Privacy
How we handle your details
Last updated 7 September 2026. “We” means Heuriton.
What we collect
Your name, work email, job title and your twelve answers. We use your email domain to identify your organisation and find its public website. We gather nothing else about you personally.
What we do with it
We use these details to write your report and send it to you. We may write to you once about your report; reply and say so if you would rather we did not. We do not sell your details and we do not add you to a mailing list.
How the report is written
An AI model writes the report from your answers, your job title, your organisation’s name, the public content of its website, and web searches about its industry. No person edits it before it is sent. The model provider does not train on this material.
Who handles your data for us
A small number of specialist companies process data on our instructions: a database and storage provider in Frankfurt, a website hosting provider, a service that reads your organisation’s public website, an AI model provider in the United States that deletes its copy of the input within thirty days, and an email delivery service. Some of these are in the United States. Their names are available on request.
Team diagnostics
If you arrive through a team invitation, your answers also go into a team view for the organisation that invited you. It shows job titles and patterns of answers, with no names or email addresses. In a small team a job title can still point to a person. The organisation that invited you decides how it uses the team view.
Your report page
Your report is at a private link sent only to you. Anyone with the link can read it, so share it with care. Report pages are hidden from search engines.
How long we keep it
Until you ask us to remove it.
Your rights
You can ask for a copy of what we hold about you, or have it corrected or removed. Reply to your report email or write to hello@heuriton.com. We act within a few days and confirm by email; the model provider’s copy expires within thirty days on its own. If you are unhappy with how we have handled your data, you can complain to the data protection authority where you are.