Privacy Policy

1. What we collect

When you take the Wired survey we collect:

• Your name — so your report and any team analytics show who's who.
• Your email address — so we can email your results and (for admins) so you can sign in.
• Your survey responses — the trait words you pick.
• Optional context — your role, department, and the organization or family you're taking the survey for.
• Technical metadata — your IP address (for rate limiting and audit logging) and browser user-agent.

2. What we do with it

• Generate your trait scores and AI-written coaching report.
• Email you a link to your results.
• Show your results to the admin of the organization or family you took the survey under.
• Send a copy of new submissions to GiveSendGo's super admin for oversight.
• Keep a security audit log of admin sign-ins, signups, and account changes.

3. Where it's stored

All data lives in Cloudflare's D1 database, in a single SQLite file held by Cloudflare on our behalf. Email is sent through Brevo. Coaching reports are generated by Anthropic's Claude API — the survey responses are sent to Anthropic at narrative-generation time.

4. Who else sees your data

• Anthropic — receives your survey responses to generate your coaching report. Subject to Anthropic's privacy practices.
• Brevo — receives your email address to send you the results email.
• Cloudflare — hosts the database and serves the pages.
• The admin of the organization / family you took the survey under, and any view-only co-viewers they've added.
• GiveSendGo's super admin.

We do not sell your data. We do not share it with anyone outside the parties listed above.

5. How long we keep it

Until you ask us to delete it, or until we shut the project down. Audit log entries are retained indefinitely for security forensics. We may add a retention policy in the future; if we do, we'll update this page.

6. Your rights — access, correction, deletion

You can:

• Get your data — your personal results page (the link in your email) shows everything we have on you. There's a "Download my data" button there.
• Delete your data — there's a "Delete my data" button on your personal results page. Clicking it permanently removes your submission. You can also email us at the address below.
• Correct your data — email us; we'll fix it or delete the row so you can re-take.

7. Family mode and minors

The family-mode version of the survey is intended for adults (18+) or for participants 13 or older with explicit parental or guardian permission. Children under 13 should not take this survey. When you start the survey in family mode, you'll be asked to confirm your age and consent status before submitting. If a parent realizes their child completed it, contact us and we'll delete the record.

8. Cookies and local storage

We don't use tracking cookies. Admins are signed in via a token stored in the browser's sessionStorage — it lives only as long as the browser tab is open and is not sent to any third party.

9. Security

Passwords are hashed with PBKDF2-HMAC-SHA-256 (100,000 iterations, per-account salt). Admin endpoints are rate-limited and gated by signed JWTs. We can't see your plaintext password and neither can a database breach.

10. Changes to this policy

If we make material changes we'll update the effective date at the top and post the change on the landing page.

11. Contact

Email Heather at Heather@givesendgo.com for any privacy request — deletion, correction, questions.