Privacy Policy

Last updated: 5 July 2026

What we collect

When you use the EU AI Act Scope Check questionnaire, we collect your email address and your answers to the assessment questions. If you purchase a Classification Memo, we also collect payment details (processed directly by Stripe — we never see or store your card number) and, optionally, your company or system name for the memo cover page.

Why we collect it

Your email lets us send you a copy of your result and, if purchased, your Classification Memo and Founder's Toolkit. Your answers let us generate that result. We do not sell your data.

Legal basis and consent

We rely on your consent (given via the checkbox before submitting the questionnaire) to email you your result and occasional related messages, and on contract necessity to process payments and deliver purchased products. You can withdraw consent at any time using the unsubscribe link in any email we send.

Where your data is stored

Submissions are stored in a Supabase Postgres database hosted in the EU. Payment processing is handled by Stripe; transactional email is handled by Resend. Both may process data outside the EU under standard contractual safeguards.

Your rights

Under GDPR you can request access to, correction of, or deletion of your data at any time. Contact us at hello@euaiactscopecheck.com to exercise these rights.

Retention

We retain submission data for as long as needed to provide the service and respond to support requests, or until you request deletion.