What we collect, and
what we don't.

Browsing this site

We use Vercel Web Analytics, which is cookieless. It does not set a cookie, does not store an identifier on your device, and does not follow you to other sites. That is why you were not shown a consent banner: there is nothing to consent to. What we see is aggregate: which pages were viewed, roughly where in the world from, and which referrer sent them. We cannot tie any of it back to a person.

The site is hosted on Vercel, which keeps short-lived server and CDN logs, including IP addresses, for operational and security purposes. That is Vercel's processing, not ours, and we do not extract or retain those logs.

The free audit

The five-minute audit is a conversation. What you type about your workflow, along with the name, email, and company you give at the end, is what we collect. We collect nothing else, and we do not ask for anything we would not need in order to send you the result.

Your answers are sent to Anthropic's Claude API to produce the scoring and the written report. Anthropic processes that text on our behalf as a service provider and does not use it to train its models. The completed audit and your contact details are then stored in our database, hosted by Supabase in the EU (eu-west-1), and a notification is posted into our internal Slack so somebody actually reads it.

We use your email to send you your report and, if the audit surfaced something worth following up on, to write to you about it once or twice. We do not sell it, rent it, share it with anyone outside the processors named here, or add you to a newsletter list you did not ask for.

The agent-ready scan

The agent-ready scan fetches the public website address you submit. The score is shown on the page with no email required. If you ask us to send the report, we keep the address, the score, and your email in the same CRM table as the audit. If you request the Agent-ready fix (€99), we also keep your name and the yes on that request. We do not create a second table, and we do not put the score behind a paywall.

Processors we use

Vercel (hosting and cookieless analytics), Supabase (database, EU region), Anthropic (the model that produces your audit), Slack (internal notification), Resend (sending you the result), Notion (our internal CRM), Stripe (payment, only if you buy The Assessment), and Calendly (only if you book a call). Each of them sees only the slice of data its job requires.

How long we keep it

Audit submissions are kept for as long as they are commercially useful to us, and reviewed periodically. If you ask us to delete yours, we delete the record itself rather than flagging it, and we confirm when it is done.

Your rights

Because we are established in Ireland, the GDPR applies to everything described here. You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us using it. Email hello@naitive.work and we will act on it within 30 days. If you are not satisfied with how we handled a request, you can complain to the Irish Data Protection Commission at dataprotection.ie.

Changes

If this policy changes materially, we update the date at the top of this page. We do not retroactively apply a weaker policy to data we already hold.