Privacy and AI

DRAFT for DataArt legal review. Last updated: [date].

Data Monsters is a Halloween experiment run by DataArt [legal entity to confirm]. Questions: privacy@dataart.com.

Your confession

• We keep the confessions you submit, and use them to run this experiment and to improve DataArt's understanding of the data problems organisations face. [Legal basis: legitimate interests; legal to confirm.]
• We keep confessions for as long as they help us understand data challenges. [Legal to confirm the retention criteria.]
• Please don't include names, client names or confidential details.

How we use AI

• Third-party AI services read your confession to match it to monsters or summon a new one. Some of our service providers are outside the UK and EEA and work under standard safeguards. [Legal to confirm.]
• Results are AI-generated, for fun, and not an assessment of you or your organisation.
• Your result page is public to anyone with its link. It shows the monsters and short AI-written explanations, never your confession. A monster you summon may join the public gallery.

Your IP address

We keep a hashed version of it to prevent abuse, and delete it after 60 days. After that, our records no longer tie your confession to your connection, unless you shared your result link or signed up for the Antidote. [Legal to confirm whether this counts as anonymised.]

This site

• Visits are counted with cookieless analytics, and an automated check keeps bots out.
• Your browser keeps your rogue squad and the campaign link you arrived from, on your device only. [Legal to confirm whether keeping the campaign link needs consent.]

The Antidote

Antidote sign-ups are handled by DataArt under DataArt's Privacy Policy.

Your rights

To access, correct or delete your data, or object to its use, email privacy@dataart.com with your result link. You can also complain to your data protection authority.