Privacy Policy

Effective date: March 24, 2026  ·  Proceva Inc.  ·  privacy@proceva.ai

Proceva Inc. ("Proceva", "we", "us") operates Proceva Compass, an AI readiness assessment platform at proceva.ai. This policy explains what personal data we collect, why we process it, how long we keep it, who we share it with, and your rights as a user.

Data controller

Proceva Inc. is the data controller for personal data collected through proceva.ai. For questions or data requests, contact us at privacy@proceva.ai.

What we collect

We collect only information you explicitly provide:

• Assessment responses — the answers you enter during a Compass assessment. Used only to generate your report. If you do not save your report, these responses are not retained after your session ends.
• Name, email, and company name — collected only if you choose to save your report. Providing this is entirely optional.
• Technical logs — limited, non-identifying logs (IP address, browser, timestamp) recorded automatically for security, rate-limiting, and fraud prevention. These are not used for marketing or profiling.

We do not use tracking cookies, advertising pixels, or third-party marketing analytics scripts.

AI processing and no-training guarantee

Your assessment responses are processed via enterprise-grade API deployments on Microsoft Azure (Azure OpenAI Service), which maintain strict data isolation and SOC 2 / ISO 27001 compliance. Your data is used for inference only — to generate your report — and is not retained by our AI subprocessors beyond the immediate generation window.

We do not use your assessment responses or contact data to train, tune, or improve any AI or machine learning models — ours or anyone else's. If this practice ever changes, we will update this policy and provide opt-out options before the change takes effect.

How we use your information

We use personal data to:

• Generate and deliver your AI readiness report
• Send you a permanent retrieval link if you save your report
• Send optional follow-up check-ins at 30, 60, and 90 days if you provide your email
• Provide customer support and respond to your requests
• Detect and prevent security incidents and abuse

We do not use your information for advertising, profiling for marketing, or any purpose beyond those listed above.

What we never do

• We do not sell your data to any third party
• We do not share your data with advertisers or data brokers
• We do not use your data to train AI models
• We do not engage in automated decision-making that produces legal or similarly significant effects

Subprocessors and data storage

We use Microsoft Azure to store and process data on our behalf. Azure maintains industry-standard certifications including SOC 2 and ISO 27001. Data is primarily processed and stored in the United States. For users in the EEA or UK, international transfers rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms. A current list of subprocessors is available on request at privacy@proceva.ai.

Data retention

• Unsaved assessment sessions — data is not stored after your session ends
• Saved reports and contact data — retained for up to 24 months from last activity, unless you request earlier deletion or applicable law requires a different period

Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data; restrict or object to processing; request data portability; withdraw consent; or lodge a complaint with a supervisory authority.

To exercise any of these rights, email privacy@proceva.ai. We will respond within the timeframe required by applicable law. You may opt out of follow-up check-in emails at any time by replying to any check-in email or contacting us directly.

Security

We implement administrative, technical, and physical safeguards appropriate to the risk, including use of Microsoft Azure with industry-standard certifications. No system is perfectly secure. If we become aware of a data breach affecting your personal data, we will notify affected users and relevant regulators as required by applicable law.

Disclaimer of advice and limitation of liability

Proceva Compass provides information and AI readiness recommendations based solely on the responses you enter during the assessment. Output from Proceva Compass does not constitute professional, legal, financial, or technical advice.

Recommendations are generated based on the information you provide and are intended as a starting point for your own evaluation. You are solely responsible for any decisions made — including whether to build, buy, or walk away from an AI initiative — and for all outcomes that result from those decisions.

To the fullest extent permitted by applicable law, Proceva Inc. accepts no liability for any loss, cost, damage, or adverse outcome arising directly or indirectly from reliance on any output, recommendation, or report generated by Proceva Compass.

Children

Proceva Compass is intended for business use by adults. We do not knowingly collect personal data from anyone under 16. If you believe we have collected data from a minor, contact privacy@proceva.ai and we will take steps to delete it promptly.

Changes to this policy

We will post material changes on this page and update the effective date above. For significant changes, we will provide notice by email or in-product notification where practicable.

Questions or data requests: privacy@proceva.ai