Privacy Policy
How RAISEF handles your data
We collect the minimum necessary information, use it for clear purposes, and give you meaningful choices. This page explains what we collect, why we collect it, how long we keep it, and how you can exercise your rights.
Effective date: 2025-10-15 | Last updated date: 2025-10-15
Your choices and rights | Contact Us
RAISEF (Responsible AI System Evolution Framework) is a research-driven site that publishes materials on responsible AI and provides a privacy-first newsletter and Q&A contact channel. For the purposes of privacy laws, the site operator is the “controller” of personal data submitted here.
This policy applies to raisef.ai, and any subpages that link to it.
- Newsletter sign-up — your email address and the date/time you subscribed. Double opt-in is used to confirm ownership.
- Q&A / Contact forms — your message and any contact details you provide (name and email are optional).
- Server logs — standard web logs (IP address, user agent, request URL, timestamp) for security and troubleshooting. We do not link logs to newsletter or Q&A data.
- Analytics — we use Google Analytics 4 to understand aggregate site usage. We disable Google Signals and Ads features. IP addresses are processed by Google but we instruct Google to store only anonymized data in Analytics reports. See “Cookies and similar technologies” and “Your choices and rights.”
- No assessment data — the public RAISEF-S demo runs entirely in your browser. We do not collect your scores or inputs.
Why we collect it (and legal bases)
- Provide updates you requested — to send the newsletter you subscribed to, manage opt-in/opt-out, and respond to your questions. Legal basis: your consent (GDPR Art. 6(1)(a)) or legitimate interest in responding to inquiries (Art. 6(1)(f)).
- Operate and secure the site — to prevent abuse, detect errors, and keep services reliable. Legal basis: legitimate interests (security and reliability).
- Improve content and usability (Analytics) — to measure which pages are visited and fix navigation issues. Legal basis: your consent where required by law (e.g., EEA/UK), otherwise legitimate interests. You can withdraw or change consent at any time.
- Comply with law — to meet legal, regulatory, and tax obligations where applicable.
We do not sell your personal information. We share only with:
- Service providers who host or process data on our behalf under contract (for example, Azure hosting, email delivery, and Google Analytics for usage metrics). They must follow our instructions, protect the data, and cannot use it for their own purposes.
- Legal requests where we are required to comply with applicable law or protect people from harm.
Our infrastructure and analytics providers may process data in your country and in other jurisdictions (for example, Canada, the United States, and the European Union). For cross-border transfers, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms provided by our vendors (including Google).
- Newsletter — until you unsubscribe or we retire the list, plus a short period to honor suppression requests.
- Q&A — as long as needed to answer and improve our materials, then archived or deleted according to our retention schedule.
- Server logs — typically 30–90 days unless needed to investigate security events.
- Analytics — Google Analytics event data retention is set to a short window (e.g., 2–14 months). We do not enable Google Signals or Ads Personalization.
- Encryption in transit, role-based access, and least-privilege permissions.
- Secrets management and basic operational monitoring.
- No production access for routine content work; changes are made through reviewed deployments.
No method of transmission or storage is perfectly secure. If we learn of a breach that affects you, we will notify you and regulators as required by law.
Cookies and similar technologies
We use essential cookies to make the site work and Google Analytics 4 to understand aggregate usage. In regions where consent is required, Analytics runs only after you accept cookies in our banner. We do not enable Google Signals, Ads Features, or cross-site advertising IDs.
- Control — You can accept or decline Analytics at any time via the cookie banner or settings link in the footer.
- Opt-out — You can also install the Google Analytics Opt-out Add-on in your browser.
- IP handling — Google processes IP addresses to deliver Analytics. Reports do not display full IPs; we configure GA to avoid storing precise IPs in reporting.
If we later add privacy-preserving analytics or change providers, we will update this page and provide controls.
RAISEF is intended for adults and higher-education audiences. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can delete it.
You can unsubscribe from the newsletter at any time and you can withdraw cookie consent for Analytics using the banner or settings link. You may also use the Google Analytics Opt-out Add-on .
- GDPR (EEA/UK) — access, rectification, deletion, portability, restriction/objection, and withdrawal of consent.
- CPRA/CCPA (California) — know, delete, correct, and opt-out of “sale” or “sharing” (we do not sell or share personal information for cross-context advertising).
- PIPEDA (Canada) — access and correction, and questions to our contact below.
To exercise rights, contact us using the details below. We will respond as required by law.
Our pages may link to third-party sites. Their privacy practices are governed by their own policies. We encourage you to review them.
We may update this policy to reflect new features, legal requirements, or operational changes. We will post the updated version here with a new effective date. Material changes may be announced in the newsletter.
If you have questions, requests, or complaints about this policy or how we handle your data, contact:
Email: privacy@raisef.ai | Subject line: “Privacy request”
If we cannot resolve your concern, you may also contact your local data protection authority or privacy regulator.
Note: This page provides general information and is not legal advice.