Resources / Trust

Your data stays yours.

You control what you share, export and delete. Assessment data is screened, processed under a fixed engine configuration and stored privately.

Default visibilityPrivate
Data regionSingle EU region
At restProvider-managed encryption
In transitTLS
Representative assessment data flowPrivate by default
01

You provide the source record.

Assessment answers enter the controlled process and remain private by default.

OWNER: YOU · VISIBILITY: PRIVATE BY DEFAULT
01

Owned

Export, share or delete your assessment data from your account.

02

Private

Assessment answers and reports are private by default.

03

Stable

A fixed engine configuration prevents silent changes to your result.

04

Untracked

No advertising profiles, device fingerprints or cross-site tracking.

01Engine stability

Your result does not shift underneath you.

Answers move through one controlled process: screening, processing under a fixed engine configuration and private storage.

A
Receive
Your submitted assessment answers enter the private account process.
Private by default
B
Screen
Answers are screened before the assessment is processed.
Controlled input
C
Process
The assessment runs under the engine configuration in effect at processing time.
Pinned version
D
Store
Answers and reports are stored privately under provider-managed encryption.
Private storage
A fixed engine configuration. Model changes are deliberate and dated, never silent.
02Data inventory

See exactly what enters the system.

The clearest privacy promise is a precise inventory of what we record and what we do not.

We record
We do not record
Assessment answers, stored privately under provider-managed encryption.
IP address beyond the active session.
The engine configuration used to process the assessment.
Browser fingerprints or device identifiers.
Submission timestamp.
Behavioural profiles for advertising.
Account email for login and recovery.
Cross-site tracking pixels or third-party tags.
Audit record of team-access changes (invitations, revocations, consent).
Additional tracking data outside these account functions.
03Your controls

Your data controls live in your account.

Export, deletion and consent-controlled pattern sharing are account-level controls, not requests that depend on a support queue.

EXPORT

Take it with you.

Download your answers, reports and panel composition from your account.

DELETE

Remove your records.

A deletion request starts a 30-day grace period; after it ends, your records are removed from primary storage.

SHARE

Choose what others see.

You control whether an authorised manager can see your onboarding baseline and question-history pattern read. Question text, answers, Mirror and Meta-Brain remain private.

04Team permissions

Team access starts private.

Access is private by default. Managers see aggregates rather than raw answers, sharing is opt-in, and access is logged.

Representative role visibility matrix
RecordSubjectManagerAdministratorCohort reporting
Raw answersFull controlVisible to the subject.Not availableRaw answers remain private.BlockedContent access is blocked.ExcludedRaw answers never enter cohort reports.
Pattern noteFull controlVisible to the subject.Private by defaultSubject chooses whether to share.Metadata onlyCounts, categories and dates are described separately.ExcludedIndividual pattern reads are not cohort output.
Team aggregatesControls inclusionMember chooses what aggregates.Aggregate viewPatterns rather than individual answers.Operational accessAdministrative actions are logged.ProtectedConsent, cohort size and evidence thresholds apply.
Access trailControlledMember controls sharing and can withdraw access.LoggedInvitations, revocations and consent changes are recorded.OperationalAdministrative actions are subject to operational logging.No contentAccess records do not expose member content.
05Privacy controls

The controls we operate today.

These statements describe the current privacy and data-handling position without implying an external certification.

GDPR
Export, deletion and access rights honoured for EU and UK data subjects.
Rights supported
Data residency
Single EU data region.
EU region
Encryption
Provider-managed encryption at rest; TLS in transit.
At rest / in transit
06Security contact

Report security concerns directly.

Responsible disclosure is welcome. Send security reports to our dedicated contact.

security@pygar.ai

Please include enough detail for us to understand and reproduce the issue. Do not include personal assessment data unless it is necessary to explain the report.

Next step

Understand how your information is handled before you begin.