Privacy Policy

Introduction

TENSION before AI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Data Controller

The data controller responsible for your personal data is TENSION before AI.

Email: contact@tensionbeforeai.com

Data We Collect

1. Contact Form

When you submit our contact form, we collect:

• Name
• Email address
• Company name (optional)
• Message content

2. AI Readiness Check

When you use our AI Readiness Check assessment, we collect:

• A randomly generated unique identifier (UUID)
• Your assessment answers and progress
• Assessment completion data

3. Cookies

We use the following cookies:

• cookie_consent: Stores your cookie consent preference (essential cookie)
• NEXT_LOCALE: Stores your language preference (essential cookie)
• aicheck_filename: Stores encrypted reference to your assessment progress (requires consent, expires after 365 days)

Legal Basis for Processing

• Consent: For AI Readiness Check data and non-essential cookies, we process your data based on your explicit consent (GDPR Art. 6(1)(a)).
• Legitimate Interest: For contact form submissions, we process your data based on our legitimate interest in responding to inquiries (GDPR Art. 6(1)(f)).

Data Retention

• Contact form data: We retain your contact form submissions for as long as necessary to respond to your inquiry and for our records.
• AI Readiness Check data: Your assessment data is stored for up to 365 days or until you manually delete it by retaking the assessment.
• Cookies: As specified in each cookie's expiration setting.

Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to our processing of your data.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent.

To exercise any of these rights, please contact us using the contact form or email provided above.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. All data is transmitted over secure HTTPS connections.

Third-Party Services

We use the following third-party services that may process your data:

• Vercel: Hosting and Blob storage for assessment data (Vercel Inc., compliant with GDPR through EU-US Data Privacy Framework)
• Email Service: Email delivery for contact form submissions (configured by administrator)

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers are protected by appropriate safeguards, including Standard Contractual Clauses and adherence to the EU-US Data Privacy Framework.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: