Privacy Policy
Last updated: 27 August 2026 (v2 platform port)
We believe trust starts with restraint, so we run our sites without the invasive tracking common on the modern web. This policy explains what we collect, why, and the choices you have. It covers the hub at airihub.io, every organisation-branded subdomain (*.airihub.io), and our services.
1. What we collect
When you take an assessment
Your answers, your score, and the email address you give us to receive your report. The email is used exactly once — to send the report — and is then deleted. We do not retain it, we cannot re-send a report, and your individual answers are never stored after scoring: only the aggregate of completed assessments persists.
When you register an organisation site
Your name, work email, organisation URL, and the reason you give. This information is retained: it identifies the administrator of your organisation’s site. When you register, we also fetch your organisation’s public website once to extract a logo, a colour scheme, and a description for auto-branding your site.
Server logs
Our edge provider records request metadata (route, status, timing) for security and operations, retained for days. We never log assessment takers’ emails, answers, or scores.
2. How we use it
- To score assessments and deliver the one-time report email to the taker.
- To set up, brand, and operate your organisation’s site.
- To compute aggregate, anonymised statistics — reported per assessment only after at least 5 completed responses, so small numbers can never identify anyone.
- To keep the service available and secure.
3. Assessment data and aggregation
Individual assessment results are never retained. Immediately after scoring, the taker’s result is delivered by email and the underlying record is destroyed; if the email cannot be sent, the pending delivery is itself deleted within 24 hours. What remains is a running aggregate per organisation and per assessment (response counts, average scores, level distributions) that cannot be traced back to any individual.
4. Where it lives
The platform runs on Cloudflare’s global edge network. Application data lives in Cloudflare D1 (Ireland/EU region by default), brand logos in Cloudflare R2 object storage. Transactional email is delivered by SMTP2GO. These are our only sub-processors; each is contractually bound to process data solely on our instructions.
5. Cookies
The public pages set no advertising or tracking cookies and run no analytics. Organisation administrators receive a strictly necessary, host-only session cookie when logging in at admin.airihub.io. Assessment pages are cookie-less. We use Cloudflare Turnstile on forms to distinguish humans from bots — a bot-detection service, not analytics.
6. Your rights
Assessment takers: there is nothing to exercise rights over — your record is deleted. Site administrators may request access to, correction of, or deletion of their administrator details by contacting us below. Deleting an organisation’s site removes its branding, administrator records, and aggregates.
7. Children
The service is not directed at children under 13, and we do not knowingly collect their data.
8. Changes
Material changes will be posted on this page with an updated date.
9. Contact
Questions or requests: use the contact form.