Privacy Policy

1. Who operates this site

PeopleHacker operates this site and decides how information submitted through it is used. For privacy questions or requests, contact us at privacy@peoplehacker.com.

2. Information we collect

We collect only the information needed to provide and improve the assessment:

• Assessment summary: your overall score, maturity level, and lowest-scoring governance category.
• Contact information: the work email address you provide when requesting a copy of your results.
• Communication records: consent date, subscription status, unsubscribe date, and correspondence sent to a PeopleHacker email address, where applicable.
• Operational information: limited technical logs and usage information generated by the hosting platform for security, reliability, and service operation.
• Aggregate funnel counts: anonymous totals for assessment starts, completions, result-email requests, successful sends, and unsubscribes. These counts do not include IP addresses, device identifiers, or individual assessment answers.

Your individual answers are used in your browser to calculate the assessment and are not stored in our subscriber database. Do not enter employee names, confidential records, health information, payment-card data, or other sensitive information into the site.

3. How we use information

• Deliver the results you request.
• Operate the Governance Kit early-access list.
• Send PeopleHacker product updates when you consent.
• Process unsubscribes and prevent unwanted marketing messages.
• Secure, troubleshoot, maintain, and improve the site.
• Comply with applicable law and enforce our terms.

Where applicable law requires a legal basis, we process information to provide the service you request, based on your consent for marketing, and for legitimate interests such as security and service improvement.

4. Service providers and disclosures

We use OpenAI’s ChatGPT Sites infrastructure to host the site and its database, and Resend to send, receive, and process email. These providers process information on our behalf to perform those services. We may also disclose information when required by law, to protect rights or safety, or in connection with a business reorganization.

We do not sell personal information, rent email lists, or use submitted information for targeted advertising.

5. Retention

We retain subscriber records while you remain subscribed and for as long as reasonably necessary to operate the service, maintain consent and suppression records, resolve disputes, and meet legal obligations. Business correspondence is retained while needed to respond, maintain support or privacy-request records, resolve disputes, and meet legal obligations, and may be deleted from the owner dashboard when no longer needed. You may request deletion at any time. Unsubscribing stops future marketing but does not by itself erase the underlying consent record.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, withdraw consent, or complain to a privacy regulator. Email privacy@peoplehacker.com to make a request. We may need to verify that the request relates to your email address before acting.

You can stop product emails immediately by using the unsubscribe link included in each message. We will not discriminate against you for exercising an applicable privacy right.

7. Cookies, security, and international processing

PeopleHacker does not currently add advertising or cross-site tracking cookies. Temporary browser session storage prevents duplicate funnel counts during a single visit and is not used to identify you across visits. The hosting platform may use technologies necessary for security, authentication, and service operation. We use reasonable administrative and technical safeguards, but no online system is completely secure.

Our service providers may process information in multiple locations. Where required, transfers are handled under the contractual and legal safeguards applicable to those providers and our account.

8. Children and policy changes

This professional service is not directed to children under 16, and we do not knowingly collect their personal information. We may update this policy when our practices or legal obligations change. The effective date above identifies the current version.