Privacy Policy

Effective date: 1 March 2026 · IntelliCoding / AI Compliance Assessment Tool

Plain-English Summary: We collect only what we need to run the Service. We do not sell your data. Your assessment data is private to your account. You can request deletion at any time.

1. Who We Are

IntelliCoding operates the AI Compliance Assessment Tool ("the Service") at aiaudit.intellicoding.com. For privacy matters, contact us at privacy@intellicoding.com.

2. Information We Collect

2a. Account Information

Email address — used for account identification and communications.
Name — displayed within your account; used on reports you generate.
Password (hashed) — stored using industry-standard bcrypt hashing; we never store plain-text passwords.
Google account ID — if you sign in via Google, we store your Google subject identifier. We do not receive your Google password.

2b. Assessment Data

Organisation name, AI system name and description, reviewer details, and all question responses you enter.
This data is used solely to generate your compliance reports. It is private to your account.

2c. Usage Data

Standard server logs including IP addresses, browser type, pages visited, and timestamps — retained for up to 90 days for security and debugging purposes.

3. How We Use Your Information

To create and maintain your account;
To generate, display, and export your compliance assessment reports;
To send transactional emails (account confirmation, password reset);
To maintain the security and integrity of the Service;
To comply with legal obligations.

We do not use your assessment data to train machine learning models, sell it to third parties, or use it for advertising.

4. Third-Party Services

Service	Purpose	Data Shared
Google OAuth 2.0	Optional sign-in	Email, name, Google ID
Amazon Web Services (EC2)	Hosting infrastructure	All data at rest on the server
MySQL (self-hosted)	Database	All structured data

We do not use analytics platforms, advertising networks, or social tracking pixels.

5. Data Retention

Account data: Retained until you delete your account or request deletion.
Assessment data: Retained until you delete the assessment or your account.
Server logs: Automatically deleted after 90 days.

6. Data Security

We implement reasonable technical and organisational measures to protect your data, including:

TLS encryption in transit (HTTPS);
Bcrypt password hashing;
Server access restricted by SSH key authentication;
Regular software updates and dependency patching.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you;
Correction — request correction of inaccurate data;
Deletion — request deletion of your account and all associated data;
Portability — request your assessment data in a machine-readable format;
Objection / Restriction — object to or request restriction of certain processing.

To exercise any of these rights, email privacy@intellicoding.com. We will respond within 30 days.

8. Cookies

We use a single session cookie (session) to keep you logged in. This cookie is essential for the Service to function and cannot be disabled while using the Service. We do not use tracking, analytics, or advertising cookies.

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email or in-app notice. Continued use of the Service after changes constitutes acceptance.

11. Contact

Privacy questions or requests: privacy@intellicoding.com