Privacy Policy
MeetRobots Limited t/a Abracademy Last updated: September 2026
1. Who we are
MeetRobots Limited t/a Abracademy ("Abracademy", "we", "us", "our") operates The Extraordinary Teams Accelerator, a team development platform.
For personal data processed through the platform on behalf of client organisations (including any participant or authorised user data), we act as a data processor; the client organisation remains the data controller. For data we collect for our own purposes (website visitor analytics, administrator and billing contacts), we are the data controller.
Contact: [email protected]
2. What personal data we collect
Account and access data
For users with platform accounts, we collect:
- Your name
- Your work email address
- Login activity and session data
- Communication preferences
Identity information used for access and communications is stored separately from survey response data.
Survey response data
Survey responses are collected in a way that cannot be linked to the individual who gave them, and minimum reporting thresholds are applied so that no one can be identified within a small team. Once an assessment closes, we keep only team-level aggregate results and a de-identified dataset that contains no personal data. It is not possible to identify an individual from the stored responses.
Participants are asked not to include names or directly identifying information in free-text comments.
Website visitors
We collect analytics about how the platform is used, so we can improve it. This is not linked to your name, email address or account, and no profile is built about you. IP addresses are discarded before any data is stored. You can turn analytics off on our cookie settings page (/legal/cookie-settings).
3. How we use your data
We use personal data collected from authorised users and administrators solely to:
- Provide and manage access to the platform
- Send platform-related communications (account setup, notifications)
- Respond to support requests
- Comply with our legal obligations
We do not use your data for marketing, advertising, or profiling. We do not sell your data to any third party.
AI-assisted features
Where enabled, AI assists in generating narrative report summaries from aggregated and anonymised team-level results, and helps users discover relevant toolkit resources. No employee identities are provided to AI services for report generation. AI is not used for employee monitoring, performance management, recruitment, promotion, disciplinary decisions or automated employment decisions.
4. Legal basis for processing (UK GDPR)
We process personal data on the following legal bases:
- Contract: processing necessary to deliver the platform services
- Legitimate interests: platform security, fraud prevention, service improvement, and understanding how the platform is used so we can improve it
- Legal obligation: where required by applicable law
5. Data retention
We retain account data for as long as your organisation uses the service. When that ends, or on request, personal data is deleted or returned in line with our Data Processing Agreement, and in any event within 30 days.
A de-identified dataset used for benchmarking, which is not personal data, may be retained after the engagement ends.
6. Who we share data with
We share data only with the following sub-processors who assist us in delivering the platform. Each has been assessed for security compliance.
| Provider | Purpose | Applies when | Location |
|---|---|---|---|
| Cloudflare | DNS, CDN, security; global and China static content delivery; encrypted off-site database backups (deleted after 30 days) | All deployments | Global edge network; backups held in the EU |
| Vercel | Application hosting and build pipeline | All deployments | EU (Frankfurt) |
| Neon (a Databricks company) | Database (Postgres); system of record for survey data | All deployments | EU (Frankfurt) |
| Clerk | Authentication and identity management | All deployments | US (UK Extension to the EU–US Data Privacy Framework + Standard Contractual Clauses) |
| Cloudinary | Media storage and delivery | All deployments | US |
| Sentry | Error monitoring and logging | All deployments | EU (Germany) |
| PostHog | Product analytics | Where enabled | EU (Germany) |
| AWS Bedrock | AI report generation and in-app search — Claude models run on AWS Bedrock with the processing region pinned to the EU | Where enabled | EU |
| Google Cloud (Vertex AI) | AI report generation and in-app search — Claude models on Google Cloud, EU region, used as a backup to AWS Bedrock | Where enabled | EU |
| Mailjet | Transactional email (account and notification emails) | All deployments | EU |
Core survey data is held in the EU (Neon, Frankfurt). Our authentication provider (Clerk) processes limited data in the US; cross-border transfers to countries outside the UK/EEA are governed by the UK Extension to the EU–US Data Privacy Framework, UK International Data Transfer Agreements, or EU Standard Contractual Clauses, as applicable.
We do not share personal data with any other third party without your explicit consent, except where required by law.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Object to processing based on legitimate interests
- Portability of your data in a machine-readable format
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
Where we process data on behalf of your employer or another client organisation, that organisation is the data controller and your request may need to be directed to them; we will assist them in responding.
If you are dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS 1.2 or higher) and at rest. Sub-processors are assessed for security before adoption and hold recognised independent security certifications; our sub-processor register is available on request.
9. Cookies
Please see our Cookie Policy for details of the cookies we use.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. The date at the top of this page shows when the policy was last updated.
11. Contact
For any questions about this policy or how we handle your data:
Email: [email protected] Post: MeetRobots Limited t/a Abracademy, 506 Kingsbury Road, London NW9 9HE