Privacy notice

What we collect

• Questionnaire answers — your profile selections and pillar responses, stored to compute your readiness score and generate your report.
• Business email — collected at the email gate when you unlock the full report. Optional company name and role if you provide them.
• Marketing consent — an explicit yes/no choice at the email gate. We only send occasional product and resilience insights if you opt in; report delivery does not depend on marketing consent.
• Website scan signals — if you optionally provide a public website domain, we fetch public pages and extract fixed boolean signals only (for example, whether a privacy policy or security page appears to exist). We do not store raw page HTML in your assessment record.

Where data is stored

Assessment and lead data are stored in a Neon Postgres database hosted in the EU region. Report access links use unguessable, expiring tokens — not assessment identifiers in URLs.

Cookies and analytics

This assessment does not use advertising or cross-site tracking cookies. We use Vercel Web Analytics, a privacy-friendly analytics product, to understand aggregate funnel usage without profiling individual visitors for advertising.

Retention

• Assessments that never pass the email gate (no lead record) are automatically purged after 30 days of inactivity.
• Report access tokens expire 30 days after they are issued. Expired tokens are removed by a scheduled retention job.
• When you submit the email gate, your lead record and associated assessment data are retained for follow-up and report delivery for as long as needed for that purpose, subject to applicable law and your rights.

Sharing

We do not sell your data. Infrastructure providers (hosting, database, email delivery, and AI narrative generation) process data only to operate the service. Marketing follow-up happens only when you explicitly opt in at the email gate.

Contact

Questions about this notice or your data: info@codegeeks.solutions or our contact page.