Privacy Policy
Last updated: August 1, 2026
1. Information We Collect
AssessInsights collects information to provide enterprise talent evaluation services. This includes account administrator contact information (name, work email, organization name), candidate evaluator email addresses required for magic link delivery, and participant survey evaluation responses.
2. Multi-Rater Anonymity & Confidentiality
Candidate multi-rater evaluations (peer, direct report, and external feedback) are aggregated and anonymized. Scores are presented in normalized cohort groupings. Individual rater responses are never disclosed to candidates or external third parties unless explicitly required by law.
3. How We Use Information
Data collected is used exclusively for:
- Generating vector SVG analytical reports and competency summaries.
- Sending automated reminder cadences to evaluation participants.
- Enforcing multi-tenant security data isolation.
- Improving system performance and vector chart render speeds.
4. Your Rights Under GDPR & CCPA
European Union and California residents possess specific data privacy rights, including the right to request access to personal data, data portability, and erasure ("Right to be Forgotten"). To exercise data rights, contact our Privacy Desk at privacy@assessinsights.com.
5. Data Retention & Security
All data is encrypted in transit via TLS 1.3 and at rest via AES-256 encryption. Client data is retained for the active duration of your organization account or per configured tenant data retention schedules.
6. Cookies & Essential Local Storage
AssessInsights uses strictly necessary functional cookies and local session storage to maintain authenticated user sessions, prevent CSRF attacks, and preserve temporary assessment builder draft states. We do not use intrusive third-party cross-site tracking cookies.
7. International Data Transfers
When personal data originates from the European Economic Area (EEA), United Kingdom, or Switzerland, transfers to sub-processors outside those regions are safeguarded via EU Standard Contractual Clauses (SCCs) and UK International Data Transfer Addendums. Review our Data Processing Agreement for full transfer terms.