Skip to main content

Privacy Policy

Your privacy matters. Here's how we protect your data.

Last updated: December 25, 2025

Important: Assessment Data & Performance Management

Your assessment results will NEVER be used for:

Performance reviews or evaluations
Promotion or demotion decisions
Job assignments or role changes
Compensation adjustments
Disciplinary actions
Any employment-related decisions

The AIRS assessment is designed exclusively for personal development and organizational learning. The goal is to help individuals understand their relationship with AI technology and to help organizations identify areas where they can better support their workforce.

Organizational reports present data at a group level only. Individual responses are never disclosed, and reports identify organizational patterns rather than evaluate individuals.

Overview

AIRS Enterprise ("we", "our", or "the application") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI Readiness Index Scale (AIRS-16) assessment platform.

The AIRS platform helps individuals and organizations understand their relationship with AI technology through a scientifically validated 16-question assessment. We believe that understanding your data rights is essential to building trust, and we are committed to transparency in all our data practices.

Transparency

Clear about what we collect

Security

Enterprise-grade protection

Respect

Your data, your rights

Information We Collect

Authentication Data

When you sign in using Microsoft Entra ID, we receive:

  • Display name and email address
  • Microsoft Entra ID user identifier
  • Organization/tenant information
  • Profile photo (if available)
  • Job title and department (if configured)

This data is provided by your identity provider and is used solely for authentication and personalization.

Assessment Data

When you complete the AIRS-16 assessment:

  • Your responses to 16 Likert-scale questions
  • Scores across four constructs (PE, EE, SI, FC)
  • Overall AI Readiness Index score (1-7)
  • Typology classification and persona
  • Timestamp and completion duration
  • Optional open-ended comments

Assessment data is linked to your account so you can track progress over time.

How We Use Your Information

We use your information to provide, improve, and personalize the AIRS assessment experience:

Authenticate and identify you

Secure sign-in via Microsoft Entra ID

Calculate your AI readiness results

Generate personalized scores and insights

Track assessment history over time

Monitor your growth and changes

Provide organizational benchmarking

Compare against team and industry averages

Deliver personalized recommendations

Suggest resources based on your profile

Generate anonymized research insights

Contribute to AI adoption research

Data Storage and Security

Your data is stored securely in Azure PostgreSQL databases with encryption at rest and in transit. We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction.

TLS 1.3 Encryption

All data transmission uses the latest encryption protocols

Azure Managed Identity

Zero-credential service authentication

Role-Based Access Control

Principle of least privilege for all access

Continuous Monitoring

24/7 security monitoring and alerting

Data Encryption at Rest

AES-256 encryption for stored data

Regular Security Audits

Periodic vulnerability assessments

Data Residency

Your data is stored in Azure data centers. For enterprise customers, we can discuss specific data residency requirements to meet your compliance needs.

Your Rights

You have important rights regarding your personal data. We are committed to honoring these rights and making it easy for you to exercise them:

Right to Access

View all personal data we hold about you, including assessment history

Right to Rectification

Request correction of any inaccurate or incomplete information

Right to Erasure

Request deletion of your data (subject to legal retention requirements)

Right to Portability

Export your assessment data in a machine-readable format (PDF, JSON)

Right to Object

Opt out of organizational benchmarking or research participation

Right to Withdraw Consent

Withdraw consent at any time for optional data processing

How to exercise your rights: Contact us through our GitHub repository or email. We will respond to your request within 30 days. Some rights may be limited where we have legitimate legal obligations to retain certain information.

Data Sharing

We do not sell, rent, or trade your personal information. Ever.

Your data may only be shared in the following limited circumstances:

Organization Administrators

If you are part of an organization using AIRS Enterprise, your assessment results may be visible to organization administrators. However, individual responses are NEVER shared — only aggregate statistics and your overall typology classification.

Anonymized Academic Research

Aggregated, de-identified data may be used for academic research on AI adoption patterns. This data cannot be traced back to any individual and contributes to the broader understanding of human-AI interaction.

Service Providers

We use trusted third-party services (Microsoft Azure, Vercel) to host and operate our platform. These providers are bound by strict data processing agreements and may only process your data as instructed by us.

Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of AIRS, our users, or the public.

Informed Consent

Before starting the AIRS assessment, you are presented with an informed consent page that clearly explains:

  • The importance of providing honest, authentic responses for meaningful results
  • Our commitment that assessment data will not be used for performance management
  • How your data will be collected, stored, and used
  • Your rights regarding your assessment data
  • The voluntary nature of the assessment

You must acknowledge and agree to these terms before proceeding with the assessment. This consent can be reviewed at any time through this Privacy Policy.

Data Retention

We retain your data only as long as necessary to provide our services and fulfill the purposes outlined in this policy:

Assessment Data

Retained for as long as your account is active, allowing you to track progress over time.

Account Information

Retained until you request account deletion or leave your organization.

Anonymized Research Data

De-identified data may be retained indefinitely for research purposes.

Deleted Data

Upon deletion request, data is removed within 30 days from active systems.

Research Foundation

The AIRS-16 instrument is based on doctoral research conducted by Dr. Fabio Correa at Touro University Worldwide. The assessment methodology builds upon the established UTAUT (Unified Theory of Acceptance and Use of Technology) framework and has been validated through empirical research involving hundreds of participants.

The four constructs measured — Performance Expectancy, Effort Expectancy, Social Influence, and Facilitating Conditions — have been shown to be reliable predictors of technology adoption behavior. The AIRS typology system provides actionable insights for both individuals and organizations.

For more information about the research foundation, methodology, and validation, visit our research repository.

Contact Us

We are committed to addressing your privacy concerns promptly. For privacy-related inquiries or to exercise your data rights, you can reach us through:

GitHub Issues

For technical questions or feature requests

Open an Issue →

Data Rights Requests

For access, deletion, or other data rights requests

Submit Request →

We aim to respond to all privacy inquiries within 30 days. For urgent matters, please indicate the urgency in your message.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:

  • We will update the "Last updated" date at the top of this page
  • For material changes, we will provide prominent notice within the application
  • We may notify you via email for significant changes affecting your rights
  • Continued use of the platform after changes constitutes acceptance

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.