Security & Privacy

Account information — name, work email, company, role title, and phone number you provide at registration or on your account page.

Diagnostic responses — the answers, revenue and headcount figures, and notes you enter while completing the assessment, plus the scores and reports generated from them.

Transaction information — purchase records, amounts, status, and order identifiers. Card numbers are entered directly with our payment processor and never reach our servers.

Operational logs — email delivery records and basic technical logs used to keep the service reliable and secure.

To create and secure your account, deliver the diagnostic and executive report, schedule and support the Executive Strategy Review, process payments, send service and transactional email, respond to support requests, and improve our methodology using de-identified, aggregated data.

We do not sell your information, and we do not share your identifiable diagnostic responses with other clients.

We rely on vetted providers to operate the platform: cloud hosting and database, our payment processor, our transactional email provider, and an AI model provider used to draft narrative sections of your report. Providers may process data only to perform services for us.

• Encrypted connections (HTTPS/TLS) for all traffic to the application.
• Encryption at rest for the managed database that stores your data.
• Row-level access rules so each account can only read its own profile, diagnostics, reports, orders, and support requests.
• Administrative views and proposal tooling restricted to authorized staff roles.
• Payment card data handled entirely by our PCI-compliant payment processor.
• Scoring logic and proprietary content executed server-side, not in your browser.

No online service can promise absolute security. If you discover a potential vulnerability, please report it via the support form rather than testing against live client data.

Diagnostic responses and reports are treated as confidential business information. Access by our team is limited to delivering your engagement, supporting your account, and complying with law.

We retain account and diagnostic records for as long as your account is active and afterwards as needed for legitimate business, accounting, and legal purposes. You can request closure of your account from the account page; we review and process closure requests manually and remove or de-identify data that we are not required to retain.

• Update your profile details at any time from the account page.
• Unsubscribe from non-essential email using the link in any message.
• Request a copy of your data, a correction, or account closure via the support form.

We use only the cookies and local storage required to keep you signed in and to operate checkout. We do not run third-party advertising trackers in the application.

The service is intended for business use and is not directed to anyone under 18.

We will update this page when practices change. Questions, data requests, or security reports: use the in-app support form or write to info@businessaiconsulting.com.