Privacy Policy
This policy explains what Standpoint (by AI Service Pro) collects, how we use it, who we share it with, and your rights. We built Standpoint to keep your data in your hands: on the free tier, your assessment never leaves your browser.
Privacy by default. On the free tier, your assessment answers and evidence notes are stored locally in your browser — we don't receive or store them. We only get personal data you actively give us (like your email) or that a paid account requires. And do not enter PHI or live regulated data into Standpoint (see our Acceptable Use Policy).
1. What we collect
| Category | What | When |
|---|---|---|
| Assessment data (free) | Your control statuses, evidence notes, owners, scores. | Stays in your browser (localStorage). Not sent to us unless you use a paid cloud feature. |
| Email address | The email you enter to download a report (verified with a one-time code), to receive a free-scan result, or to subscribe to updates. | When you request a download, submit the scan, or subscribe. |
| Contact details | Name, email, and message you send us. | When you use the consulting/contact form. |
| Account data (paid) | Account email and authentication credentials; your cloud-stored assessment and any evidence files you upload. | If you create a paid account and opt into cloud storage. |
| Technical logs | Standard server/security logs (e.g., IP address, timestamp) needed to operate and protect the Service. | Automatically, minimally. |
We do not currently run third-party advertising or cross-site tracking. If we add product analytics in future, we will update this policy first.
2. How we use it
- Provide the Service and (for paid accounts) store and sync your assessment and evidence;
- Send the one-time code that lets you download a report, and deliver reports/results you request;
- Respond to your inquiries and provide support;
- Send product updates only if you opt in — you can unsubscribe at any time;
- Maintain security, prevent abuse, and scan uploaded files for malware;
- Meet legal and accounting obligations.
3. Legal bases (where GDPR applies)
We rely on: performance of a contract (to operate accounts and deliver features you request), consent (for marketing emails and any optional processing — withdrawable anytime), legitimate interests (to secure and improve the Service), and legal obligation where applicable.
4. Browser storage & cookies
The app uses your browser's local storage to save your assessment and a few small preferences (for example, that you verified your email for downloads, or your light/dark theme). This data lives on your device, not our servers. We don't use advertising cookies. Clearing your browser data removes local assessment data unless you exported a backup. You can review or change your analytics consent at any time via the Your Privacy Choices link in the footer, and we honor Global Privacy Control (GPC) browser signals as an opt-out.
5. Subprocessors & sharing
We don't sell your personal data. We share limited data with vetted providers only to operate the Service:
| Provider | Purpose |
|---|---|
| Hosting provider (Hostinger) | Serving the website. |
| Supabase | Accounts, database, and evidence-file storage — for paid cloud features only. |
| Brevo | Sending transactional email (download codes, account emails) and any updates you subscribe to. |
| Self-hosted malware scanner | Scanning uploaded evidence files for malware within our boundary. |
We may also disclose data if required by law or to protect rights and safety.
6. International transfers
Some providers process data in the United States or other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers of personal data outside your region.
7. Retention
- Local assessment data: kept in your browser until you clear it.
- One-time download codes: short-lived (expire within minutes).
- Email / marketing: kept until you unsubscribe or ask us to delete it.
- Account & cloud data (paid): kept while your account is active; deleted on request or a reasonable period after closure.
- Trial cloud data: if a free trial ends and you don’t continue, anything you stored in the cloud is deleted 15 days after the trial expires — we warn you in advance, and you can export or delete it yourself. Your browser-local data is never affected.
8. Your rights
Subject to your local law (e.g., GDPR, UK GDPR, CCPA/CPRA), you may have the right to access, correct, delete, export, or restrict/object to processing of your personal data, and to withdraw consent. On the free tier you already control your data directly (it's in your browser, and you can export or clear it). To exercise any right, email info@aiservicepro.net. You may also complain to your local data-protection authority.
9. Security
We use measures such as encrypted connections, access controls and tenant isolation for cloud data, and malware scanning of uploads. No method is 100% secure, and we can't guarantee absolute security — please use a strong, unique password and don't upload PHI or live regulated data.
10. Children
Standpoint is a business tool not intended for children, and we don't knowingly collect data from anyone under 16.
11. Changes
We may update this policy; material changes will be reflected in the “last updated” date. Continued use after an update means you accept it.
12. Contact
Questions or requests: info@aiservicepro.net. See also our Terms & Acceptable Use and Trust Center.
This page is provided for transparency and is not legal advice.