Privacy Policy

Effective Date: February 28, 2026 • Site: assess.siggysoft.org

1. Who We Are

SiggySOFT Assessment Platform is operated by SiggySOFT LLC. This Privacy Policy describes how we collect, use, and protect information in connection with your use of this service.

2. Information We Collect

Account information — username and email address used to log in. Passwords are stored as cryptographic hashes and are never readable by staff.
Assessment data — responses, scores, questionnaire content, and associated files submitted through assessments assigned to you.
Invitation and communication data — email addresses used to send assessment invitations and system notifications.
API credentials — API keys for AI and other third-party services you configure are stored encrypted on our servers.
Usage and audit logs — actions taken within the application (logins, assessment submissions, settings changes) are logged for security and troubleshooting.

3. How We Use Your Information

To authenticate you and maintain your session.
To deliver, record, and analyze assessments you are assigned or administer.
To send transactional emails such as assessment invitations, one-time login codes, and system notifications.
To enable AI-assisted features where configured — assessment content and queries may be processed by third-party AI providers (such as xAI/Grok or others you configure).
To maintain security audit logs and detect unauthorized access.

4. Assessment Data

Assessment responses and results are stored on our private servers and are accessible only to authorized assessors and administrators within your organization. Assessment data is not sold or shared with third parties. If AI-assisted analysis or scoring features are enabled, assessment content may be transmitted to the configured AI provider for processing; this is disclosed at the time the feature is used.

5. Third-Party Services

This application may integrate with the following third-party services depending on configuration:

AI providers (xAI/Grok or other configured providers) — assessment queries and context you submit may be processed by these providers under their own privacy policies.
Microsoft Entra ID (Azure AD) — if single sign-on is enabled, authentication is handled through Microsoft’s identity platform, governed by Microsoft’s Privacy Statement.
Email delivery — transactional emails are sent via a configured SMTP server.

We do not sell personal information to third parties.

6. Data Storage and Security

All data is stored on private servers accessible only to authorized personnel. Sensitive credentials (API keys, tokens) are stored using AES encryption. Access to this application is protected by authentication, session controls, multi-factor authentication options, and security monitoring. We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or disclosure.

7. Data Retention

Account and assessment data is retained for as long as your account exists or as required by your organization’s policies. Security and audit log files are retained on a rolling basis for a limited period and then automatically deleted. If you would like your account or data removed, contact us using the information below.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. Depending on your jurisdiction, you may also have the right to object to or restrict certain processing of your data.

9. Children’s Privacy

This service is not directed at children under the age of 13 and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects when the policy was last revised. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your data rights, contact SiggySOFT LLC:
Website: www.siggysoft.org