1. Who We Are
AI Ready Score is operated by the SME Association of Australia, a not-for-profit organisation with over 310,000 Australian members. Our registered address is in Sydney, Australia. For privacy inquiries, contact us at privacy@aireadyscore.com or sal@growthandexit.com.au.
2. What Data We Collect
When you complete an AI Ready Score assessment, we collect:
- Contact information: name, email address, phone number (optional), job title
- Business information: company name, industry, employee headcount band, annual revenue band, year founded
- Assessment responses: your answers to 55+ questions across 8 AI readiness dimensions
- Advisor details: your advisor or consultant's name and email, if you provide them
We do not collect payment information, government identification numbers, or passwords through the assessment.
3. How We Use Your Data
- Generate your AI readiness report — your assessment responses are processed by our AI system to produce a personalised report with scores, risk analysis, and recommendations
- Send your report via email — we email your completed report to the address you provide
- Follow-up communications — we send a Day 3 email (top 3 actions) and a Day 30 email (retake invitation). You can unsubscribe from these at any time
- Internal notifications — our team is notified when assessments are started and completed, to monitor platform health
- Aggregate analytics — we use anonymised, aggregated data to improve the assessment methodology and produce industry benchmarks. No individual responses are shared publicly
- Consultation booking — if you request a consultation, your contact details are shared with a relevant advisor
4. AI Processing
Your assessment responses are sent to Anthropic's Claude AI service to generate your personalised report. This includes your business context (industry, size, scores) and your individual question responses. Anthropic processes this data under their privacy policy. Anthropic does not use commercial API data to train their models.
Your report is generated in real time and stored temporarily (up to 4 hours) in a secure cache for delivery, then permanently in our database for your future reference.
5. Third-Party Services
We use the following services to operate the platform:
- Supabase (database hosting) — stores your assessment data securely in the cloud
- Anthropic Claude (AI report generation) — processes your responses to generate your report
- Resend (email delivery) — sends your report and follow-up emails
- Upstash Redis (temporary caching) — stores your report temporarily during generation
- Vercel (hosting) — serves the website and runs server-side logic
- Sentry (error monitoring) — captures technical errors to help us maintain the platform. No personal data is intentionally sent to Sentry
We do not sell your data to any third party. We do not use your data for advertising.
6. Cookies and Local Storage
We use minimal browser storage to improve your experience:
- Auto-save (localStorage): From step 2 of the assessment, your in-progress answers are saved locally on your device so you don't lose work if you close the browser. This data stays on your device and is cleared when you complete the assessment
- Cookie consent preference (localStorage): We store your cookie consent choice so we don't ask you again
- Authentication cookies: If you log into the advisor or client portal, Supabase sets a session cookie to keep you signed in
We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
7. Data Retention
- Your assessment data and report are retained indefinitely so you can retake the assessment and compare progress over time
- Temporary cache data (Redis) expires after 4 hours
- You can request deletion of your data at any time by contacting us
8. Your Rights
Depending on your location, you may have the right to:
- Access your personal data — request a copy of what we hold
- Correct inaccurate data
- Delete your data — request we remove your assessment and report
- Unsubscribe from follow-up emails — use the link in any email, or contact us
- Data portability — request your data in a machine-readable format
To exercise any of these rights, email privacy@aireadyscore.com. We will respond within 30 days.
9. Data Security
We protect your data using industry-standard measures including encrypted connections (HTTPS), secure database access controls, environment-separated credentials, and role-based access for internal tools. Our database is hosted on Supabase with row-level security policies.
10. International Data Transfers
Our services are hosted on infrastructure in Australia, the United States, and Europe. Your data may be processed in any of these regions depending on the service provider. All transfers are protected by the service providers' security measures and, where applicable, Standard Contractual Clauses or equivalent safeguards.
11. Children
AI Ready Score is designed for business owners and professionals. We do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, please contact us immediately.
12. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email to users who have completed assessments. The effective date at the top of this page indicates when it was last updated.
13. Contact
For any privacy questions or requests:
Email: privacy@aireadyscore.com
Organisation: SME Association of Australia
Location: Sydney, Australia