Privacy and deletion
This MVP is designed to work without an account and without retaining your assessment after the active browser session ends.
What this MVP does today
- No account is required.
- No employer or manager access.
- No cookies are used for assessment state.
- No localStorage assessment persistence.
- No database persistence.
- No Supabase.
- No analytics are currently implemented.
- Your answers live only in active, in-memory application state.
- Refreshing or closing the active session may restart the review.
- “Start over” clears the active assessment state.
- No raw calendar data exists, because Outlook is not enabled.
- No payment or paid-report data is collected in the current implementation.
In-memory state is cleared when you start over or the session ends. This is not a guarantee of secure deletion from device memory or browser internals.
Information not collected
- Employer name
- Manager name
- Patient information
- Ticket descriptions
- Workplace-dispute narratives
- Medical history
- Mental-health diagnosis
- Disability information
- Calendar subjects
- Attendee names
- Email addresses
- Locations
- Join URLs
- Attachments
Paid report
- The $9 offer is currently an inactive demand-test surface.
- Payment and fulfilment are not enabled.
- No paid-report information is collected.
- A legal and privacy review is required before accepting the first paid report.
Future connected-calendar processing
Future intended behaviour — not enabled in this MVP.Connected calendar data would be processed temporarily into aggregate values, and raw calendar content would be discarded after processing.
- Account-less access tokens would be discarded after aggregate processing.
- No refresh token would be retained without explicit account creation and consent.
- The Microsoft Graph field set remains unverified.
- Restrictive enterprise tenants may block access.
Retention period
Paid-report retention has not yet been finalised. Paid checkout and fulfilment must remain disabled until a specific retention period, access controls, and deletion process are approved.
This is separate from the current free manual flow, which does not persist your assessment answers.
Deletion
- “Start over” clears the active review state.
- Closing or refreshing may end the in-memory session.
- No account or stored assessment record currently exists to delete.
The product would provide:
- A clear deletion request method.
- Deletion confirmation.
- Immediate deletion of any connected access token.
- Deletion of retained data within the approved retention period.
See also How the workload review works.