Privacy Notice

1. Controller

The data controller for this website is Fabio Aulico, 8854 Siebnen, Switzerland. fabio@aion-governance.ch

2. Data we collect

We collect personal data only when you actively provide it. This currently includes:

• Newsletter and book update sign-ups — your email address, and optionally your name, if you subscribe to updates.
• AI Governance Maturity Assessment — your email address, optionally your name, your answers to the 25 assessment questions, and your maturity score, if you request a results report.

We do not collect sensitive personal data, financial data, or any data from minors. We do not use cookies for tracking or advertising.

3. How we use your data

Data you submit is used solely for the following purposes:

• Sending updates — to inform subscribers of new essays, framework publications, and book launch details, where they have signed up for this.
• Delivering assessment results — to send the personalised maturity report by email when requested.

We do not use your data for automated profiling, targeted advertising, or sale to third parties.

4. Third-party services

This website uses a limited number of third-party services:

• Supabase (database and authentication) — subscriber emails and assessment results are stored in a Supabase PostgreSQL database hosted on AWS infrastructure in Europe. Supabase privacy policy: supabase.com/privacy
• Resend (email delivery) — transactional emails (newsletter confirmations, assessment reports) are sent via Resend. Resend privacy policy: resend.com/legal/privacy-policy
• Vercel Analytics (website analytics) — privacy-friendly, cookieless page view analytics hosted by Vercel. No personal data is stored; no cookie banner is required. Vercel privacy policy: vercel.com/legal/privacy-policy

5. Data retention

Subscriber email addresses are retained for as long as the subscription is active. Assessment results are retained indefinitely in aggregated form for analysis. You may request deletion at any time by writing to the contact address below.

6. Your rights

Under GDPR and the Swiss Federal Act on Data Protection (revFADP), you have the right to access, correct, or delete personal data we hold about you, and to object to its processing. To exercise any of these rights, write to fabio@aion-governance.ch. We will respond within 30 days.

7. Changes to this notice

This notice may be updated when material changes occur. The date below reflects the last revision.