Privacy Policy

Data Controller

FULLVIO s. r. o., Karpatské námestie 7770/10A, 831 06 Bratislava - mestská časť Rača, Slovak Republic. Company ID (IČO) 56214634.
Contact: legal@fullvio.com

Data We Collect

When you use Self-Audit, we collect:

• — Your business email address (used to send your login link and to assign your assessments to you)
• — Your company name and process description (provided by you in the course of the assessment)
• — Chat messages exchanged during the assessment interview
• — Payment data processed by Stripe (we do not store card details)
• — Session data of your browser (anonymous session cookie, language setting)

How We Use Your Data

We use your data solely to provide the Self-Audit assessment service: to run the AI interview, create your report, send you your login link and process your payment. We never sell your data. For advertising purposes, we share only what you consent to under “Cookies, Analytics and Advertising” below; if you do not give that consent, nothing is shared.

Processors

• — Stripe: payment processing (transfers of data from the UK and the EU are covered by appropriate safeguards)
• — Amazon Web Services (Bedrock): AI inference for the interview and the creation of the report
• — Google Ireland Limited / Google LLC: web analytics and advertising measurement, only with your consent (transfers of data from the UK and the EU are covered by appropriate safeguards)

Cross-Border Data Transfers

Your personal data may be transferred to the service providers named above (Stripe, Amazon Web Services (Bedrock) and Google) in the United States and in other countries outside the UK and the European Economic Area (EEA). Where this happens, the transfer is protected by appropriate safeguards, such as an adequacy decision, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

Learning Partner AIRIES

AIRIES (https://www.airies.app/) is the AI learning platform and the learning partner of Self-Audit. The report contains links to airies.app that contain campaign parameters only; Self-Audit does not pass any personal data to AIRIES in doing so. Once you follow such a link, you are using a separate service of AIRIES, to which its own terms of use and privacy policy apply. The learning recommendation is purely advisory and does not oblige anyone to make a purchase.

Your Rights (UK GDPR and EU GDPR)

Under the UK GDPR, the Data Protection Act 2018 and, where it applies, the EU GDPR, you have, as a data subject, the right of access to your personal data and the right to have it rectified, transferred (data portability) and erased. To exercise any of these rights, email us at legal@fullvio.com. We will respond within one month, as required by Art. 12(3) UK GDPR and EU GDPR.

The UK supervisory authority is the Information Commissioner’s Office (ICO), and you may lodge a complaint with it. Individuals in the EU may contact their local data protection authority.

Data Retention

We store the data of your assessment for up to 3 years after your last login or until you request its deletion. We keep payment records for as long as the applicable tax regulations require.

Cookies, Analytics and Advertising

Self-Audit uses a session cookie (HttpOnly, Secure, SameSite=Lax) to maintain your login status and a consent cookie to store your cookie choices. Both are strictly necessary and always active.

With your consent to analytics cookies, we use Google Analytics 4 to understand how visitors use this website (pages viewed, source of the visit, approximate location). Analytics cookies are set only after you have accepted them in the cookie banner; if you decline, no analytics cookie is stored. We request this consent, and the marketing consent described below, in line with the UK Privacy and Electronic Communications Regulations (PECR) and the equivalent EU ePrivacy rules.

With your consent to marketing, we use conversion tracking and remarketing tags from Google Ads to measure the performance of our ads and to personalise the ads shown to you. These tags are loaded only after you have given your marketing consent; if you decline, they are never loaded and no advertising cookie is set. Where Enhanced Conversions are used, a SHA-256 hash of your email address may be transmitted to Google so that a purchase can be matched to the ad that led to it. We never transmit your email address in readable form; the legal basis for this is your consent under Art. 6(1)(a) UK GDPR and EU GDPR.

Analytics and advertising data is processed by Google Ireland Limited and may be transferred to Google LLC in the United States on the basis of appropriate safeguards (see “Cross-Border Data Transfers” above). Analytics and marketing are separate choices: declining one does not mean declining the other, and accepting one does not mean accepting the other. You can change or withdraw either consent at any time via the “Cookie settings” link in the footer, as provided for in Art. 7(3) UK GDPR and EU GDPR.