Privacy Policy
DRAFT — for platform testing, pending legal review
MeetRobots Limited t/a Abracademy Last updated: August 2026
1. Who we are
MeetRobots Limited t/a Abracademy ("Abracademy", "we", "us", "our") operates The Extraordinary Teams Accelerator, a team assessment platform.
For personal data processed through the platform on behalf of client organisations (including any participant or authorised user data), we act as a data processor; the client organisation remains the data controller. For data we collect for our own purposes — website visitor analytics, administrator and billing contacts — we are the data controller.
Contact: [email protected]
2. What personal data we collect
Account and access data
For users with platform accounts, we collect:
- Your name
- Your work email address
- Login activity and session data
- Communication preferences
Identity information used for access and communications is stored separately from survey response data.
Survey response data
Survey responses are never stored individually, regardless of access configuration. When a survey is submitted, responses are immediately aggregated into team-level scores. Only aggregate scores and unattributed text comments are retained, and minimum reporting thresholds are applied so that individuals cannot be identified from small groups. It is not possible to identify an individual's responses from the stored data.
Participants are asked not to include names or directly identifying information in free-text comments.
Website visitors
We may collect anonymised analytics data about how visitors use our website and platform. IP addresses are anonymised before any data is stored.
3. How we use your data
We use personal data collected from authorised users and administrators solely to:
- Provide and manage access to the platform
- Send platform-related communications (account setup, notifications)
- Respond to support requests
- Comply with our legal obligations
We do not use your data for marketing, advertising, or profiling. We do not sell your data to any third party.
AI-assisted features
Where enabled, AI assists in generating narrative report summaries from aggregated and anonymised team-level results, and helps users discover relevant toolkit resources. No employee identities are provided to AI services for report generation. AI is not used for employee monitoring, performance management, recruitment, promotion, disciplinary decisions or automated employment decisions.
4. Legal basis for processing (UK GDPR)
We process personal data on the following legal bases:
- Contract: processing necessary to deliver the platform services
- Legitimate interests: platform security, fraud prevention, and service improvement
- Legal obligation: where required by applicable law
5. Data retention
We retain authorised user and administrator account data for the duration of the service agreement, plus a reasonable period thereafter for legal and administrative purposes. Upon request, or on termination of the agreement, data is deleted or returned in accordance with our Data Processing Agreement.
Survey aggregate data (non-personal) is retained for the duration of the client engagement.
6. Who we share data with
We share data only with the following sub-processors who assist us in delivering the platform. Each has been assessed for security compliance.
| Provider | Purpose | Applies when | Location |
|---|---|---|---|
| Cloudflare | DNS, CDN, security; global and China static content delivery | All deployments | Global edge network |
| Vercel | Application hosting and build pipeline | All deployments | EU (Frankfurt) |
| Neon (a Databricks company) | Database (Postgres); system of record for survey data | All deployments | EU (Frankfurt) |
| Clerk | Authentication and identity management | All deployments | US (UK Extension to the EU–US Data Privacy Framework + Standard Contractual Clauses) |
| Cloudinary | Media storage and delivery | All deployments | US |
| Sentry | Error monitoring and logging | All deployments | EU (Germany) |
| PostHog | Product analytics | Where enabled | EU (Germany) |
| Amazon Web Services (Bedrock) | AI report generation and in-app search — inference runs on Claude models inside EU regions; Anthropic does not receive the data | Where enabled | EU |
| Google Cloud (Vertex AI) | Alternative provider for the same purpose, declared in advance of use | Not currently in use | EU |
Core survey data is held in the EU (Neon, Frankfurt). Our AI processing is also EU-resident. Some providers, including our authentication provider, process limited data in the US; cross-border transfers to countries outside the UK/EEA are governed by the UK Extension to the EU–US Data Privacy Framework, UK International Data Transfer Agreements, or EU Standard Contractual Clauses, as applicable.
We do not share personal data with any other third party without your explicit consent, except where required by law.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Object to processing based on legitimate interests
- Portability of your data in a machine-readable format
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
Where we process data on behalf of your employer or another client organisation, that organisation is the data controller and your request may need to be directed to them; we will assist them in responding.
If you are dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS 1.2 or higher) and at rest. Sub-processors are assessed for security before adoption and hold recognised independent security certifications; our sub-processor register is available on request.
9. Cookies
Please see our Cookie Policy for details of the cookies we use.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. The date at the top of this page shows when the policy was last updated.
11. Contact
For any questions about this policy or how we handle your data:
Email: [email protected] Post: MeetRobots Limited t/a Abracademy, 506 Kingsbury Road, London NW9 9HE