Privacy Policy

1. Introduction & Scope

Welcome to the AI Readiness Scorecard, a digital miniapp platform operated by **Creative AI Solutions** (accessible at caismd.com, hereinafter referred to as "we", "us", or "our"). We are committed to protecting the privacy of our visitors and users who complete our technical maturity assessment.

This Privacy Policy describes how we collect, use, store, share, and protect your information when you access our AI Readiness Scorecard, submit lead forms, or interact with our assessment dashboard.

2. Data We Collect

When you use our diagnostic scorecard, we collect details necessary to evaluate your business capabilities and send you personalized technical recommendations. This includes:

• Contact Information: First name, last name, business email address, phone number, professional role/title, and preferred contact method.
• Business Details: Business name, industry, number of employees, years in business, approximate monthly software budget, urgency for technology integration, and service interests (e.g. custom software, marketing, AI consulting).
• Assessment Responses: Your answers to our 12 multiple-choice questions assessing your digital maturity, workflows, and tool usage.
• Generated Analysis: AI-powered recommendations, overall readiness scores, and specific category scores generated for your business.

3. Purpose of Processing

We process your data strictly to fulfill your request for an AI readiness report and business consultation:

• To calculate and render your customized AI Readiness Score and growth maturity tier.
• To compile and deliver your consulting report and technical roadmap via email.
• To schedule follow-up discovery calls or technology audits.
• To notify our administration team of new high-priority leads so we can prepare follow-up consulting packages.
• To send you our custom software case studies and actionable automation roadmaps, if you choose to opt in to our mailing list.

4. Third-Party Data Processing

To provide our platform features, we share relevant portions of your data with selected technology subprocessors:

• OpenRouter (AI Model Provider): When generating a custom consulting brief, our application transmits business challenges, goals, score summaries, and answers through OpenRouter to the underlying AI model that produces the report. We do NOT share your personal contact details (such as email or phone number) with the AI provider.
• Resend: We utilize Resend to transmit transactional reports to your inbox and administrative alerts to our staff.
• PostHog Analytics: We use PostHog to analyze user paths and form engagement. PostHog tracking is deactivated by default and is only loaded if you explicitly accept tracking cookies in our cookie consent banner.
• Firebase & Cloud Firestore: All lead and assessment data is stored securely in databases managed by Google Cloud Platform (Firebase).

5. Storage, Retention, and Security

Your data is stored in our database hosted in US-based data centers. We implement appropriate technical and organizational measures to safeguard your personal data, including HTTPS/TLS encryption for all data transit, strict Row Level Security (RLS) policies on database tables, rate limiting on APIs, and strict authentication controls for admin dashboard access.

We retain assessment data for a maximum of 24 months, after which lead details are archived or anonymized, unless a longer retention period is required for active client relationships or compliance with governing laws.

6. Your Legal Rights (GDPR & CCPA)

Depending on your location, you may have specific rights regarding your personal information, including:

• Right to Access: Request a copy of the personal data we store about you (Data Subject Access Request).
• Right to Erasure (Right to be Forgotten): Request that we delete your personal and business contact details from our records.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Opt-Out: Withdraw marketing consent or request stop-contacts at any time.

To exercise any of these rights, please contact our team using the email listed below. We will respond to verified requests within thirty (30) days.

7. Contact Information

If you have questions about this Privacy Policy, your rights, or wish to make a request, please contact us: