ISO/IEC FDIS 42105 · stage 50.20 FDIS ballot closes 21 October 2026 Planning date 16 Feb 2027, our estimate Official record
OHISO 42105 Revision CheckerHuman oversight of AI systems, before publication

Home / Privacy

Last updated: 2026-10-21

Privacy

What this site collects, where it is kept and who can see it. In plain words.

01What is collected

The short version

Reading the site and using the free check collects nothing that identifies you. The check runs in your browser and the answers are not sent to the server. If you buy the kit or start the watch, Stripe collects the payment details and the email you give, and that email creates the account. If you write to support, we keep the email so we can answer it.

02Where it is kept

Where it is kept and who can see it

The processors are Cloudflare (hosting and edge security), Supabase in Sydney (the account and saved register data), Stripe (payments and receipts) and SendGrid (the sign-in and product email). They are the only processors. We do not sell data, we do not run third-party advertising or analytics scripts, and we do not share the register contents with anyone.

Account and saved register data is stored in the Supabase project in the Sydney region. Payment data is held by Stripe, not by us. Email delivery is through SendGrid. Access is limited to the service role used by the application and to the operator who answers support mail.

03Your choices

Access, correction and deletion

Write to support@theartofservice.com to ask for a copy of the account data, a correction, or deletion. A deletion removes the account and the saved register rows; the payment record stays with Stripe as the law requires. The free check leaves no record to delete.

Cookies: the account uses a session cookie after sign-in. There are no advertising cookies. The site does not embed third-party video or tracking pixels.

04The legal line

Not legal advice

This site is a reference and a document set. It is not legal advice and it does not certify anything. The privacy statement describes the product's own data flows; it is not legal advice about your organization's privacy duties.