ailiteracy.ie

Legal

Privacy Policy

Last updated: 25 May 2026

1. Who We Are

ailiteracy.ie is operated by RippleXn, a risk intelligence and governance consultancy based in Dublin, Ireland. ailiteracy.ie is part of the Risk Panorama suite of governance tools.

Data Controller: RippleXn
Contact: [email protected]

2. What Data We Collect

We collect and process the following categories of data:

Diagnostic Assessment Data

When you complete the AI Workforce Governance Diagnostic, we collect your responses to assessment questions. These responses relate to your organisation's AI governance practices, not to individual personal data. No employee names, personnel files, or individually identifiable information is collected through the assessment.

Contact Information

If you use our contact form or purchase a report, we collect your name, email address, and optionally your company name.

Payment Data

Payment processing is handled entirely by Stripe. We do not store credit card numbers or full payment credentials. We retain a transaction reference, amount, and payment status for our records.

Technical Data

Standard web server logs including IP address, browser type, and access timestamps. If you accept analytics cookies, we may collect anonymised usage data.

3. How We Use Your Data

  • To generate your AI Governance Exposure Score and diagnostic results.
  • To produce and deliver purchased PDF reports.
  • To respond to contact form enquiries.
  • To process payments via Stripe.
  • To improve the diagnostic methodology and service quality.
  • To comply with applicable legal obligations.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data on the following bases:

  • Contract performance: Processing assessment data and generating reports you have requested or purchased.
  • Legitimate interest: Improving our diagnostic methodology and maintaining service quality.
  • Consent: Where applicable, for optional analytics cookies and marketing communications.
  • Legal obligation: Retaining transaction records as required by Irish and EU law.

5. Cookies

ailiteracy.ie uses cookies to ensure the website functions correctly and, where you consent, to understand how the site is used.

Strictly Necessary Cookies

Required for the website to function. These cannot be disabled. They include session management and security cookies.

Analytics Cookies

Used to understand how visitors interact with the website. These are only set if you provide explicit consent via the cookie banner.

You can manage your cookie preferences at any time using the cookie settings link in the website footer.

6. Data Sharing

We do not sell your data. We share data only with:

  • Stripe: For payment processing. Subject to Stripe's privacy policy.
  • Hosting infrastructure: Our application is hosted on secure cloud infrastructure. Data is stored in encrypted databases.

We do not share diagnostic results or assessment data with third parties.

7. Data Retention

Diagnostic submissions and associated reports are retained for 24 months from the date of completion, after which they are deleted. Payment records are retained for 7 years in accordance with Irish tax and accounting requirements. Contact form submissions are retained for 12 months.

8. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal retention requirements).
  • Object to or restrict processing of your data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with the Irish Data Protection Commission (DPC).

To exercise any of these rights, contact us at [email protected].

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted database storage, secure HTTPS connections, and access controls. Payment data is handled exclusively by Stripe, a PCI DSS Level 1 certified processor.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the website. The "Last updated" date at the top of this page indicates the most recent revision.

If you have any questions about this privacy policy or our data practices, please contact [email protected].