells browsers to use only encrypted connections for two years.
The connection between the platform and its database is encrypted and verified, and the database refuses unencrypted connections.
Data is encrypted at rest with AES-256 by our database and hosting providers, including the keys and secrets the platform uses.
Passwords are stored only as one-way hashes. A sign-in session is a random token that cannot be guessed.
Access to the database is restricted to the people who run the service. Backups are encrypted, taken weekly, and none is kept longer than 30 days.
Leadership views are built so that no individual’s score reaches them, and automated tests check this on every change.

13. How results may be used

The assessment is a self-assessment of judgment across five dimensions, taken in about 11 minutes. It is not a credential, and it has not been validated for decisions about individuals. Results must not be used for hiring, promotion, pay or termination decisions.

14. Children

The platform is for adults at work. It is not for anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe we have, write to info@aifluency.ai and we will delete it.

15. International

We and the companies in section 7 store and process information in the United States. If you use the platform from elsewhere, your information is transferred there.

For organization customers, we sign a data processing agreement that uses the EU Standard Contractual Clauses for transfers to the United States. It is available on request at info@aifluency.ai.

16. Changes

If we change this policy, we update the date at the top. If a change affects what your organization can see, you are asked to read the new notice before your next assessment. This version is effective 11 October 2026.

Questions about this policy: info@aifluency.ai. The scoring method and what the assessment does and does not establish are described at assess.aifluency.ai/instrument. Our company email domain is aifluency.ai; we never ask for a password by email.