Privacy Policy

This Privacy Policy explains what information PIG³ (operated by the Polingov Institute, at pigframework.com) collects, how we use it, and the choices you have. By using PIG³, you agree to the practices described here.

1. Information we collect

• Account information: name and email, via our authentication provider (Clerk).
• Organization information: organization name, industry, size, and team member roles.
• Assessment data: your answers to the PIG³ assessment questions and the resulting scores.
• AI Coach conversations: messages you send to the AI Coach, used to generate responses and, with your organization's activity, qualitative insights.
• Uploaded documents: on Business and Enterprise plans, files you upload (policies, SOPs, org charts, etc.) to ground your reports in real evidence.
• Usage data: feature usage, plan limits consumed, and basic technical logs needed to operate and secure the platform.
• Voice input: if you tap the microphone in PIG³ Chat, your recording is sent to a speech-to-text service to turn it into text. We keep the length of the recording to apply plan limits, not the recording or the words.
• Messages and requests you send us: feedback you submit in the product, and the name, email and message you send through the plan request form.

2. How we use your information

• To calculate your organization's health scores and generate reports.
• To power the AI Coach, including retrieving relevant context from your assessment and, where applicable, your uploaded documents.
• To enforce plan limits (assessments, AI messages, team members, documents), to send you emails about your account and plan (for example reminders to review your progress, weekly plan updates, and notices before a plan ends), and to manage plan requests.
• Reminder and weekly emails can be stopped in Settings or with the link at the bottom of each email. Notices about your account and plan are still sent.
• To notify us when a new account is created, so we can support onboarding.
• To improve the platform and fix issues.
• To give support, our administrators can open an organization in a read-only view. Team Discussion content is hidden in that view.

3. AI processing

Assessment context, conversation content, and (where applicable) uploaded document excerpts are sent to third-party AI model providers (via OpenRouter) to generate AI Coach responses, qualitative insights, and document-grounded findings. This also includes spoken recordings you choose to make, the text of documents you upload (sent to make them searchable), and, at the start of a session, your organization's name and industry, which are used in a public web search for background information. We do not permit these providers to use your data to train their models beyond what is necessary to process your request. Do not upload information you are not authorized to share for this purpose.

4. Where your data is stored

Your data is stored using Supabase (database and file storage) and processed through Clerk (authentication), Resend (transactional email), and OpenRouter (AI processing). Each of these providers acts as a data processor on our behalf and is contractually and technically restricted from accessing data outside what's needed to provide their service to us.

We also use Vercel (website hosting and page-view statistics) and Sentry (error reports, see section 8). The page fonts are served from our own site. In the phone app, updates are delivered through Expo.

5. Data isolation between organizations

Your organization's assessment data, conversations, and uploaded documents are never visible to other customer organizations on the platform. Uploaded documents are used only for your own organization: to ground your reports and the AI Coach's answers. Our own administrators can open an organization in a read-only support view.

6. Data retention

We retain your data for as long as your account is active. If you delete your account or request deletion, we will remove your personal data and organization data within a reasonable period, except where retention is required for legal or legitimate business record-keeping purposes. If you delete your account and you are the only member of your organization, the organization's data is removed. If other members remain, the organization and its records stay and your account and sign-in are deleted. Records you wrote, such as decisions, plans, reviews, lessons, gaps, stakeholder notes, Coach corrections and Team Discussion messages, keep the name that was stored with them. Evidence cards, challenges and practice-table cards show "Former member" instead of your name, and so do your shared views and votes in Team Discussions (see section 11). If an owner or admin removes you from an organization, the names stored with your records stay as they are. A few records are kept without a link to your organization, for example a record that a work email domain has used the free report, and the contact details sent through the plan request form.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You may also request a copy of your organization's assessment data and generated reports.

8. Cookies and tracking

We use cookies for sign-in and sessions. We also use Vercel Analytics for page-view statistics and Sentry to receive error reports; if an error happens, Sentry may record a replay of that session, with all text and form fields hidden and Team Discussion areas blocked. The page fonts are served from our own site. We do not use advertising trackers.

9. Children's privacy

PIG³ is intended for organizational and business use. It is not directed at children, and we do not knowingly collect data from individuals under 18.

10. Changes to this policy

We may update this Privacy Policy as the platform evolves. Material changes will be noted on this page with an updated date.

11. Team Discussions and the practice table

• Everyone in your organization can read the messages of a Team Discussion. Each person's own view stays private until they have shared their own; after that they can read the views others have shared.
• AI is on by default for every organization. While it is on, messages in a Team Discussion can be sent to the AI provider to write replies and options, and the comparison of views is written with AI, so the views being compared are sent to it for that. The organization's owner or an admin can turn AI off in Settings. With AI off, nothing from Team Discussions is sent to an AI.
• When a member deletes their account, the views and votes they shared stay in the discussion with their name replaced by "Former member", so the team keeps its record. Their messages keep their name, and so does the name of whoever finalised an option. To ask for one of your views or messages to be removed, contact us (section 12).
• When a team discussion is deleted, a record is kept of its title, who deleted it, when, and how much it held, but not what it said. The organization's owner and admins can read that record.
• The practice table is off unless the organization's owner or an admin switches it on. A card is private to the person who laid it until the cards are turned over, and no AI is used. Switching it off hides the tables and keeps them.

12. Contact

For privacy questions or data requests, contact us via WhatsApp or Viber at +959420089014, or through the contact options on our landing page.

13. The phone app

The phone app uses the same account and data as the website. It asks for the microphone only when you tap the microphone button. It checks for updates through Expo. It does not contain advertising or analytics tools.