Privacy Policy
Effective date: April 11, 2026 · Last updated: April 11, 2026
Short version: we collect nothing.
This tool runs entirely in your browser. We do not collect, store, or transmit your responses, your score, or any personally identifying information. There are no accounts, no cookies, and no server-side data storage.
What data we collect
None. The Shadow AI Risk Assessment does not collect any personal data. Specifically:
- Your answers to the 8 assessment questions are stored only in your browser's memory (session state) and are discarded when you close or refresh the tab.
- Your exposure score and risk level are calculated entirely client-side and never sent to any server.
- We do not use cookies — not for tracking, sessions, or any other purpose.
- We do not use analytics software, advertising pixels, or third-party trackers.
- We do not collect your IP address, device fingerprint, or browser metadata.
PDF report download
If you choose to download the PDF Risk Brief, it is generated entirely within your browser using the jsPDF library. The PDF file is downloaded directly to your device. No PDF content is transmitted to or processed by any external server.
External links
This tool contains a link to governance.krystalmartinez.com (opens in a new tab). That site has its own privacy policy. We are not responsible for its content or data practices.
Hosting infrastructure
This site is hosted on Vercel. Vercel may collect standard server access logs (IP address, request timestamps, HTTP status codes) as part of normal infrastructure operation. These logs are retained and managed according to Vercel's privacy policy. We do not have access to or use these logs for any purpose.
Questions
If you have questions about this privacy policy, you can reach Krystal Martinez at krystalmartinez.com.