Privacy notice · Version site-notice-2 · Effective 2026-09-08
Your data, in plain language.
AiR Bench is operated by Projject. We collect only the personal data the service needs, we tell you why, and we never sell it or hand it to advertisers. This notice explains what we hold and what you can ask us to do with it.
What we collect, and why
Three points where we ask for data
Your email address, when you sign in
To send your one-time sign-in code and to keep your score history linked to your email, so you can return to it.
Lawful basis · Legitimate interests: providing the results service you asked for. No password is ever stored.
Your email address, if you subscribe to benchmark updates
To send research highlights and invite you to update your assessment after a reviewed release. We record your consent and the delivery status of these emails.
Lawful basis · Consent. You opt in with a tick box, and you can unsubscribe from any email or by contacting us at any time.
Your assessment answers, if you take the benchmark
To generate your readout and action plan, and to show how your score changes when we update the assessment criteria.
Lawful basis · Covered by the consent gate shown before your first stored answer. Individual results stay private. See the covenant.
Cookies
One cookie, and it's essential
We set a single cookie, air-session, and only after you sign in. It holds a signed session token so you stay logged in. It is marked HttpOnly and Secure, and it expires after 30 days.
That cookie is strictly necessary for the sign-in you asked for, so under UK PECR it does not require a consent banner. We use no analytics, advertising or third-party tracking cookies anywhere in the product. If we ever add anything non-essential, we'll ask for your consent first, with a genuine option to decline.
Keeping and deleting
How long we hold it, and your rights
We keep your data only for as long as it serves the purpose you gave it. Subscription details and email delivery records stay on file until you unsubscribe or delete your account. Assessment data is kept for the period set out in the consent gate you confirm before starting the benchmark. You can ask us to delete your data at any time, and we will complete deletion within 30 days of an authorised request.
- Access: ask us for a copy of your data.
- Rectification: ask us to correct anything inaccurate.
- Erasure: ask us to delete your data.
- Restriction and objection: ask us to pause or stop a particular use.
- Portability: ask for your data in a portable form.
To exercise any of these, or to ask anything about your data, get in touch through the feedback form on this site and we will route your request to the controller. If you are unhappy with how we handle your data you can also complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.
Data controller
AiR Bench is operated by Projject. Questions about your data go through the feedback form on this site.
Notice version site-notice-2 · Effective 2026-09-08
Assessment feedback
If you choose to rate your report, we store your rating with the assessment context. You may also provide a comment and identify an area that feels inaccurate. We use this feedback to review the assessment and investigate problems. Please avoid personal or confidential information in comments.
Feedback is available to authorised operators. It is excluded from research-model inputs. Feedback linked to your email is removed when you delete your assessment data. A temporary record of the erased event ID prevents an old feedback link from recreating it; this record expires after eight days. Pilot feedback remains disabled.