Privacy Policy
AI Governance Institute is committed to transparency about how this site operates. This policy describes what data we collect, why, and how it is used.
Effective date: September 2026
What we collect
You can browse the site, take an assessment, and export an action plan without an account. When you sign in with Google or Microsoft, we use the provider’s account identifier to identify your account and display an email address, username, or name when available, and we store basic account metadata: when the account was created, the last sign-in time, and a sign-in count. Accounts from different providers are separate. When you save an assessment, we store its name, answers, results, and save date. When you save a plan, we store its name, assessment answers, organization profile, control and evidence snapshot, task selections, owners, target dates, status, and notes. When you create a watchlist, we store its name, description, followed requirements and jurisdictions, optional plan link, and your review status for updates. We also receive information you voluntarily provide when you contact us or subscribe to the newsletter.
Accounts, saved plans, and watchlists
Saved plans are stored in Google Cloud Firestore and are available through your signed-in account. Plans are private to their owner and are not publicly shared. We use account and plan data to provide sign-in, saving, retrieval, editing, and export. We do not use saved plan content for advertising or sell it. Watchlists and their review history are also private to your account and stored in Firestore to provide personalized regulatory updates. You can delete individual plans from their plan page and watchlists from their settings. From your account overview page you can also export all of your account, assessment, plan, and watchlist data as a JSON file, or permanently delete your account, saved assessments, plans, and watchlists. Deletion is immediate and cannot be undone. Contact corrections@aigovernance.com if you would rather we handle either request for you.
Cookies and temporary drafts
We use essential, HTTP-only cookies for account sessions and the sign-in process. Your session may include your Google profile photo URL, which we use to display your avatar in the account menu. The photo loads from Google without sending the current page as a referrer. To preserve an unsaved plan during sign-in, we temporarily store a draft in this browser tab and remove it after a successful save. Previously saved device-only drafts can be restored and moved into your account. Signing out removes the account session cookie.
Analytics
We use Google Analytics 4 for aggregate usage measurement on public pages, including pages visited, referral source, and device type. Google Analytics uses first-party cookies. We do not initialize analytics on account, sign-in, assessment quiz, plan, results, or admin pages. You can opt out of Google Analytics using browser controls or the Google Analytics Opt-out Browser Add-on.
Email newsletter
Newsletter subscriptions are handled by Buttondown. Signing in, saving a plan, or creating a watchlist does not subscribe you. You can unsubscribe using the link in any newsletter email. We use your newsletter email address to send the updates you requested.
Third-party services
We use Google and, when enabled, Microsoft for sign-in, Google Cloud Run for hosting, Google Cloud Firestore for saved plans, Google Analytics for public-page usage measurement, and Buttondown for newsletter delivery. Each provider processes the information needed to deliver its service under its own privacy terms. Our sign-in flows request basic profile, identity, and email access. They do not request access to your email messages, files, or calendars.
Contact and data requests
Contact corrections@aigovernance.com with privacy questions, corrections, or requests to access or delete your personal information. We retain correspondence to respond to your request and do not add you to a mailing list without your consent.
Changes to this policy
We update this policy when our data practices change and show the effective date below.
Contact
Questions about this privacy policy can be sent to corrections@aigovernance.com.