Privacy notice for the Intentional AI Assessment

If you take the assessment for your team, we collect your name, your work email, your role, your organization's name, location and size, its sector if you give it, your answers, and anything you write in the closing question.

If a colleague invited you, we collect your role, your answers, and anything you write in the closing question. We do not ask for your name. If you ask to be emailed when the team view updates, we store that email address separately from your answers.

If you invite colleagues from your result page, we keep a record of each invitation: the first name and email address you entered, when it was sent, and whether it was delivered. That record shows who was invited. It does not show who answered or what anyone said.

We use this information to produce your result and email it to you, and to show the combined team view to the people it is shared with.

We tell The GRIN Labs when an assessment is completed and when a colleague responds, so we can support the person who invited them. The GRIN Labs may contact the person who took the assessment to discuss their result.

We also use the information to improve the assessment, and to produce research from combined results that cannot identify any person or organization.

We do not sell your personal information, and we do not use it for advertising.

Where the law asks us to have a reason for using your information, ours are these.

We use it to give you the result and team view you asked for.

We rely on our legitimate interest in running, supporting and improving the assessment, and in producing de-identified research. We only do this where it does not override your interests and rights.

We ask for your consent before sharing your details with a partner, and before sending you team view updates. You can withdraw consent at any time, and that does not affect anything done before you withdrew it.

The person who invited you never sees your individual answers. Nothing from colleagues is shown until at least three have responded. After that, only a combined view is shown: the average and the range in each area. The combined view changes only at set points, so a single new answer cannot be worked out from it.

If the person who invited you chose to share the team view, people with the link to the questions can see the combined view. If they kept it private, only they can see it.

The GRIN Labs can see individual responses. We use them only for the purposes in this notice, and we do not share an individual colleague's answers with the person who invited them or with their organization.

If you arrived through a partner's link, you will see a box asking whether to share your result with them. If you tick it, we share your name, email, organization and result with that partner so they can arrange a conversation about it. If you leave it unticked, the partner learns only that someone completed the assessment through their link, with no way to identify you. Once a partner has your details, their own privacy policy also applies.

We use service providers to run the assessment: Lovable and Supabase for hosting and storage, and Resend to deliver email. They handle information on our behalf and only as we instruct.

The GRIN Labs is based in the United States, and your information may be stored and processed there and in other countries where our providers operate. Those countries may have different privacy laws from yours. Where the law requires it, we put safeguards in place for these transfers, such as contractual commitments with our providers.

While you answer, your answers are kept in your browser for that tab, so a page reload does not lose them. When you finish, your browser remembers the link to your result.

Your result link is private. Anyone who has it can open your result, so share it only with people you want to see it.

We use reasonable technical and organizational measures to protect your information, including limiting who at The GRIN Labs can see it. No online service is completely secure, so we cannot promise that information will never be accessed without permission.

We keep information for as long as we need it for the purposes above, or as required by law. We may de-identify information so it no longer identifies you. You can ask us to delete your information at any time.

Depending on where you live, you may have the right to:

• ask for a copy of the information we hold about you
• correct information that is wrong
• ask us to delete it
• object to or limit how we use it
• receive it in a format you can take elsewhere
• withdraw consent you have given

You will not be treated differently for using any of these rights. To use them, email us at info@thegrinlabs.com. We may need to confirm who you are first, and we will respond within the time the law allows.

Every team view update email also includes a link to stop those emails.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the privacy regulator where you live. Examples include the Office of the Australian Information Commissioner, the UK Information Commissioner's Office, your local data protection authority in the European Union, and your state attorney general in the United States.

We may disclose information where the law requires it, to protect our rights, or to prevent fraud or unlawful activity, and as part of a merger, acquisition or other business transfer.

The assessment is not designed for anyone under 16, and we do not knowingly collect information from anyone under 16. If you believe we have, contact us and we will delete it.

We may update this notice. Changes will appear on this page with a new date.

Questions about this notice or your information: info@thegrinlabs.com.