Privacy Policy

Effective 12 October 2026.

1. Who we are

Item Signal (itemsignal.com) is operated by AI Guru (“we”). This policy explains what we collect when you use the site and the Item Signal service, and how we use it.

2. What we collect

Assessment items you submit. Question stems, options, answer keys and any metadata (domain, certification level) you paste or upload, together with the analysis we produce.

Account and contact details. Name, email address, organisation and password (stored only as a bcrypt hash) when you create an account, apply to the design-partner program or contact us.

Usage data. IP address, timestamps, request counts (used to enforce the free-tier limit) and standard server logs. We do not run third-party advertising trackers.

Files for paid engagements. Item banks and response data you upload for an engagement, held for the duration of the engagement plus 30 days unless you ask us in writing to retain them.

3. How we use it

To run the analysis you requested and return the report; to count free-tier usage; to operate, secure and improve the service; to respond to your enquiries; and to deliver paid engagements. We do not sell personal data and we do not use your items to train models.

4. AI processing

Item text is sent to Anthropic’s Claude API over TLS to produce the analysis. Anthropic does not train on API inputs. Under Anthropic’s standard commercial terms, API inputs and outputs may be retained for a limited period for trust-and-safety purposes. Zero-data-retention terms can be arranged for enterprise engagements. See Security & Data Handling for the current list of sub-processors.

5. Where data lives and how long we keep it

Data is stored on our own AWS infrastructure (EC2, US regions) behind Cloudflare. Single-item analyses and shared report links are kept so that the report URL continues to work; you can ask us to delete any report. Engagement data follows the retention terms above. Account data is kept while your account is active and deleted on request.

6. Your rights

You can ask us to access, correct, export or delete personal data we hold about you. If you are in the EU or UK, you also have the right to object to or restrict processing and to complain to your supervisory authority. A data processing agreement is available on request for enterprise customers.

7. Cookies

We set a session cookie for signed-in users and for the operator console. No advertising or cross-site tracking cookies are set.

8. Changes and contact

We will post any changes to this policy on this page and update the effective date. Questions about this policy: [email protected]. Security reports: [email protected].