Privacy Policy
How Answerr collects, uses and protects personal data for individuals and institutions, including AI prompts, assessment results and AIQ™ credentials.
Last updated: November 2, 2026
Supersedes: Privacy Policy dated August 7, 2026
Answer Labs Inc., doing business as Answerr, 131 Continental Drive, Suite 305, Newark, DE 19713, New Castle County, Delaware, United States.
1. Introduction
At Answerr, we believe people should understand how their information is collected, used and shared, particularly when artificial intelligence is involved in evaluating human capability.
Answerr is an AI capability platform that helps individuals and organizations understand, measure, verify and develop how people work with artificial intelligence.
This Privacy Policy explains how Answer Labs Inc. (“Answerr,” “we,” “us” or “our”) collects, uses, stores, discloses and protects personal information through our websites, applications, organizational workspaces, AI capability challenges, reports, AIQ™ credentials, integrations and related services (collectively, the “Service”).
This Policy applies to:
- Individuals using Answerr independently.
- Candidates participating in employer-sponsored AI capability challenges.
- Employees participating in workforce capability programs.
- Organization administrators, recruiters, hiring managers and authorized users.
- Students, faculty and educational institution users.
- Website visitors, business contacts and prospective customers.
Our approach is guided by several principles:
- Transparency: You should understand what information is collected, why it is collected and who can access it.
- Purpose limitation: Personal information should be used for legitimate, disclosed purposes.
- Security: We maintain safeguards designed to protect personal information.
- Human accountability: AI-generated evaluations should be interpreted appropriately, particularly where decisions can affect people’s opportunities.
- Individual rights: We respect applicable privacy rights, including access, correction, deletion and other rights established by law.
This Policy should be read alongside our Terms of Service and any applicable customer agreements.
2. Who Controls Your Information
Answerr provides services directly to individuals and on behalf of organizations.
Our legal role depends on the circumstances in which personal information is processed.
2.1 Personal Accounts
When you independently create an Answerr account, use personal AI capability features, purchase a subscription or obtain an individual AIQ™ credential, Answerr generally determines the purposes and means of processing your personal information.
In these circumstances, Answerr generally acts as a data controller or business under applicable privacy laws.
You may direct privacy requests to support@answerr.ai.
2.2 Organization-Sponsored Activities
When an employer, staffing firm, educational institution or other organization provides your access or invites you to participate in an activity, that organization generally determines the purposes for which the related information is collected and used.
For personal information processed on the organization’s documented instructions, Answerr generally acts as a processor or service provider.
This may include:
- Employer-sponsored hiring challenges.
- Employee capability development programs.
- Educational programs.
- Organization-sponsored evaluations and reporting.
The sponsoring organization is generally responsible for determining the lawful basis for its use of the information, identifying authorized recipients and handling employment or institutional decisions.
Answerr may separately act as a controller where it determines its own processing purposes or has independent legal obligations, including certain account administration, security, credentialing and legal compliance activities.
The parties’ respective responsibilities may be further defined in a Data Processing Addendum or other applicable agreement.
2.3 Website Visitors and Business Contacts
When you visit our website, request information, attend an event, communicate with our team or otherwise engage with Answerr outside an organization-sponsored activity, Answerr generally acts as the controller of the information collected for those purposes.
2.4 Multiple Accounts and Contexts
You may use Answerr in more than one capacity.
For example, you may have a personal Answerr account and separately complete a hiring challenge for an employer.
These activities may involve different data controllers, permissions and retention rules.
An employer’s access to information from its sponsored challenge does not automatically authorize access to your unrelated personal account or activities associated with other organizations.
3. Information We Collect
The categories of information collected depend on how you interact with the Service and which features are enabled.
3.1 Account and Profile Information
We may collect:
- Full name.
- Email address.
- Account identifiers.
- Organization or company affiliation.
- Job title, department or role.
- Profile information voluntarily provided.
- Authentication identifiers.
- Login and account preferences.
- Subscription and account status.
For organizational accounts, we may receive information from your employer, educational institution, administrator or authorized identity provider.
3.2 Hiring and Recruiting Information
When you participate in an employer-sponsored AI capability challenge, we may process:
- Your name and contact information.
- The sponsoring organization.
- Relevant job or recruitment identifiers.
- Challenge invitations and participation status.
- Challenge instructions and session metadata.
- Your responses and submitted work.
- Prompts and interactions with AI systems within the Challenge.
- Drafts, revisions and other relevant work-product evidence.
- Completion status and timestamps.
- Observed behavioral indicators.
- Capability Reports and dimension-level results.
- Relevant integrity or technical incident records.
- Information you voluntarily provide during participation.
We do not require every category of information for every Challenge.
The specific information processed depends on the Challenge and its configuration.
3.3 AI Capability Reports
The Service may generate reports based on activity completed through an authorized Challenge or capability program.
A Capability Report may contain:
- Results associated with demonstrated AI capability.
- Indicators of judgment quality, critical thinking, reasoning and other evaluated dimensions.
- Observations concerning how a participant approaches AI-assisted work.
- Supporting response or interaction evidence.
- Relevant classifications or capability indicators.
- Evaluation version and methodology references.
- Completion or integrity status.
- Recommendations or insights where supported.
These results describe observed performance in a particular context.
They should not be interpreted as fixed measures of intelligence, character, worth or guaranteed future performance.
3.4 Workforce Capability Information
When your organization uses Answerr for workforce capability development, we may process:
- Employee or participant identity.
- Organizational role or department.
- Challenge participation.
- Capability results and reports.
- Learning and development progress.
- Repeated evaluation results.
- Authorized AI interaction evidence.
- Team-level or organizational analytics.
Information collected through workforce programs is subject to the relevant organization’s settings, disclosures, contractual requirements and applicable law.
3.5 Individual AIQ™ Information
Where you use individual credentialing features, we may collect or generate:
- Qualifying Challenge participation.
- AI capability results.
- Credential eligibility.
- Credential identifiers.
- Issue and expiration dates, where applicable.
- Evaluation framework versions.
- Verification status.
- Credential revocation or correction records.
- Public verification preferences.
Not every Challenge results in an AIQ™ credential.
3.6 Technical and Usage Information
We may automatically collect:
- IP address.
- Browser type and version.
- Device type.
- Operating system.
- Approximate location derived from IP address.
- Pages and features accessed.
- Login events.
- Session duration.
- Usage timestamps.
- Application error logs.
- Performance and diagnostic information.
- Security and authentication events.
We use this information to operate, maintain, improve and protect the Service.
3.7 Payment and Subscription Information
For paid subscriptions, we may collect:
- Billing name and contact information.
- Billing address.
- Subscription plan.
- Invoice and transaction records.
- Payment status.
- Applicable tax information.
- Usage allowances, such as candidate or participant volume.
Payment card information is processed by authorized payment processors. Answerr does not ordinarily store complete payment card numbers.
3.8 Communications
We may process information you provide through:
- Customer support.
- Sales inquiries.
- Product demonstrations.
- Feedback.
- Surveys.
- Events and webinars.
- Business correspondence.
- Privacy and legal requests.
This may include messages, attachments and records needed to respond to your request.
3.9 Optional Monitoring and Identity Verification
Certain Challenges may support optional identity verification or session monitoring.
Where such features are enabled, additional information may be collected, including identity-verification information or session media, as disclosed before collection.
Camera-based session monitoring is disabled by default.
Any enabled monitoring must comply with applicable notices, permissions and legal requirements.
We do not treat ordinary use of Answerr as permission for undisclosed monitoring of your activity outside the Service.
4. Where Information Comes From
We collect personal information from several sources.
Directly from you: When you register, complete a Challenge, communicate with us or otherwise use the Service.
From Organizations: When an employer, staffing firm, educational institution or other organization invites you, creates an account or supplies relevant participation information.
From authorized integrations: When an organization connects an applicant tracking system, identity provider, learning management system or other application.
Automatically through the Service: Through technical logs, usage events, security mechanisms, cookies and similar technologies.
From business and professional sources: When permitted by law, we may receive business contact information through professional platforms, referrals, events or other legitimate commercial sources.
We do not assume that information received from an employer or another organization is accurate. Where appropriate and legally required, individuals may request correction of inaccurate information.
5. How We Use Personal Information
We process personal information for the purposes described below.
5.1 Providing the Service
We use information to:
- Create and manage accounts.
- Authenticate users.
- Administer Challenges.
- Generate Capability Reports.
- Support workforce development programs.
- Issue and verify eligible AIQ™ credentials.
- Provide organization administration and reporting.
- Maintain integrations.
- Process subscriptions and payments.
- Deliver customer support.
5.2 Measuring AI Capability
We may analyze permitted Challenge interactions and work products to produce observations about demonstrated AI capability.
This processing may involve automated analysis, AI models, scoring systems and other evaluation methods.
The results are intended to reflect behavior observed within a defined evaluation context.
We do not represent that these results establish an individual’s general intelligence, character or suitability for every role.
5.3 Security and Integrity
We process information to:
- Detect unauthorized account access.
- Prevent fraud or misuse.
- Investigate technical incidents.
- Protect confidential Challenge Content.
- Identify potential Challenge integrity issues.
- Maintain appropriate security controls.
- Respond to legal and regulatory obligations.
Where automated signals raise a material integrity concern, appropriate review procedures apply before a final integrity determination is made.
5.4 Service Improvement
We may use operational and technical information to diagnose errors, improve reliability, develop features and understand product performance.
We do not use Customer Data to train general-purpose AI models.
Research or development uses involving identifiable Customer Data beyond ordinary Service delivery require an appropriate legal basis and any additional permissions or agreements required by law.
5.5 Aggregated and De-Identified Analytics
We may generate aggregated or de-identified information for purposes including:
- Product analytics.
- Security analysis.
- Capability research.
- Benchmarking.
- Understanding broad patterns in AI-assisted work.
We implement safeguards designed to prevent individuals or organizations from being identified in information presented as de-identified.
We do not attempt to re-identify such information except where legally permitted to test or validate the effectiveness of de-identification safeguards.
5.6 Communications
We use contact information to send relevant account, billing, security, service and support communications.
We may also send product updates and marketing communications where permitted by applicable law.
You can opt out of non-essential marketing communications at any time.
5.7 Legal Obligations
We may process or preserve information when reasonably necessary to comply with applicable law, respond to lawful requests, enforce agreements, or establish, exercise or defend legal claims.
6. Legal Bases for Processing
Where the General Data Protection Regulation (“GDPR”), UK GDPR or similar legislation applies and Answerr acts as a controller, our processing relies on one or more applicable legal bases.
| Purpose | Potential legal basis |
|---|---|
| Creating accounts and delivering requested services | Performance of a contract |
| Providing personal Challenges and credentialing | Performance of a contract |
| Processing payments and subscriptions | Contract; legal obligation |
| Securing accounts and preventing abuse | Legitimate interests; legal obligation |
| Responding to support requests | Contract; legitimate interests |
| Improving reliability and functionality | Legitimate interests |
| Maintaining lawful business communications | Legitimate interests or consent |
| Sending marketing where consent is required | Consent |
| Optional monitoring or other consent-based features | Consent or another lawful basis, as applicable |
| Meeting regulatory and legal requirements | Legal obligation |
| Establishing or defending legal claims | Legitimate interests or other applicable legal basis |
Where we rely on legitimate interests, we consider the relevant interests, necessity and potential effects on individuals.
Where Answerr acts as a processor on behalf of an Organization, that Organization is generally responsible for establishing the applicable lawful basis for its purposes.
Where processing involves sensitive information or automated decisions, additional legal conditions or safeguards may apply.
7. Hiring Challenges and Candidate Privacy
We recognize that privacy is particularly important when individuals participate in employment-related evaluations.
7.1 Information Provided to Employers
When you participate in a hiring Challenge sponsored by an organization, that organization may receive information associated with your participation.
Depending on the relevant product configuration and disclosures, this may include:
- Candidate identity.
- Challenge completion status.
- Submitted work and relevant interaction evidence.
- Capability Reports.
- Dimension-level results.
- Observed capability indicators.
- Integrity or technical review status.
The sponsoring organization is responsible for using this information lawfully and for purposes consistent with applicable disclosures.
7.2 Separation From Personal Accounts
Completing an employer-sponsored Challenge does not automatically grant that employer access to your unrelated personal Answerr account.
The employer does not automatically receive access to privately completed Challenges, personal credentials or activities associated with other organizations.
Any additional sharing must be authorized and disclosed as required by law.
7.3 Candidate Visibility and Access Rights
The product may allow sponsoring organizations to configure whether certain evaluation reports are displayed to candidates.
These settings do not eliminate statutory rights to access, correct or dispute personal information.
Candidates may contact the sponsoring organization or Answerr to request information about applicable rights and available procedures.
Where the sponsoring organization controls the relevant data, Answerr will assist in responding to requests as required by law or contract.
7.4 Human Decisions
Answerr may use automated systems to generate evaluation information.
Answerr does not independently decide whether a candidate is hired, rejected, promoted or otherwise selected for employment.
Those decisions are made by the relevant employer or other authorized decision-maker.
The use of automated evaluation information in employment decisions may be subject to additional legal obligations.
Nothing in this Policy limits an individual’s rights concerning automated decision-making, explanation, human review or challenges to decisions where those rights apply.
7.5 Accuracy and Disputes
If you believe that your Capability Report contains inaccurate personal information or that your Challenge was affected by a technical or integrity issue, you may contact support@answerr.ai with “Challenge Appeal” in the subject line.
We will review matters within our responsibility and, where applicable, coordinate with the sponsoring organization.
A scoring disagreement does not automatically establish a factual error, but individuals retain applicable statutory rights to dispute inaccurate or incomplete information.
Where consumer-reporting or employment-screening laws apply, the corresponding statutory rights and procedures take precedence over any narrower product process.
7.6 Employment Screening Laws
Depending on the characteristics and intended use of particular services, employment-related evaluation information may be subject to the Fair Credit Reporting Act, automated employment decision-system laws or comparable regulations.
Where such laws apply, Answerr and the relevant organizations will be responsible for their respective legal obligations.
This Policy does not determine or exclude any classification, responsibility or individual right imposed by applicable law.
8. Staffing Agencies, Recruiters and Integrations
8.1 Recruitment Agencies
When an authorized staffing firm or recruitment agency administers a Challenge on behalf of an employer, relevant candidate information may be shared with the designated employer client.
Such sharing must be within the scope of the applicable services, disclosures, contractual permissions and legal requirements.
An agency does not receive unrestricted permission to distribute candidate information to unrelated organizations.
8.2 Applicant Tracking Systems
Answerr may connect with supported applicant tracking systems (“ATS”) and recruiting applications.
When an organization authorizes an integration, information may be transferred between Answerr and the connected system.
This may include:
- Candidate identification and contact information.
- Job or application identifiers.
- Challenge invitations.
- Participation status.
- Completion information.
- Capability Reports and relevant evaluation results.
The information exchanged depends on the integration and authorized configuration.
8.3 Third-Party Responsibility
Where personal information is transferred to an independently operated employer or third-party application, that recipient may process the information under its own privacy policies, obligations and retention rules.
Answerr does not control all subsequent processing by independent recipients.
Organizations are responsible for ensuring that connected systems and recipients are appropriately authorized.
8.4 No Unrestricted Cross-Organization Sharing
Answerr does not automatically make an individual’s sponsored Challenge results available to every employer or staffing agency using the Platform.
Sharing across organizations requires an appropriate authorization, configured workflow and lawful basis.
9. Workforce Capability and Employee Privacy
Organizations may use Answerr to understand how employees demonstrate AI capability and to support learning and development.
9.1 Information Available to Organizations
Depending on the configuration and applicable permissions, authorized administrators may access:
- Participation and completion records.
- Individual Capability Reports.
- Relevant evaluation evidence.
- Workforce development progress.
- Team and organizational capability information.
- Applicable usage and administrative analytics.
9.2 Employee Transparency
Organizations are responsible for communicating how employee information will be used, who may access results and whether those results may influence employment-related decisions.
Answerr does not authorize unlawful or undisclosed employee surveillance.
9.3 Optional Connected AI Activity
Where Answerr offers optional connections to other AI applications, browser extensions or similar capabilities, these features are subject to additional disclosures and controls.
Any such feature must explain, before collection begins:
- Which applications or environments are involved.
- What categories of information are collected.
- The purposes of collection.
- Who may access the information.
- Relevant retention arrangements.
- The permissions and controls available to participants and organizations.
Installation of an extension or activation of an integration does not authorize collection beyond the scope disclosed and lawfully permitted.
9.4 Workforce Decisions
Answerr provides capability information but does not make employment decisions on behalf of organizations.
Employers remain responsible for lawful use of reports in connection with training, promotion, performance management, compensation or other employment matters.
10. AI Model Providers and Customer Data
10.1 How AI Processing Works
Answerr uses third-party AI models to run the AI interactions within Challenges, analyze permitted Challenge interactions and support capability evaluation.
When a request requires a third-party model, relevant information may be transmitted to that provider’s infrastructure.
The transmitted information may include prompts, Challenge materials, relevant context or evaluation content needed for the requested processing.
10.2 Data Minimization
We aim to limit information transmitted to Model Providers to what is reasonably necessary for the applicable function.
Where supported, we use measures such as pseudonymous identifiers and appropriate technical controls to reduce unnecessary disclosure of directly identifying information.
10.3 No Training on Customer Data
Answerr does not use Customer Data to train its own general-purpose AI models.
We select Model Providers and maintain contractual arrangements intended to prevent content submitted through Answerr from being used to train the providers’ general-purpose models.
Answerr does not authorize Model Providers to use Customer Data for unrelated model training.
10.4 Provider Retention and Security
Provider-specific retention arrangements may vary, including retention for security, abuse prevention or other limited purposes permitted under applicable provider agreements.
Relevant provider information and data-handling arrangements are available through our Trust Center or upon request.
10.5 Subprocessors
Where a Model Provider processes personal information on Answerr’s behalf, the relationship is governed by applicable contractual and data-protection arrangements.
The legal role and permitted processing of a provider depend on the applicable service and contractual terms.
10.6 Sensitive Information
Participants should not submit sensitive personal information during a Challenge unless the relevant Service, organizational arrangement and lawful permissions expressly support that processing.
This includes protected health information, government-classified information, complete payment card data and other information requiring specialized safeguards.
11. AIQ™ Credentials and Public Verification
11.1 Credential Records
Where Answerr issues an AIQ™ credential, we may maintain information necessary to establish its validity and support verification.
This may include identity information, credential identifiers, issuance dates, evaluation version, credential status and associated verification records.
11.2 Public Sharing
Where credential-sharing functionality is available, individuals may choose to share eligible credentials through supported verification links, profiles or digital badges.
The information exposed through a public verification mechanism will depend on the relevant configuration and disclosed sharing options.
11.3 Employer-Sponsored Reports Are Different
Sharing a credential publicly is separate from an organization’s authorized access to reports generated through its sponsored Challenges.
An individual choosing not to publish a credential does not automatically revoke the sponsoring organization’s lawful access to its sponsored evaluation information.
11.4 Correction and Revocation
Credential records may be updated or revoked where necessary to address material errors, integrity concerns or other valid grounds.
Applicable correction, deletion and appeal rights remain available.
11.5 No Guaranteed Outcomes
An AIQ™ credential reflects demonstrated capability under a defined framework.
It does not guarantee employment, admission, promotion, professional licensing or any other outcome.
12. Monitoring, Biometric Information and Sensitive Data
12.1 Session Monitoring
Camera-based monitoring and similar optional features are disabled by default.
If a particular Challenge enables such functionality, participants will receive relevant disclosures before collection begins.
These disclosures will identify the information collected, its purpose, access arrangements and applicable retention period.
12.2 Biometric Information
If an enabled feature collects information classified as biometric data under applicable law, Answerr will comply with applicable notice, authorization, retention and destruction requirements.
We do not sell or commercially trade biometric information.
12.3 Special Categories of Personal Information
Answerr does not ordinarily require information about an individual’s health, religion, racial or ethnic origin, political opinions, sexual orientation or other sensitive attributes for general AI capability measurement.
However, certain information may be voluntarily submitted or may arise in lawful accessibility, accommodation, identity-verification or other permitted contexts.
Where sensitive information is processed, we apply the additional protections and legal conditions required for that processing.
12.4 Accessibility
Individuals may request assistance or report accessibility concerns by emailing support@answerr.ai with “Accessibility” in the subject line.
Accommodation-related information will be handled for appropriate purposes and subject to applicable confidentiality requirements.
12.5 Retention of Optional Session Media
Where session media is collected, the standard retention period is thirty (30) days unless an applicable agreement, investigation or legal requirement justifies a different period.
We will apply legally required retention and destruction procedures.
13. How We Share Information
We may disclose personal information to the following categories of recipients for legitimate purposes:
| Recipient | Purpose |
|---|---|
| Authorized Organizations | Access to relevant sponsored activity, reports and administrative information |
| Authorized staffing firms and employer clients | Permitted recruiting and candidate evaluation workflows |
| AI Model Providers | Running Challenges and evaluation processing |
| Cloud infrastructure providers | Hosting, storage and Service operations |
| Authentication providers | Account access and identity management |
| Payment processors | Subscription payments and billing |
| Analytics and error-monitoring providers | Performance, reliability and technical support |
| Communication and support providers | Emails, notifications and customer support |
| Authorized third-party integrations | Transferring relevant information under enabled workflows |
| Professional advisers | Legal, accounting, audit and professional services |
| Lawful authorities | Responding to valid legal requirements |
| Corporate transaction participants | Evaluating or completing a merger, acquisition, financing or similar transaction, subject to appropriate safeguards |
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.
We do not authorize unrelated third parties to access private Challenges or Capability Reports merely because they are customers of Answerr.
Where we use subprocessors, we establish appropriate contractual safeguards and remain responsible for their performance.
A current list naming each subprocessor is maintained in our Trust Center and is available on request. We give Organizations at least thirty (30) days’ notice before adding a subprocessor that processes their Customer Data, and Organizations may object on reasonable data-protection grounds during that period. Where an applicable Data Processing Addendum provides additional notice or objection rights, those provisions apply.
14. Cookies and Similar Technologies
We use cookies and similar technologies to operate our websites and applications.
14.1 Necessary Cookies
These support authentication, security, session management and essential Service functionality.
14.2 Functional Cookies
These may remember settings, interface preferences or other selected options.
14.3 Analytics Cookies
These help us understand website and product performance and improve the user experience.
14.4 Marketing Technologies
Where used, marketing technologies are limited to our public-facing marketing activities and are subject to applicable privacy requirements.
We do not authorize advertising trackers to collect private Challenge responses or other authenticated content for advertising purposes.
14.5 Cookie Choices
Where required by law, we request consent before enabling non-essential cookies.
You may manage applicable choices through the consent controls made available on our websites or through your browser settings.
14.6 Global Privacy Control
We recognize applicable legally valid opt-out preference signals, including Global Privacy Control, where required by law.
Because our stated practices do not involve selling or sharing personal information for cross-context behavioral advertising, such signals ordinarily do not require a change to those activities.
15. Data Retention and Deletion
We retain personal information for as long as reasonably necessary for the purposes described in this Policy, subject to contractual commitments and applicable law.
The following describes our standard retention framework:
| Data category | Standard retention approach |
|---|---|
| Account information | While an account is active, generally deleted within 90 days after closure |
| Organization-sponsored Challenge responses and candidate invitation data | As set in the customer agreement or Organization settings; where none is set, for the Organization’s subscription term and deleted within 90 days after it ends |
| Hiring and workforce Capability Reports | As set in the customer agreement or Organization settings; where none is set, for the Organization’s subscription term and deleted within 90 days after it ends |
| Individual Capability Reports | Generally for the account duration and up to 90 days after closure, unless a valid exception applies |
| AIQ™ credential records | For as long as necessary to support lawful verification, including at least 3 years after a sponsoring Organization’s subscription ends, subject to applicable rights |
| Optional session media | Generally 30 days, subject to investigation or legal exceptions |
| Billing and tax records | Up to seven years, or another period required by applicable law |
| Security and audit logs | Generally 12 months, unless longer retention is justified |
| Marketing information | Until opt-out or other applicable deletion, with limited suppression records where necessary |
| De-identified information | May be retained for continued lawful use while it remains appropriately de-identified |
15.1 Organization Termination
Following termination of an Organization’s subscription, relevant Customer Data will generally be deleted within ninety (90) days, subject to the applicable customer agreement, backup retention, valid credential records and legal preservation requirements.
Organizations are responsible for any record-keeping obligations that apply to their own hiring records and should export reports they need to keep.
15.2 Third-Party Systems
If an employer or staffing agency has transferred reports into its own ATS or other independent system, deleting information from Answerr does not automatically delete copies held by that organization.
Individuals may need to contact the relevant organization to exercise rights concerning those copies.
15.3 Legal Preservation
We may retain information for longer where necessary to comply with law, resolve disputes, investigate security issues, satisfy valid recordkeeping obligations, or establish, exercise or defend legal claims.
15.4 Deletion Requests
You may request deletion of eligible personal information.
We will evaluate the request under applicable law, relevant contractual arrangements and any lawful retention exceptions.
16. Security
We maintain administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure and loss.
These include, as applicable:
- Encryption in transit and at rest.
- Role-based access controls.
- Authentication and account security controls.
- Logging and monitoring of relevant security events.
- Restricted internal access.
- Documented information security policies.
- Vendor security review.
- Incident response procedures.
- Ongoing security control monitoring.
Answerr maintains a SOC 2 Type II report, examined by an independent CPA firm against the AICPA Trust Services Criteria for Security, Confidentiality and Availability, and holds ISO/IEC 27001 certification for its information security management system. The SOC 2 report is available to eligible customers and prospective customers subject to appropriate confidentiality arrangements.
Additional security information is available through our Trust Center.
Our security program is designed to meet the standards of the HIPAA Security Rule. The Service is not, however, offered as a HIPAA-regulated service, and Answerr does not act as a Business Associate without a signed Business Associate Agreement.
No system can guarantee absolute security.
If we identify a security incident affecting personal information, we will provide notifications to affected parties and authorities as required by applicable law and relevant customer agreements.
Suspected vulnerabilities or security incidents may be reported to support@answerr.ai with “Security” in the subject line.
17. Your Privacy Rights
Depending on your location and the applicable law, you may have rights concerning your personal information.
These may include:
- Accessing personal information.
- Correcting inaccurate information.
- Requesting deletion.
- Obtaining a portable copy.
- Restricting or objecting to certain processing.
- Withdrawing consent where processing relies on consent.
- Opting out of certain marketing or other legally regulated processing.
- Challenging certain automated decisions or requesting human intervention where applicable.
- Appealing certain denied privacy requests.
17.1 How to Exercise Your Rights
Email support@answerr.ai with “Privacy Request” in the subject line.
We may request information reasonably necessary to verify your identity and protect personal information from unauthorized disclosure.
We will respond within the timelines required by applicable law.
17.2 Organization-Sponsored Data
If an employer, staffing firm or educational institution controls the relevant information, we may direct you to that organization or forward your request as appropriate.
Answerr will provide assistance required under applicable law and contractual arrangements.
You may also contact Answerr concerning information for which Answerr has independent controller obligations.
17.3 European Economic Area, United Kingdom and Switzerland
Where applicable, individuals have rights under the GDPR, UK GDPR or corresponding laws, including access, rectification, erasure, restriction, objection, portability and withdrawal of consent.
Individuals may also have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
You may lodge a complaint with the competent supervisory authority.
17.4 California Residents
Where the California Consumer Privacy Act, as amended, applies, eligible California residents may have rights to know, access, correct and delete personal information; obtain information about relevant processing; and exercise applicable opt-out or limitation rights.
Additional rights or disclosures may apply to certain automated decision-making uses under the relevant rules and their implementation dates.
We do not sell or share personal information, and we have not done so in the preceding twelve (12) months.
Answerr will not unlawfully discriminate against an individual for exercising applicable privacy rights.
Authorized agents may submit requests where permitted by law.
17.5 Other U.S. States
Residents of states with applicable comprehensive privacy laws may have additional rights concerning access, deletion, correction, portability, targeted advertising, sales or certain profiling activities.
The scope of these rights depends on the relevant law, its applicability and the circumstances of processing.
17.6 Appeals
Where applicable law provides a right to appeal a denied privacy request, you may email support@answerr.ai with “Privacy Appeal” in the subject line.
We will respond in writing within forty-five (45) days with our decision and reasoning. If we deny the appeal, we will tell you how to contact your state attorney general.
17.7 Response Periods
We generally respond to verified U.S. state-law privacy requests within forty-five (45) days, subject to legally permitted extensions or different statutory periods.
For applicable GDPR and UK GDPR requests, we generally respond within one month, subject to legally permitted extensions.
Nothing in this section extends or limits response periods established by mandatory law.
18. International Data Transfers
Answerr is based in the United States.
Personal information may be processed in the United States and other jurisdictions where our authorized service providers operate.
Where required for international transfers of personal information, we use appropriate legal transfer mechanisms and supplementary safeguards.
These may include the European Commission’s Standard Contractual Clauses, applicable UK transfer instruments and Swiss adaptations where relevant and validly implemented.
You may request information about applicable transfer safeguards by contacting support@answerr.ai.
19. Educational Institutions and Student Privacy
Answerr may provide services to universities, colleges, schools and other educational organizations.
Where an institution subject to the Family Educational Rights and Privacy Act (“FERPA”) designates Answerr as a “school official” with a “legitimate educational interest” under 34 C.F.R. § 99.31(a)(1)(i)(B), Answerr:
- uses those records only to perform the services for which the designation was made, under the institution’s direction;
- does not re-disclose them except as directed by the institution or as permitted by FERPA; and
- remains subject to the institution’s direct control with respect to their use and maintenance.
Answerr does not sell student personal information, use it for targeted advertising or use it to build profiles for any purpose other than providing the Service to the institution that provided it.
Educational institutions remain responsible for establishing the applicable legal basis for their use of the Service and administering their obligations concerning student records.
Students should ordinarily direct FERPA requests to their educational institution.
Answerr will provide appropriate contractual and legally required assistance.
20. Children’s Privacy
The Service is generally intended for individuals aged sixteen (16) and older.
It is not directed to children under thirteen (13).
We do not knowingly collect personal information from children under thirteen (13).
Organizations must not invite or provision users below the applicable age requirement without a separate written agreement establishing appropriate protections and required authorizations.
If you believe a child has provided personal information in violation of this Policy, contact support@answerr.ai.
We will investigate and take appropriate action, including deletion where required.
21. Third-Party Websites and Services
Our websites and applications may link to external websites, platforms and services.
These may include AI providers, employer systems, educational applications, payment platforms and other third-party services.
This Privacy Policy does not govern independent third-party processing outside Answerr’s control.
We encourage users to review the applicable privacy policies of those services.
22. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the Service, data practices, legal requirements or security arrangements.
When we make material changes, we will generally provide at least thirty (30) days’ advance notice by email, in-product communication or another appropriate method.
Changes that must take effect sooner for legal or urgent security reasons may be implemented as permitted by law.
Where applicable law requires consent or another specific authorization for a new processing activity, continued use of the Service will not substitute for that requirement.
The current version and effective date will be displayed on this page.
Existing negotiated customer data-protection obligations remain effective according to their terms.
23. Contact Us
For privacy questions, personal-data requests or concerns about how information is handled, contact:
Answer Labs Inc., doing business as Answerr
131 Continental Drive, Suite 305, Newark, DE 19713, New Castle County, Delaware, United States
Email: support@answerr.ai
Website: https://answerr.ai
Trust Center: https://trust.inc/org_6908e3c1fe011d5b10bca425
To help us process requests efficiently, please use the relevant email subject:
| Request | Subject |
|---|---|
| Personal information access, correction or deletion | Privacy Request |
| Appeal of a privacy decision | Privacy Appeal |
| Challenge integrity or result concerns | Challenge Appeal |
| Security vulnerabilities or incidents | Security |
| Accessibility questions | Accessibility |
| Legal notices | Legal |
Answerr. Measure how people work with AI. Hire with evidence. Develop AI capability.
