Last updated: July 2026

Privacy Policy

This policy explains how Attestio collects, uses, and protects your data when you use our service at attestio.tech.

1. Information we collect

Account information. Name, email address, and company name when you register.
Uploaded content. Questionnaire files, AI system specifications, and evidence documents you upload to generate response packs.
Usage data. Pages visited, features used, button clicks, and session behaviour — collected automatically via analytics tools (see Section 3).
Payment data. We do not store card or bank details. All payment processing is handled by PayPal, subject to PayPal's Privacy Statement.

2. How we use your data

Provide, maintain, and improve the Attestio software.
Generate AI-drafted answers and readiness scores for your uploaded questionnaires.
Process your PayPal subscription and send billing notifications.
Respond to support requests and send critical service notifications.
Understand how the product is used so we can improve it.

We do not sell, rent, or share your uploaded questionnaires or company documentation with third parties.

3. Analytics and session recording

We use PostHog (posthog.com) to collect usage analytics and session recordings. PostHog is hosted in the EU (eu.i.posthog.com) and processes data in accordance with GDPR.

What PostHog collects on this service:

Pageviews and navigation paths
Button clicks and feature interactions
Session recordings — replays of UI interactions such as clicks and scrolling, used to understand usability. We do not record uploaded questionnaire content, evidence document content, generated answers, or sensitive form fields.
Custom events: feature usage signals such as questionnaire creation, evidence uploads, and export actions — not the content of those items

Session recordings are used solely to improve the product experience. They are not shared externally. You can request deletion of your session data by emailing hello@attestio.tech.

PostHog's privacy policy is available at posthog.com/privacy.

4. AI processing

Attestio uses AI language models to interpret questionnaire questions and draft response text.
Your uploaded questionnaires are processed securely and are not used to train third-party public models.
On-premise deployment is available for organisations with strict data residency requirements. Contact hello@attestio.tech.

5. Data retention

Active accounts. Data is retained for as long as your account is active.
Deleted accounts. On request or account deletion, personal data is removed within 30 days. Encrypted backups are purged within 90 days.
Session recordings. Retained for up to 30 days, then automatically deleted by PostHog.

6. Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent to analytics data collection at any time
Lodge a complaint with your national data protection authority

To exercise any of these rights, email hello@attestio.tech. We will respond within 30 days.

7. Changes to this policy

We may update this policy from time to time. When we do, we'll update the date at the top of this page. Continued use of the Service constitutes acceptance of the revised policy.

Questions? Contact us at hello@attestio.tech