Rule29

Privacy Policy

Effective Draft, not yet in effect. Last updated Draft, not yet in effect.

This policy covers the AI-Ready Brand Assessment: the Quick Check, the Full Assessment, team assessments, and the reports they produce. Rule29’s main website, rule29.com, has its own privacy policy.

Who runs the assessment

Rule29 Creative, Inc. (“Rule29”, “we”) runs the assessment. Our office is at 4303 E Cotton Center Blvd, Ste 100, Phoenix, AZ 85040. You can reach us through rule29.com/contact or at (630) 262-1009.

What we collect

Information you give us:

  • Your answers. Your answer to each scored question, with the wording you chose. The short intake questions: your sector, your organization’s size, the types of sensitive information your team handles (types only, never the information itself), and in the Full Assessment, the AI tools you use and your biggest AI goal. Your Function Map or Function Snapshot, if you fill it in. Your answers to “where would you like help” and “what has AI changed”.
  • The report form. Your name, work email, company, title, and whether you’d like Rule29 to follow up.
  • Team assessments. For the person who sets up the team: company name, your name, and your email. For each person who joins: name, work email, title, role, and whether you’d like Rule29 to follow up.
  • Private invite links from Rule29. Your name and title. The company name comes from the invite, and Rule29 may note a contact name when creating it.
  • The Connect form. Your name, email, and company, plus your role and a message if you add them. We attach your score and band to the request.
  • Accounts. Your email address, your name, and a password if you set one. Passwords are stored in hashed form by the sign-in service.

Information we calculate: your pillar scores, total score, band, brand verdict, and the notes in your report. These come from your answers.

Technical information:

  • Fonts. Each page loads fonts from Google Fonts and Adobe Fonts. Your browser’s request sends your IP address and browser details to Google and Adobe, as any font request does.
  • Error reports. If a page fails, the error and the page address are sent to Lovable, our platform provider.
  • Browser storage. While you wait for an email code, the report form keeps your details in your browser and removes them once your report opens. If you sign in, your session is kept in your browser’s storage.
  • Cookies and analytics. The assessment’s own code sets no cookies and runs no analytics, advertising, or tracking scripts. That’s why there’s no cookie banner.

How we use it

  • To score your answers, show your results, and build your PDF.
  • To save your report so you can open it again, and to email you a code that confirms your address when that step is on. Sign-in and confirmation codes are emailed by Lovable.
  • To run team dashboards for team assessments.
  • To follow up about your results, but only if you check the follow-up box, send us a request through the Connect form, or take the assessment through a private invite from a Rule29 team you already work with.
  • Rule29 staff who manage the assessment can see completed reports and the details entered with them.

We don’t sell your information. The assessment doesn’t compare your results with other organizations’ results.

AI and your answers

No AI writes your report when you take the assessment. Scores, bands, recommendations, and notes come from fixed rules and text Rule29 prepared in advance.

One feature uses AI: the team alignment summary. When a team leader asks for it, we send the following through Lovable’s AI gateway to an OpenAI model, so it can write a summary of where the team agrees and differs:

  • the company name;
  • the name and role of each person who has finished;
  • each question, with its pillar and title;
  • each person’s answer, as a number and as the answer wording;
  • which questions the team disagrees on.

Email addresses aren’t sent. Each request goes out with the provider’s option to store it turned off. How long Lovable and OpenAI keep a request, and how they may use it, is set by their own terms.

Where it’s stored and who processes it

Your information is stored in a database run by Lovable (Lovable Cloud) in the United States (AWS US East). These providers process it for us:

  • Lovable: hosting, the database, sign-in and email codes, error reports, and the AI gateway.
  • OpenAI: the team alignment summary, when a team leader asks for one.
  • Google and Adobe: fonts, as described above.
  • Google: sign-in, if you choose Continue with Google.

Who can see your results

  • Anyone with your results link. Each report has a private, hard-to-guess web address. Anyone you share it with can open it. A PDF you download is yours to share.
  • You, when signed in. Your account shows the reports and dashboards linked to it.
  • Rule29 staff. Through a passcode-protected admin area, staff can see every report, the contact details entered with it, Connect requests, and invite links.
  • Team leaders, and anyone they share the dashboard link with. See the next section.
  • Private invite links. Anyone with a company’s invite link can start a report for that company. The results go to the person who took it and to the Rule29 team working with that company.

Team assessments: what leaders can see

The team dashboard shows each member’s name and progress, the company’s averaged score and Pillar Map, and each person’s Function Map with their name. On every question where the team’s answers are two or more points apart, it shows each person’s answer next to their name. So the dashboard does identify individual answers on those questions.

Member email addresses aren’t shown on the dashboard. Anyone with the dashboard’s link can see it, so team leaders should share it only with people who should see named answers. Everyone who joins is told this before they start.

How long we keep it

The assessment doesn’t delete information on a schedule. Your information stays until it’s removed.

Your choices

  • The follow-up box is optional and starts unchecked. Leaving it unchecked doesn’t affect your report.
  • Optional fields are marked. The Function Map and Function Snapshot are optional.
  • Before you join a team assessment, you can read what your team leader will see and decide whether to take part.
  • Team leaders choose whether to create an AI summary.
  • To see, correct, or delete the information linked to your email, contact us through rule29.com/contact. We handle these requests by hand.

Changes to this policy

If the assessment starts collecting, using, or sharing information in a new way, we’ll update this page and its dates before the change takes effect.

Contact

Rule29 Creative, Inc., 4303 E Cotton Center Blvd, Ste 100, Phoenix, AZ 85040. rule29.com/contact. (630) 262-1009.