Privacy policy

Plain English, not legal advice

Who we are

What we collect, and why

• Contact form: your name, email, and message. We store them in our database (Neon) and our CRM (Zoho CRM) so the owner can reply, and we send you one confirmation email through Resend. No enrichment, no purchased lists.
• The two free self-checks: your answers are scored in your browser and the result shows on screen with no email required. If you ask for the result by email, we store your name, work email, answers, and result in our database and in Zoho CRM, and send you one email through Resend. The owner follows up only if you ticked the box that allows it.
• The Microsoft score check: it runs in your browser and has no email step, so your answers never reach our server. We count only that a check was started and which kind of result it showed.
• Booking: if you book a call, scheduling runs on Zoho Bookings, which collects the details you enter there under Zoho's own terms.
• Analytics: Vercel Web Analytics, which is cookieless and aggregates page-level statistics. We also count form, self-check, and review outcomes on our own server as totals per day, with nothing that identifies you.
• Abuse prevention: our server briefly derives a request fingerprint (from your IP or user agent) to rate-limit submissions.
• Competency evidence check: your answers about up to four customer examples are checked in your browser and the result counts show with no email. If you ask for the full memo, we store your work email, your program and tier answers, how many examples you described, the result, and a timestamp, in our database and in Zoho CRM, and send you one email through Resend. Text you paste from a case study is read in your browser and never sent. The owner follows up only if you ticked the box that allows it.
• Partner calendar: the dates are public and need no email. If you subscribe to change notices, we store your work email, the programs you ticked, and a timestamp, in our database and in Zoho CRM, and send you a confirmation and then an email only when a public page you follow changes, each with an unsubscribe link. Unsubscribing records that you did and stops the notices.
• Khavion Architecture Review: the review runs in your browser. Your diagram, its text, your Terraform, and the description you write never leave it, and there is no account or password. If you ask for the full report, we store your work email, the ids and severities of the findings, the mode you chose, your production and intent answers, the estimate total, and a timestamp, in our database and in Zoho CRM, and send you one email through Resend with a link that reopens the report for 7 days. The link carries finding ids and your answers, never your email address, your diagram, or your words; the page rebuilds the report from our knowledge base. Your own words and the comparison of your description with your diagram stay in your browser, on the device you used. If you make a shareable link, no email is needed: the page sends only the ids of the findings and your mode and production answers, and the link carries the score, the counts of findings by severity in each pillar, the mode, and the date, shows no findings, and works for 30 days. Nothing else leaves your browser. The owner follows up only if you ticked the box that allows it.
• Accounts from an older tool: an architecture diagram tool that used to run on this site needed an account. Accounts created then are still stored (work email, a scrypt hash of the password, and any saved reports). Email us to have yours deleted.

Cookies

What we don't do

Where your data goes

Retention and your rights

Data ownership and regulated work

Changes