Privacy Policy

Envisago ("Envisago", "we", "us", or "our") understands that your privacy matters. We are committed to respecting your privacy and protecting your personal data, which is any information that can identify you as an individual. This Privacy Policy explains how we collect, use, share, and protect personal data through our websites and through any application, assessment, tool, or service that links to this policy, whether free or paid (together, "the Services"). We act as the data controller for that personal data.

Please read this alongside our Terms of Use.

Who we are

Envisago is the data controller for personal data processed through the Services. Envisago is registered in the Republic of Ireland.
Registered office: Springfalls, New Mills, Brownsmills, Kinsale, Co.Cork.

For any privacy question or request, contact us at hello@envisago.ai. Because Envisago is established in Ireland, the Irish Data Protection Commission is our supervisory authority. We process personal data in line with the EU General Data Protection Regulation (GDPR) and, where it applies, the United Kingdom GDPR.

Scope

This policy applies to the Envisago website and to all current and future Envisago digital products and services that link to it. This includes our free assessments and reports, such as the AI Operating Impact Briefing, and any paid products and services we may offer, such as more detailed analyses, tools, or subscriptions. Where a specific product has terms or notices of its own, those apply in addition to this policy.

The personal data we collect

We collect personal data in the following ways.

Information you give us through the website. When you contact us, apply for a role, register for our newsletters or alerts, sign up for webinars or events, or complete a form, we collect the details you provide. These may include your name, email address, telephone number, postal address, and any background information you choose to share.

Information you give us through our products and assessments. When you use a product such as the AI Operating Impact Briefing, we collect the answers and information you provide about yourself and your organisation in order to generate your result, together with the email address you give us so that we can send it to you. For paid products, we also collect the information needed to process your payment and to provide the product you have purchased.

Information we collect automatically. When you interact with the Services we may collect technical data such as your IP address, device identifier, browser type, and information about how you use the Services, collected through cookies and similar technologies. See "Cookies" below.

We do not seek to collect special categories of data through the Services, and we ask that you do not include sensitive personal information in free-text fields.

How we use your data, and our lawful bases

We use personal data for the following purposes, relying on the lawful basis shown.

To provide the product or service you have requested, including generating and delivering your assessment result or report. Our basis is performance of a contract with you, or your consent, depending on the product.

To process your answers in order to produce your result. Our basis is the steps we take at your request to provide the Briefing, or other product, that you have asked for.

To respond to your enquiries, manage your registration, and provide customer support. Our basis is performance of a contract or our legitimate interest in responding to you.

To send you insights, updates, and marketing about Envisago and our services. Our basis is your consent or our legitimate interest in marketing to business contacts, and you can opt out at any time using the unsubscribe link in any message.

To improve our Services and to produce anonymised, aggregated benchmarks. Where we use data for benchmarking, we anonymise it so that you cannot be identified from it. Our basis for improvement activity is our legitimate interest in developing our Services.

To recruit and evaluate job applicants. Our basis is our legitimate interest in recruitment and, where relevant, taking steps before entering a contract.

To protect the Services, prevent fraud, enforce our terms, and comply with our legal obligations. Our basis is our legitimate interest in running the Services securely and compliance with law.

How AI is used

Some of our products use artificial intelligence to generate your result. When you complete the AI Operating Impact Briefing, or any future product that works in the same way, the answers you provide are sent to the Claude application programming interface operated by Anthropic, which processes them on our behalf to produce your result. This data is used only to generate your result. It is not used to train AI models. The same applies to any future Envisago product that uses AI in this way.

Who we share your data with

We share personal data only with service providers who process it on our behalf, under contract and on our instructions, and with others where the law requires it.

Our service providers include:

• Anthropic, which provides the AI processing that generates your result.
• Vercel, which hosts our applications.
• Cloudflare, which provides domain and content delivery services.
• Resend, which delivers emails such as your report.
• HubSpot, which we use to manage contacts and enquiries.
• A secure third-party payment provider, which processes payments for paid products. We do not store your full payment card details.

We do not sell your personal data, and we do not share it for others to use for their own marketing.

International transfers

Some of our service providers are located outside the European Economic Area, including in the United States. Where we transfer personal data outside the EEA or the United Kingdom, we rely on an appropriate safeguard recognised under data protection law, such as the European Commission's standard contractual clauses or an adequacy decision, so that your data continues to be protected.

Payments

Paid products are processed through a secure third-party payment provider. We receive confirmation of your purchase and the information needed to fulfil it, but we do not collect or store your full payment card details, which are handled by the payment provider under its own terms and privacy policy.

Cookies and similar technologies

We use cookies and similar technologies to operate the Services, remember your preferences, and understand how the Services are used. You can control cookies through your browser settings. Where required, we will ask for your consent to non-essential cookies. Our Services do not respond to "do not track" signals.

How long we keep your data

We keep personal data that identifies you only for as long as necessary for the purposes set out in this policy.
For enquiries, prospects, and marketing contacts, we keep your data for the duration of our relationship with you. Marketing contact data is kept until you unsubscribe. We may keep certain data for longer where we need to in order to meet a legal obligation or to establish, exercise, or defend a legal claim.

We keep anonymised, aggregated data, from which you cannot be identified, for benchmarking and analysis. Because this data is no longer personal data, we may keep it indefinitely.

Your rights

Subject to the conditions in data protection law, you have the right to:

• access the personal data we hold about you,
• have inaccurate data corrected,
• have your data erased,
• restrict or object to our processing of your data,
• receive your data in a portable format,
• withdraw your consent at any time, where we rely on consent, without affecting processing already carried out, and
• unsubscribe from our marketing at any time.

To exercise any of these rights, contact us at hello@envisago.ai. We will respond as required by law, and we may need to verify your identity first. You also have the right to lodge a complaint with the Irish Data Protection Commission, or with the supervisory authority in your own country.

Security

We use generally accepted technical and operational measures to protect personal data against loss, misuse, alteration, or destruction. Only authorised personnel and service providers acting under contract have access to personal data. No method of transmission or storage is completely secure, so while we work to protect your data we cannot guarantee absolute security.

Links to other sites

The Services may link to third-party websites. We are not responsible for the content or privacy practices of those sites, and their use is governed by their own terms and privacy policies.

Children

The Services are intended for business users and are not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. Where we make material changes that increase how we use personal data we have already collected, we will let you know by email or by posting a prominent notice on the Services.

Contact us

If you have any questions about this policy or how we handle your personal data, contact us at hello@envisago.ai.