Privacy notice · Version site-notice-3 · Effective 2026-10-01

Your data, in plain language.

AiR Bench is operated by Projject. We collect only the personal data the service needs, we tell you why, and we never sell it or hand it to advertisers. This notice explains what we hold and what you can ask us to do with it.

What we collect, and why

Three points where we ask for data

Your email address, when you open your full report or sign in

To send your one-time access code and a copy of your readout. It also keeps your score history linked to your email, so you can return to it.

Lawful basis · Legitimate interests: providing the results service you asked for. No password is ever stored.

Your email address, for benchmark updates on your report

To email you each time we publish a new benchmark release, with where your saved result now stands, so you can update your assessment. The switch on your report starts on, and we record the notice you were shown and when.

Lawful basis · Legitimate interests: keeping the result you asked for current. Switch it off on your report, unsubscribe from any email, or contact us at any time.

Your email address, if you ask for research highlights

To send the monthly research highlights. We record your consent and the delivery status of these emails.

Lawful basis · Consent. You turn it on yourself with the switch on your report, and you can unsubscribe from any email or by contacting us at any time.

Your assessment answers, if you take the benchmark

To generate your readout and action plan, and to show how your score changes when we update the assessment criteria.

Lawful basis · Covered by the consent gate shown before your first stored answer. Individual results stay private. See the covenant.

Cookies

One cookie, and it's essential

We set a single cookie, air-session, and only after you sign in. It holds a signed session token so you stay logged in. It is marked HttpOnly and Secure, and it expires after 30 days.

That cookie is strictly necessary for the sign-in you asked for, so under UK PECR it does not require a consent banner. We use no analytics, advertising or third-party tracking cookies anywhere in the product. If we ever add anything non-essential, we'll ask for your consent first, with a genuine option to decline.

Keeping and deleting

How long we hold it, and your rights

We keep your data only for as long as it serves the purpose you gave it. Subscription details and email delivery records stay on file until you unsubscribe or delete your account. Assessment data is kept for the period set out in the consent gate you confirm before starting the benchmark. You can ask us to delete your data at any time, and we will complete deletion within 30 days of an authorised request.

  • Access: ask us for a copy of your data.
  • Rectification: ask us to correct anything inaccurate.
  • Erasure: ask us to delete your data.
  • Restriction and objection: ask us to pause or stop a particular use.
  • Portability: ask for your data in a portable form.

To exercise any of these, or to ask anything about your data, get in touch through the feedback form on this site and we will route your request to the controller. If you are unhappy with how we handle your data you can also complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Data controller

AiR Bench is operated by Projject. Questions about your data go through the feedback form on this site.

Notice version site-notice-3 · Effective 2026-10-01

Assessment feedback

If you choose to rate your report, we store your rating with the assessment context. You may also provide a comment and identify an area that feels inaccurate. We use this feedback to review the assessment and investigate problems. Please avoid personal or confidential information in comments.

Feedback is available to authorised operators. It is excluded from research-model inputs. Feedback linked to your email is removed when you delete your assessment data. A temporary record of the erased event ID prevents an old feedback link from recreating it; this record expires after eight days. Pilot feedback remains disabled.