Privacy Policy

Effective Date: June 9, 2026 · Last updated: September 19, 2026 (separate cinema and sports Fan Challenge data handling added)

This Privacy Policy explains how AI Governance Hub handles information in connection with its website and Jira app experience.

1. Information We Collect

AI Governance Hub may collect information that users voluntarily provide, such as name, email address, company details, demo requests, support messages, and feedback.

When used as a Jira app, the app may process workspace-related information required to provide governance functionality, such as Jira issue metadata, project configuration, review status, risk details, approval information, evidence references, and audit activity.

Assisted assessment enquiries: We collect your name, work email, organization, project source, estimated work-item count and permission to respond. The request is stored privately and sent to our sales inbox to scope the service. It does not subscribe you to marketing or create a booking. Contact support@aigovernancehub.ai to request deletion of an enquiry; records needed for a subsequent engagement are handled under its written terms.

2. How We Use Information

3. Data Storage and Security

We aim to use reasonable administrative, technical, and organizational safeguards to protect information from unauthorized access, misuse, loss, or disclosure.

For Atlassian Marketplace usage, app data handling depends on the deployed Atlassian Forge environment and the configuration selected by the customer workspace.

4. Data Sharing

We do not sell personal information. Information may be shared only when required to operate the service, comply with legal obligations, protect rights and security, or support customer-requested functionality.

5. Third-Party Platforms

AI Governance Hub may operate with platforms such as Atlassian Jira and related enterprise tools. Use of those platforms is subject to their own privacy, security, and data processing terms.

6. Customer Responsibilities

Customers are responsible for ensuring that information entered into AI Governance Hub complies with their internal policies, applicable laws, and data governance requirements.

7. Data Retention

Website assessments: We process uploaded project exports solely to deliver your assessment and reports. We do not use your assessment upload to train third-party AI models.

Website assessments — retention: Upload sessions expire within 24 hours (typically one day) if checkout is not completed. Generated reports remain recoverable for 90 days via signed recovery tokens unless you request earlier deletion.

Guest IQ tests and reports: New guest IQ sessions do not require an account or sign-in to take the test, pay or view the report. Answers, payment-verification tickets and the report stay in the current page’s memory. Our servers process the answers and verification material transiently to score the test and check the payment; this guest flow does not save them to an application database, cookies, local storage, session storage or application logs. The app does not request or store a name, email address, password, OTP, card, UPI or banking details for this flow. Razorpay handles checkout and may request information needed to process the payment. Commercial order and payment records remain with Razorpay; the report and answers are not sent to Razorpay. Guest webhook processing verifies the provider order without creating application event, audit or account records. Hosting providers and payment providers may separately process request or security logs as part of operating their services. Download the report before refreshing or closing the page. A download saves a file to your device at your request. Refreshing or closing the page loses the in-memory report session, and a Razorpay receipt or payment record cannot reconstruct your answers or report.

Earlier account-linked IQ purchases: The following describes assessments created under the earlier Reasoning Skills Challenge account flow and the recovery of those existing purchases. These records are separate from new guest sessions. You can start and complete all three free levels without providing an email address or signing in. We ask you to affirm that you are 18 or older, but we do not request your exact date of birth. The challenge offers a user-selected 15-minute guided countdown, 30-minute extended countdown or elapsed-time display. Timer mode and displayed time are local presentation state only: they are not sent for scoring, do not affect any result or payment eligibility, and reaching zero does not submit or end the challenge. You may also choose a General, Sports or Movies visual theme and, within Sports, Cricket, Football or Mixed. This selection changes local presentation only: we do not infer it from your region or account, store it, send it over the network or use it for scoring, profiling, analytics or payment. Raw scored answers and raw optional thinking-preference choices are processed transiently and are not retained after server-side scoring or interpretation. Original question visuals are rendered locally from bounded first-party question data and do not load images from comparison sites or other third-party origins. Level 1 returns a free factual score out of 8 and category counts out of 2. Before sign-in, we use only a short-lived, strictly necessary, pseudonymous assessment cookie and the minimum derived aggregates needed to continue the journey in the same browser; the cookie is not available to page scripts and the assessment capability is not placed in a URL, local storage or session storage. Request IP and basic device/browser data may be processed for scoped rate limiting, fraud prevention and security, but do not become part of your reasoning results. We request Google or passwordless-email sign-in only after you complete all 20 free responses and explicitly choose the optional ₹99 Full Reasoning Results path, or when you ask to recover results you previously purchased. A configured email service does not by itself prove that a message was accepted or reached an inbox, so the interface reports the outcome of the actual send request and distinguishes errors from success. Requested email addresses, magic-link tokens and complete delivery links must not be written to application logs. Signing in atomically binds the completed assessment to your account for purchase and recovery and removes the anonymous assessment cookie. For refresh and Back continuity before payment, the same tab may temporarily retain only an opaque assessment identifier in session storage; it contains no answers, scores, email address, entitlement, order or payment state, works only for the authenticated account that claimed it, and is cleared after paid-result activation or verified expiry. Signing in does not start payment: you must review the one-time price and confirm payment separately after returning. Purchased Full Reasoning Results and the minimum account-bound entitlement and recovery state remain recoverable until the configured expiry—90 days after unlock by default—then expire. Payment and order records may be retained separately when needed for legal, fraud-prevention, accounting, security or operational obligations.

Jira Marketplace app: Retention follows your Atlassian workspace configuration and our product data handling practices.

Information is retained only as long as needed for product functionality, support, legal, security, audit, or operational purposes, unless a longer retention period is required or permitted by law.

Cinema & Sports Fan Challenge

The Fan Challenge is a separate knowledge quiz. It requires no account, name or email address from us. You choose the pack and language; we do not infer them from your identity or location. Its page does not load analytics and does not use cookies, local storage or session storage. Access capabilities are held in the open tab only. Closing or refreshing the tab can lose access; keep your payment reference for support.

To deliver a paid round, we privately retain the minimum purchase and payment references, pack, question-set identifier, timestamps, derived score and optional ranking choice. These application records expire seven days after the preview that started the purchase; physical deletion follows the scheduled cleanup and may occur later. A paid round must be submitted within 24 hours of verified activation and before that seven-day expiry. Raw answers are processed transiently to compute the score and are not saved in application storage. No card, UPI or banking details are stored by us. Razorpay may request payment details and retain commercial records under its own obligations.

Anonymous ranking is optional and unchecked by default. It compares completed, opted-in attempts on the same question set, not unique people or a population-wide percentile. If you choose to share, an opaque, expiring link lets recipients see your score and take the same set; it contains no payment reference, private access capability or answers. Anyone with that link can view the shared result until expiry. The link is removed from the address bar when opened. Downloading or printing creates a copy on your device that you control. Contact support for a privacy or deletion request using your payment reference; do not send card, UPI, bank or authentication details.

8. Our Responsibilities

9. Cookies and Analytics

We use Google Analytics 4 (Google LLC) to understand how the website is used — pages viewed, device and browser type, approximate location (country/region), and product events such as assessment steps. Advertising features are permanently disabled: we never use advertising cookies, and ad storage, ad user data, and ad personalization are always set to "denied".

The Reasoning Skills Challenge does not send question answers, thinking preferences, free-summary scores, category results, timer mode, elapsed or remaining time, visual theme, sports focus or Full Reasoning Results to analytics or use them to train an AI model.

In the EEA, United Kingdom, and Switzerland, analytics is off by default and activates only if you consent via the cookie banner. You can withdraw or change your choice at any time on the Cookie Policy page ("Manage cookie preferences"). The site may also send a best-effort first-party diagnostic beacon to our own infrastructure; it involves no third parties and no cross-site tracking.

10. Service Providers

We share data with a small number of processors, strictly to operate the service:

See the Trust Center for sub-processor details and data-residency notes.

11. Your Rights

Depending on where you live (including under the EU/UK GDPR and India's DPDP Act), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent at any time (without affecting processing carried out before withdrawal).

To exercise any of these rights, email support@aigovernancehub.ai from the address associated with your data. We respond to verified requests within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

12. Contact

For privacy questions or requests, contact us at .