Privacy Policy

Who is responsible

Fierce Love, LLC is the intended operator of aimap. This draft explains how the proposed service will handle information from assessment participants, invited respondents, practitioners, and visitors. It covers service delivery, authorized sharing, product improvement, training, and aggregate reporting.

This is a policy draft for a service that has not launched from this repository. Collection, providers, locations, retention periods, request channels, and privacy controls must be verified before it takes effect. It is not evidence that those controls are already implemented.

Information used by the service

The service is designed to use the following information, only as needed for the disclosed purposes:

• Account information. Your name or display name, email address, authentication records, and account settings.
• Assessment information. Structured questionnaire answers, assessment progress, calculated results, and generated reports. Responses can reveal personal tendencies and relationships even without a name.
• Invitation information. Respondent email addresses when email invitations are used, invitation links, their connection to an assessment, and completion status. An assessment owner may provide your invitation details.
• Communications and optional content. Support messages and any feedback or other free text you choose to submit through available features. Avoid unnecessary confidential information about other people.
• Service and security records. Records needed for sessions, access control, error investigation, and abuse prevention. The actual logged fields, cookies or similar storage, and retention must be documented before launch.

If paid features are introduced, the payment information and providers involved must be disclosed before collection. This draft does not assert that a payment, analytics, advertising, or AI provider has already been selected.

Why information is used

We use information to create and secure accounts; save and resume assessments; send requested invitations; collect responses; calculate results; generate and store reports; enable authorized sharing; answer support requests; and protect the service.

Eligible information may also improve Fierce Love’s assessments and related tools, including scoring research, validity studies, explanations, and assessment AI. Privacy-reviewed aggregate findings may support public research, benchmarks, and marketing. The restrictions below apply to these additional uses.

Users retain the rights they hold in their contributions. Our permission to use those contributions is limited to these disclosed purposes and applicable law. Before processing begins, Fierce Love, LLC must identify and document an applicable lawful basis for each use. Where law requires consent or provides an objection, restriction, or opt-out right, this policy does not remove it.

Who sees assessment information

Assessment owners see their self responses, self report, invitation progress, and the other-feedback aggregate once at least three invited respondents have completed their responses. Each invited respondent sees their own submitted answers and may see the completed aggregate report. The report does not provide access to another respondent’s individual answers or identify which person gave a particular response.

The service must keep participant-facing report access separate from the records needed to operate invitations and support the service. Confidentiality in a report does not mean that every operational record is anonymous. Authorized staff and providers may access information only as needed for the purposes described here and under appropriate access restrictions.

Participants can authorize sharing completed reports outside the service, including with practitioners. Recipients may keep their own copies. Consider carefully who receives a report; we cannot control copies already shared with other people. Do not share reports in ways that reveal confidential respondent information.

Product improvement and AI training

Training initially uses only structured responses that pass a privacy review after identifiers and identifying context have been removed. Free-text feedback and complete personal reports are excluded from training. Names, emails, account and invitation identifiers, organization details, and other identifying context must not enter an approved training dataset.

Removing names does not by itself make data anonymous. Review must consider combinations of responses and other available information. Datasets and trained models must be tested for identification and disclosure risks. If data or a training approach cannot meet the privacy requirements, we must exclude it or stop using that approach.

Permitted improvement is limited to Fierce Love’s assessments and related tools. We do not sell training datasets or authorize providers to use responses to train unrelated models. Provider processing needed to generate a participant’s report is distinct from permission for a provider to train its own models.

Aggregate reporting

Privacy-reviewed aggregate findings may appear in public research, benchmarks, and marketing. Aggregate findings combine information across participants; they are not individual reports or raw response datasets.

Before release, findings must be reviewed for identification and disclosure risk. Small or distinctive groups must be suppressed. Identifiable quotes and examples must be excluded, and comparisons must be checked for ways they could reveal a person or organization.

The three-response threshold used for a participant’s other-feedback report is not a threshold for publication or training. Publication requires a separate review; no universal safe group size is promised.

Providers and other disclosures

Service providers may process information on our behalf to support hosting, account access, storage, invitation delivery, support, security, and any selected AI-assisted report features. Provider access must be limited by purpose, contract, and technical controls. Providers must not receive permission to train unrelated models on responses.

We may disclose information where legally required or reasonably necessary to address fraud, security threats, or protection of legal rights, subject to applicable law. Participant-authorized sharing and reviewed aggregate publication are described separately above.

Before launch, publish the actual provider categories and relevant providers, processing locations and international-transfer safeguards where applicable, and verified sale, advertising-sharing, and tracking practices. No provider list or cross-border safeguard is represented as complete by this draft.

Retention and deletion

Information should be retained only as long as needed for its disclosed purpose, account operation, security, or a necessary legal obligation. A published retention schedule must cover account records, invitations, assessment responses, reports, support records, security logs, research and training datasets, and backup copies.

When an account is deleted, identifiable contributions must be removed from future training. Personal records and identifiable training copies must be deleted under the defined schedule, subject to necessary legal retention. Information retained for a legal requirement must be restricted to that purpose.

Previously produced anonymous statistics may remain. A trained model may be retained only after assessing whether it contains or exposes personal information and addressing any applicable deletion duties. We do not promise automatic model retention or complete removal of a contribution’s influence from every trained model.

Deleting your account does not erase copies of reports that you or authorized recipients already hold. Service deletion also needs to account for invited respondents’ records and rights; an assessment owner cannot waive another person’s rights.

Exact deletion deadlines, backup expiry, research-data retention, and the handling of respondent contributions when an assessment owner closes an account must be settled and verified before this policy takes effect.

Your choices and rights

You can choose whether to start an assessment, submit a response, invite others, or authorize report sharing. There is no separate optional training enrollment switch under the proposed policy. This does not limit rights that applicable law gives you.

Depending on your location and circumstances, you may have rights to access, correct, export, delete, restrict, or object to uses of personal information, withdraw consent where processing relies on consent, or complain to a regulator. Any legally required opt-out, appeal, or authorized-agent process must be supported. Requests must be verified in a way that also protects other participants and respondents.

A working privacy contact and request process must be published before information is collected under this policy. Response deadlines and regional notices must reflect the laws that apply to the actual service.

Security, privacy limits, and updates

The service must use access restrictions, confidentiality controls, limited provider access, and reviewed data-use processes appropriate to the information involved. These safeguards must be implemented and checked before the policy becomes effective. No service, de-identification process, or trained model can be represented here as guaranteeing zero privacy risk.

The initial training exclusions for free text and complete reports remain in force unless a later policy and legal review establish a permitted change with the required notice and any necessary consent. Material changes to data practices must be explained before they apply. A quiet policy edit does not authorize previously undisclosed reuse of old information.

Fierce Love, LLC must confirm the supported age range, geographic availability, sensitive-data handling, and any regional or children’s privacy requirements before launch. No claim of global legal compliance is made by this draft.