Privacy Policy

Last Updated: December 22, 2025

BY ACCESSING OR USING THE IGNIS SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY, YOU SHOULD DISCONTINUE USE OF THE SERVICES.

1. Overview

This Ignis Privacy Policy (“Privacy Policy”) describes how IGNIS AI LLC (“Ignis”, “Company”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you access our website at www.ignisai.ai (the “Website”) or use our AI-enabled assessment and analytics platform and related services (collectively, the “Services”).

By accessing or using the Services, you agree to this Privacy Policy and the IGNIS Terms of Use, which are incorporated herein by reference.
If you do not agree, you must discontinue use of the Services immediately.

2. Categories of Personal Information We Collect

We may collect the following categories of personal information, depending on how you use the Services:

Identifiers: name, email address, phone number, account credentials, device identifiers, IP address.F
Professional or Educational Information: employer, institution, role, or program data.
Assessment Information: responses, behavioral indicators, cognitive patterns, performance metrics, and other data generated or provided during assessments.
Internet / Device Activity: browsing behavior, interaction logs, navigation patterns, analytics data.
Inferences: insights or predictions about skills, capabilities, or behavioral tendencies generated by our models.
Communications Data: support interactions, messages, inquiries, or survey responses.
Sensitive Information (if applicable): certain assessment-derived behavioral or cognitive indicators may qualify as “sensitive” under some privacy laws; Ignis processes such data only for purposes permitted by law.

3. Sources of Personal Information

We collect personal information from the following sources:

You, directly, when you register, complete assessments, submit forms, or communicate with us.
Your employer, institution, or authorized organization, when they invite you to participate in assessments.
Automatically from your device, through cookies, logs, and tracking technologies.
Third-party service providers, such as analytics, hosting, authentication, and security vendors.
Public or commercial sources, where applicable and legally allowable.
Other users or organizations, if they upload or share data relating to you.

4. Information We Collect

We collect information directly from you, automatically through your use of the Services, and from third parties you authorize.

A. Information You Provide Directly

This may include:

Registration Information: name, email, phone number, employer or institution, password, and account details.
Assessment Responses & User Content: text submissions, recorded inputs, task outputs, skills data, cognitive or behavioral responses, uploaded files, messages, profile information, and any other information you voluntarily submit.
Communications: inquiries, support requests, feedback, survey responses, or other interactions with us.
Organization-Provided Data: if an employer, institution, or authorized organization invites you to complete an assessment, we may receive information about you from them.

B. Information We Collect Automatically

When you use the Website or Services, we automatically collect:

Log Data: IP address, device identifiers, browser type, operating system, referring URLs, timestamps, and interaction data.
Usage Data: pages viewed, features used, duration of sessions, navigation patterns, frequency of use, and system performance metrics.
Cookies & Tracking Technologies: cookies, pixel tags, web beacons, and similar tools for authentication, analytics, personalization, and security. You may adjust cookie preferences through your browser settings, but disabling them may impair functionality.

We may combine automatically collected information with other data to create inferences, insights, or derived analytics used to operate or improve the Services.

C. Third-Party Tracking Technologies

When you use the Website or Services, certain third parties may collect information about you, including:

hosting and cloud service providers
analytics providers
security and monitoring providers
content delivery networks (CDNs)
embedded service providers

These third parties may use cookies, scripts, pixels, or device identifiers to collect information about your online activities across different services.

We do not control how third parties use such tracking technologies. We encourage you to review their privacy policies.

D. Information from Other Users

We may receive information about you when other users or organizations upload, share, or submit data that includes your information, including team data, organizational evaluations, or shared materials.

E. Aggregated or De-Identified Information

We may collect, create, or use aggregated, pseudonymized, or de-identified data for analytics, benchmarking, research, and improving our models and Services. Such data does not identify you personally and may be used without restriction.

5. Legal Bases for Processing (GDPR/UK GDPR)

For users located in the European Economic Area (EEA) or United Kingdom, we process personal information under the following legal bases:

Contract Performance: to provide assessments and related Services.
Legitimate Interests: improving Services, securing systems, analytics (where not overridden by user rights).
Consent: marketing communications, certain cookies, and sensitive data where required.
Legal Obligations: responding to lawful government or regulatory requests.
Vital Interests: rare cases involving safety or security.

6. How We Use Information

We use personal information to:

Provide, maintain, and improve the Website and Services.
Process assessment responses and generate Assessment Data, including predictive analytics, skill scores, behavioral insights, and reports.
Authenticate users and manage accounts.
Share Assessment Data with the organization that invited you to participate, when applicable.
Improve analytics, algorithms, scoring systems, interfaces, and platform functionality.
Develop new features, services, or AI-driven capabilities.
Conduct analytics, diagnostics, debugging, and security monitoring.
Communicate with you regarding updates, notices, account matters, and support.
Comply with legal obligations and enforce our rights.

We may also use personal information to:

Prevent fraud, misuse, or security incidents.
Perform internal research and benchmarking.
Develop behavioral or skill-based inferences that inform Assessment Data.
Customize user experiences and administrative interfaces.

Where required, we will rely on appropriate consent mechanisms.

7. Sensitive Data Processing

Some assessment-derived indicators may be considered “sensitive” personal information under certain laws. Ignis processes such data solely to provide the Services, generate Assessment Data, ensure fairness and accuracy, and improve our models. Sensitive data is not used for advertising or unrelated purposes. Where required (e.g., in some jurisdictions), Ignis will obtain explicit consent or provide opt-out mechanisms.

8. Uuse of Data for Model Training & AI / Analytics

By submitting User Content or completing assessments, you grant Ignis a worldwide, royalty-free, transferable, sublicensable, perpetual license to:

store, process, reproduce, modify, analyze, and use such User Content;
generate and use Assessment Data;
train, improve, and validate Ignis AI models;
enhance algorithms, scoring systems, predictive engines, and assessment methodologies;
develop new products, features, and analytical capabilities;
create aggregated, anonymized, or de-identified datasets for benchmarking and research.

These rights arise from your acceptance of the Terms of Use and do not require additional consent unless required by law. Where laws require consent or opt-out mechanisms, Ignis will provide compliant processes.

Assessment Data and derivative outputs belong solely to Ignis and are not deleted when personal data deletion is requested. We do not use Assessment Data or User Content for advertising or marketing profiling.

Where laws grant individuals rights related to automated processing (e.g., GDPR Articles 21–22), Ignis will honor such rights, including access to meaningful information about the logic involved, the significance, and potential consequences of automated outputs.

Additional rules governing how User Content may be submitted for AI processing, and the responsibilities of users when using automated features, are described in the Ignis AI Policy, which is incorporated by reference into the Terms of Use.

9. Automated Decision-Making & Profiling

Ignis uses AI models to generate insights, predictions, or assessments. These outputs may include skill scores, behavioral inferences, or performance analytics. Ignis does not make hiring, promotion, academic, or placement decisions; such decisions are made solely by the organizations that use Ignis Services.

Where we generate automated inferences, we rely on legitimate interests or contractual necessity as the legal basis for such processing. Individuals may object to such profiling where permitted by law.

Individuals may request information about the logic involved, the significance, and the potential consequences of automated processing and may exercise applicable rights described in Section 12.

Users are responsible for ensuring that their use of AI-driven outputs complies with the Ignis AI Policy, including providing required notices and obtaining any legally mandated consents for automated processing.

10. Data Sharing & Disclosure

We do not sell your personal information.

We may share your information only in the following circumstances:

A. With Your Authorizing Organization

If you were invited to participate by an employer, institution, or other organization, you authorize us to share your Assessment Data with that inviting organization.

Ignis is not responsible for any decisions made by such organizations based on assessment results.

B. Service Providers

Service providers may include cloud hosting, analytics, security, communications, customer support, identity management, content delivery, engineering operations, and data processing partners.

C. Legal, Safety, and Compliance

We may disclose information to:

comply with law, subpoenas, or legal processes;
protect rights, safety, and property of Ignis, users, or others;
detect, prevent, or address fraud, abuse, or security risks.

D. Business Transfers

If Ignis undergoes a merger, acquisition, restructuring, financing, or sale of assets, personal information may be transferred as part of that transaction.

E. Aggregated or De-Identified Data

We may share aggregated or anonymized insights that do not personally identify you.

Ignis does not sell personal information.

11. Ownership of Data

Consistent with the IGNIS Terms of Use:

You retain ownership of your raw User Content.
Ignis owns all Assessment Data and all derivative insights, analytics, models, and outputs created by or through the Services.
Deletion of personal information does not require Ignis to delete Assessment Data or derivative outputs that belong to Ignis.

This is necessary to maintain the integrity of our platform, benchmarking systems, and AI technologies.

12. Your Choices & Rights

Depending on applicable law, you may have the following rights:

Access: Request access to personal information we hold about you.
Correction: Request correction of inaccurate personal information.
Deletion: Request deletion of your personal information that we maintain, subject to legal and operational exceptions.
- This right does not apply to Assessment Data or derivative insights owned by Ignis.
Restrictions: Request limitations on certain uses of your personal data.
Portability: Request a copy of your personal information in a portable format.
Marketing Preferences: Opt-out of promotional communications at any time.
Withdraw consent (where applicable): Request to withdraw consent for processing activities that rely on consent; this may affect certain features of the Services.
Object to Processing or Profiling: Request to object to processing based on legitimate interests or to certain profiling activities, as permitted by law.
Appeal a Denied Request: Request an appeal if a privacy rights request is denied, where required under applicable U.S. state laws.

To submit a request, email: privacy@ignisai.ai.

We may require identity verification before processing requests.

13. Do Not Track

The Website does not respond to browser “Do Not Track” (DNT) signals, as this standard is not yet uniform across the Internet.

14. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. These may include encryption, access controls, monitoring, logging, network segmentation, and periodic security assessments.

However, no method of transmission or storage is completely secure; while we strive to protect your data, we cannot guarantee absolute security.

Users are responsible for safeguarding their account credentials.

15. Children / Minimum Age

The Services are intended only for users 18 years of age or older.
We do not knowingly collect information from minors. If we learn that we have collected information from a minor, we will take appropriate steps to delete it.

If a parent or guardian believes their child has provided information to us:

Email: privacy@ignisai.ai
We will remove the information and honor permissible parental requests.

In rare cases where a parent provides a child’s information for authorized assessment purposes, the parent may:

review the child’s information,
request deletion, or
request cessation of use.

Ignis complies with applicable parental consent and data protection laws.

16. Third-Party Websites & Social Media

A. Other Websites

The Website may contain links to third-party websites or services. These third parties operate independently from Ignis and have their own privacy policies and security practices. Ignis is not responsible for the content, privacy practices, or security of such websites, including any data collected through embedded content such as videos or social widgets. We encourage you to review the applicable privacy policies before interacting with any third-party services.

B. Social Media & Public Posting

If you share content on social media or in public areas of the Website, that information may become publicly available. Social media platforms may also collect information about your interactions with our content, even if you do not actively post. Ignis cannot control how others access or use information you choose to make public.

17. International Transfers / Data Residency

Your information may be transferred to, stored in, or processed in countries outside your jurisdiction, including countries that may not provide the same level of data protection. By using the Services, you consent to such transfers.

Where required by law, Ignis uses appropriate safeguards such as:

EU Standard Contractual Clauses (SCCs)
UK International Data Transfer Addendum
Data Processing Agreements with service providers
Transfer Risk Assessments (TRAs)

By using the Services, you acknowledge such transfers.

You may request a copy of the safeguards we use for international transfers (such as Standard Contractual Clauses), subject to redactions required for confidentiality or security.

18. Data Retention

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy. We determine retention periods based on factors such as the nature of the data, the purpose of processing, contractual obligations, statutory requirements, and the necessity of maintaining records for security, auditing, and dispute resolution.

Retention periods may vary depending on:

contractual obligations with employers or institutions;
legal requirements;
dispute resolution needs;
model-training needs for Assessment Data;
security, auditing, and fraud-prevention purposes.

Aggregated, anonymized, and derivative datasets may be retained indefinitely.

19. S. State Privacy Rights

Residents of certain U.S. states — including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia — have additional privacy rights under their respective state laws.

A. Rights Provided Under State Laws

Depending on your state, you may have rights to:

Confirm whether we process your personal information
Access specific categories of your personal information
Correct inaccuracies in your personal information
Request deletion of personal information (with exceptions)
Obtain a portable copy of personal information
Opt-out of:
- targeted advertising (where applicable),
- sale of personal data (Ignis does not sell data),
- profiling with significant effects
- Appeal a denial of a privacy request

Where required, Ignis will honor these rights and respond within required timelines.

B. California Privacy Rights

B.1 California Shine the Light

Subject to certain limitations, California residents may ask us to provide them with a list of the types of personal data that Ignia AI has disclosed to third parties for their direct marketing purposes during the past 12 months, and the identities of such third parties. To make such a request, California residents can write to us at info@ignisai.com , Attn: Privacy Team, Re: CA Shine the Light, and include your name and the address to which you would like us to respond.

B.2 California Privacy Rights

The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020 (“CPRA Regulations”), requires that we provide certain details about how we collect and use personal data, and give specific rights to California residents, which are detailed below. Where indicated, certain terms in this section 5.3.2 have the meaning given to them in the CCPA or CPRA Regulations (hereinafter collectively “CPRA”).

C. How to Submit a Request

Email: privacy@ignisai.ai; or
mail to: Ignis AI LLC, PO Box 67031, Chestnut Hill, MA 02467

We may require identity verification.

Ignis does not “sell” or “share” personal information for cross-context behavioral advertising as defined under U.S. state privacy laws.

Ignis does not offer financial incentive programs related to personal information. If this ever changes, we will update this Privacy Policy accordingly.

If required by applicable law in the future, Ignis will publish annual metrics regarding consumer privacy requests.

20. Updates to this Privacy Policy

We will post updates on this page with a revised “Last Updated” date. Where required by law, we will notify you of material changes.

Continued use of the Services after the effective date constitutes acceptance of the updated Privacy Policy.

21. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

privacy@ignisai.com
IGNIS AI LLC
PO Box 67031
Chestnut Hill, MA 02467