Privacy Policy

Last updated: 2026-10-02

What we collect, in plain English

We want you to know exactly what data we hold and why. Here it is:

  • Your account details — name, work email, and organisation. We need this so you can log in and access your assessments securely via Microsoft Entra ID.
  • Platform usage (PostHog) — pages you visit and features you use, to help us understand what's working and what we can improve. This is optional and only runs if you opt in below.
  • Error reports (Sentry) — if something breaks, we receive an automated diagnostic report so we can fix it quickly. Personal identifiers are stripped before any report is sent.
  • Your preferences — things like your chosen theme or sidebar state, stored locally in your browser so the platform stays configured the way you like it.

We do not sell your data. Full stop.

Cookie Policy

We use two categories of cookies. Essential ones keep the platform running; optional ones help us improve it.

Essential

Authentication, security (CSRF), and core UI preferences. Always active — the platform cannot function without them.

Analytics (PostHog)

Optional usage tracking. Disabled by default — only fires after you explicitly accept. You can change your mind at any time.

Data Sharing

Your data is shared only with the infrastructure providers we need to operate the platform (AWS, Supabase, Netlify, PostHog if opted in, Sentry) and legal authorities where required by law. No discretionary sharing.

Your Rights

Under UK GDPR you have the right to access, correct, or delete your data, and to object to or restrict processing. To exercise any of these rights, contact us through your official support channel.

Contact

Privacy questions? Reach Aedile Consulting Ltd through the support channel in your engagement agreement.