Privacy Policy

This Privacy Policy explains how AIVROs (the AI Value Readiness Operating System), operated by Skillement.ai, collects, uses, and protects information when you use our platform at app.aivros.ai.

Last updated: January 2026

Who We Are

AIVROs is a workforce AI readiness platform operated by Skillement.ai. We act as a data processor for our enterprise customers (sponsors) and as a data controller for the limited account information we hold about platform users.

Data We Collect

We collect only what is required to operate the platform:

  • Account information: name, work email, role, and the sponsor organization that invited you.
  • Assessment responses: answers you submit to AIQ, ProFit, and related instruments.
  • Derived scores: SkilliScore, archetype results, and other computed analytics.
  • Usage telemetry: session timestamps, page views, and feature interactions for product improvement.
  • Support correspondence: messages you send to us or submit through our contact form.

We do not sell personal data. We do not use assessment content to train third party models without explicit consent.

How We Use Your Data

  • To deliver assessments and surface results to you and your sponsor.
  • To compute readiness scores, archetypes, and program recommendations.
  • To maintain service quality, monitor performance, and prevent abuse.
  • To respond to your inquiries and provide customer support.
  • To meet legal, audit, and regulatory obligations.

We process personal data under one or more of the following bases: contractual necessity (operating your account), legitimate interest (product analytics and security), legal obligation (record keeping), and explicit consent (marketing communications, optional features).

Sharing and Disclosure

We share data only with:

  • Your sponsor organization: the customer that invited you sees your assessment results in aggregate and, where role appropriate, individually.
  • Subprocessors: vetted infrastructure providers (Supabase for storage and authentication, AWS Amplify for hosting). All subprocessors operate under data processing agreements.
  • Legal authorities: when required by law or to protect rights, safety, or property.

Data Retention

Active account data is retained for the life of your account. Inactive accounts and associated assessment data are archived after 24 months of inactivity and deleted on request, subject to legal retention obligations. Logs are kept for up to 90 days.

Security

We use industry standard controls including encryption in transit (TLS 1.2 or higher), encryption at rest, role based access, row level security policies on all tenant data, multi factor authentication for administrators, and regular security reviews. No system is perfectly secure, and we encourage you to use a strong unique password.

Your Rights

Depending on your jurisdiction (GDPR, CCPA, PIPEDA), you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Export your data in a portable format.
  • Restrict or object to certain processing.
  • Withdraw consent at any time.

To exercise these rights, contact us through the methods listed below. We respond within 30 days.

Cookies and Tracking

We use strictly necessary cookies for authentication and session management. We do not use third party advertising cookies. Optional analytics cookies are off by default and require your consent.

International Transfers

Data may be processed in regions where our cloud providers operate. Where data leaves your jurisdiction, we rely on standard contractual clauses or equivalent safeguards.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. Continued use after changes take effect constitutes acceptance.

Contact

For privacy related inquiries, please use our contact formand select “Privacy” as the topic, or email privacy@aivros.ai.