Privacy policy

1. Scope and who is responsible

ElioVP BV is the data controller for the public website, trial registrations, demo and custom-offer enquiries, customer and reseller contacts, billing administration, account security, support and direct service communications. This product policy should be read with ElioVP’s general Privacy Policy; this policy gives the more specific information for Ready AI Go.

For employee accounts, organisation courses and training records, the customer organisation normally determines why and how the data is used and is the controller. ElioVP processes that data on the organisation’s behalf under the data-processing terms in the Terms of Service. ElioVP remains a controller for its own security, legal and business-administration purposes.

Read the general ElioVP Privacy Policy

Read the Ready AI Go data-processing terms

2. What data do we use?

Depending on how you use Ready AI Go, we process:

• Trial-registration and business-enquiry data: company name, first and last name, work email, preferred language, terms acceptance, optional marketing consent and, for demo or custom-offer enquiries, optional website, organisation size, region and phone number.
• Account and employment-reference data: first and last name, work email, language, role, organisation, account status, optional job role and internal employee ID, plus invitation and session information.
• Company and content data: company name, logo, approved tools, policy link, security or privacy contact, settings, organisation-authored courses and other guidance supplied by the customer.
• Training data: assignments, deadlines, course progress, formative responses, assessment answers, scores and completion timestamps.
• Subscription and billing data: active-user quantity, Paddle customer, subscription and transaction references, billing status, period dates, revenue adjustments and, for resellers, attributed companies and commission information. ElioVP does not receive full payment-card details.
• Technical and security data: IP address, browser user agent, session identifiers and limited audit or delivery records.
• Optional public-site measurement data: your consent categories, policy version and decision time; public page path and language; bounded UTM values, landing paths and referrer origin; and, with advertising-measurement consent, Google click identifiers. Browser analytics contain only sanitised public-page and interaction labels. When a qualifying new demo or custom-offer request has a validated GCLID, it is measured separately by the server using that GCLID, an opaque transaction ID, event time, conversion destination and consent state. Other consented Google click identifiers may remain attached to the enquiry for attribution but are not sent through this Count-One conversion path. Contact names, email addresses, phone numbers and other form fields are not sent to Google.
• Communications you send to us, such as support questions or replies about a business enquiry.

We receive this information from you, your employer or its administrators, an authorised reseller, automatic use of the service, campaign parameters and referrer origin in your browser, Paddle for verified subscription events and, after consent, Google measurement services. Required fields are identified in the interface; without them we may be unable to answer a request, create secure access or provide the service.

3. Why do we use it?

We use personal data only for defined purposes and a valid legal basis:

• To verify a self-service trial registration, create the requested workspace, and review or answer demo and custom-offer enquiries, based on requested pre-contractual steps and our legitimate interest in handling business enquiries.
• To manage customer and reseller relationships, create verified or invited accounts, provide and support the service and send necessary service messages, for performance of the customer agreement and our legitimate interest in operating the business relationship.
• To send occasional Ready AI Go product news and practical AI-learning updates only when you gave optional consent. You can withdraw that consent at any time without affecting service access.
• With your separate optional consent, to understand aggregate use of public pages through Google Analytics and measure whether a Google ad led to a newly completed demo or custom-offer request through Google Ads. Under Basic Consent Mode, Google Tag Manager does not load or contact Google before you allow analytics or advertising measurement. The browser never emits a lead-conversion event. Ready AI Go may attach exactly one Google click identifier to the new request. If it is a validated GCLID, the server may later send Google only that GCLID, an opaque transaction ID, the event time, conversion destination and consent state through the Google Data Manager API. Automatic Analytics page views, History Change tracking, enhanced measurement and automatic form collection are disabled. Remarketing, personalised advertising and enhanced conversions are not enabled.
• To administer trials, subscriptions, user quantity, invoicing, revenue and refunds, for performance of the customer agreement, our legitimate interests and compliance with accounting and tax obligations.
• To authenticate users, prevent misuse and keep the platform secure, based on our legitimate interests and contractual obligations.
• For employee training and reporting, based on the legal basis determined and communicated by the customer organisation.
• To meet legal obligations and establish, exercise or defend legal claims where necessary.

4. Who receives the data?

Access is limited to people and providers who need it for the service:

• Authorised administrators of the relevant customer organisation can see their users’ identity, assignment, progress, score and completion information, but not their individual course or assessment answers. Learners see their own training data and submitted assessment feedback. Access by authorised ElioVP staff is limited to operations, security and support needs.
• Cloudflare, as infrastructure provider for hosting, the application database and transactional email delivery.
• Google, which receives selected public-page analytics or, after advertising-measurement consent, a validated GCLID, opaque transaction ID, event time, conversion destination and consent state for server-side conversion measurement. Google does not receive other stored click identifiers or the contact details submitted in a Ready AI Go enquiry form through this conversion path.
• Paddle, as authorised reseller and an independent controller for checkout, payment, tax, invoicing, subscription and refund data under Paddle’s own privacy notice.
• An authorised reseller can see company identity and aggregate active-user, billing, revenue and commission information only for companies permanently attributed to that reseller. Resellers cannot access employee identities, training records, assessments or account requests.
• Public authorities or professional advisers only when disclosure is legally required or necessary to protect legal rights.

Read Google’s Privacy Policy

Read Paddle’s Privacy Notice

We do not sell personal data and do not use Ready AI Go measurement for behavioural advertising, remarketing or personalised advertising.

5. AI and automated decisions

Course and assessment answers are never sent to a language model. The controlled prompt exercise uses fixed, fictional context and does not accept free-form company or personal data.

Assessment scores are calculated deterministically. There is no automated pass or fail decision and Ready AI Go does not make decisions that produce legal or similarly significant effects.

6. How long do we keep data?

We keep personal data only for as long as needed for the purpose, the customer agreement and applicable legal requirements. In particular:

• Business enquiries are kept while we handle the request and afterwards only while reasonably needed for follow-up, business records or a legal claim. They are kept separately from customer training data.
• Account, Customer Content and training records are kept during the customer relationship and are deleted or returned afterwards in accordance with the customer’s instructions, the data-processing terms and applicable law. A company can deactivate a learner while retaining training history or permanently delete the learner and their personal training record.
• Customer, contract, supplier and accounting records that ElioVP must keep as controller are retained for up to 10 years after the relevant contract or project ends, and longer only where specific law or an ongoing dispute requires it.
• Magic-link and trial-registration tokens expire after 30 minutes. Sessions expire after seven days and are revoked when a user or company is deactivated.
• An unfinished assessment draft is kept only in the learner’s browser and is removed after successful submission or when site data is cleared.
• The necessary consent-preference cookie lasts up to six months. Optional lead-attribution storage and Google Ads click storage last up to 90 days, and Google Analytics cookies can last up to two years. Consented attribution attached to a business enquiry is retained with that enquiry under the business-request period above.

7. Security and international transfers

Ready AI Go uses tenant-separated access, role-based permissions, hashed single-use sign-in tokens, limited logging and session revocation. Google measurement is limited to public pages and does not run in learner, company-administrator, reseller or platform-administrator workspaces. Core application data is hosted in the EU.

If a provider processes limited operational data outside the European Economic Area, ElioVP uses the safeguards required by applicable data-protection law.

8. Your rights

Depending on the situation, you may request access, correction, erasure, restriction or portability of your personal data, object to processing, or withdraw consent where processing relies on consent.

For customer-managed training data, contact your organisation first because it controls that processing. You can also contact ElioVP at info@eliovp.com. We may request information reasonably needed to verify your identity and will respond within one month; a complex request may lawfully take up to two additional months. A right may be limited where a legal obligation, legal claim or another GDPR exception applies.

You may withdraw marketing consent or object to direct marketing at any time by replying to a marketing message or contacting ElioVP. Marketing consent is optional, is recorded with its copy version and timestamp, and is never a condition for trial, demo, offer or service access. Ready AI Go does not use behavioural advertising.

Analytics and advertising-measurement choices are separate from direct-marketing consent. Use the Cookie preferences control on any measured public page to grant, refuse or withdraw either measurement category. A changed choice applies to future measurement; browser settings can remove existing Google cookies and local storage.

Contact the Belgian Data Protection Authority

9. Cookies and browser storage

Ready AI Go uses necessary first-party storage for language, secure authentication, consent preferences and an unfinished assessment draft. With your prior consent, public pages can use Google Analytics and Google Ads conversion-measurement storage. The Cookie Policy lists each technology, recipient and duration.

Read the Ready AI Go Cookie Policy

10. Changes and questions

We may update this policy when the service, providers or legal requirements change. The date above identifies the latest version. Questions, comments or privacy requests can be sent to ElioVP using the contact details in section 1.