STAIDA Research Privacy Statement
Last updated: 16 October 2026
1. What this statement covers
This statement describes how AI Survivors handles the personal data of participants in the STAIDA research. For our general privacy and cookie policy, see the privacy & cookie policy. The terms of participation are in the participant terms.
2. Who is responsible
AI Survivors is the data controller. No employer or other client is involved. Nobody else decides why or how your data is used.
Contact for questions and privacy requests: support@aisurvivors.com
3. What data we process
- Account data: your name and email address.
- Check-in: your answers to the Check-in questions.
- Organisations (optional): for each organisation you add, the name, a LinkedIn company page and/or a web domain, and your role: employer or client. You mark one organisation as your current workplace. The Check-in is about that workplace. From a LinkedIn URL we only keep the name in the URL. We retrieve nothing from LinkedIn.
- Commercial opt-in: per organisation, whether you have given it, and the date.
- Metadata about your AI use: which tool, how often and when. These are counts and times.
- Coach and lessons: what you enter in the Coach and your progress in the lessons.
- Technical data: data needed to keep the service secure.
What we do not measure
We never measure the content of your work, no prompts and no code. The measurement consists of metadata only.
The Coach is an exception to that measurement, because you type text there yourself. We use that text to let the Coach respond. We do not use those conversations for the benchmark. Do not enter personal data of others or confidential company information.
4. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the account, lessons and Coach | Performance of a contract (Art. 6(1)(b)) |
| Your Check-in and the measurement of your AI use | Consent (Art. 6(1)(a)) |
| Anonymise your data and count it in the STAIDA benchmark and research | Consent (Art. 6(1)(a)), given separately |
| Use your organisation data for research, without commercial opt-in for that organisation | Consent (Art. 6(1)(a)), given together with the consent for research |
| AI Survivors approaching one of your organisations about STAIDA, and mentioning that participants from that organisation take part | Consent (Art. 6(1)(a)), given separately per organisation: the commercial opt-in |
| Security and preventing misuse | Legitimate interest (Art. 6(1)(f)) |
The consent for the benchmark and research is separate from the contract. You give it when you sign up:
My anonymised data counts towards the STAIDA benchmark and research.
Participation is free as long as your consent for research stands. See the participant terms.
Commercial opt-in
The commercial opt-in is a separate consent per organisation and not a condition for taking part:
AI Survivors may approach [organisation] about STAIDA.
With this opt-in for an organisation, AI Survivors may approach that organisation and mention that participants from that organisation take part. For an organisation you add later, the opt-in is off until you switch it on yourself. Without the opt-in we use that organisation's data for research only. We do not approach the organisation. You can withdraw the opt-in per organisation at any time, in your profile. It works for the future.
5. What the benchmark shows
The benchmark only shows group figures of at least 10 people from at least 3 organisations. We do not show smaller groups.
Organisation and role can make a participant identifiable. That is why, we never show the data of an organisation without commercial opt-in per organisation below that threshold of 10 people from 3 organisations.
As long as your data is linked to your account, it is personal data for us. What the benchmark shows are group figures from which nobody can be individually recognised. We do not claim that re-identification is impossible in every case. That is why we only show figures above the stated threshold. If measurements are missing, we show that as a measurement gap. We do not estimate anything.
Profiling
Based on your answers and your AI use, we calculate a picture of how you use AI, so you can see yourself next to the benchmark. That picture is meant for you. No decisions with legal or similarly significant effects for you are based on it.
6. Withdrawing consent and deleting your account
You can withdraw your consent at any time, in your profile. You then choose between:
- switching to a paid account;
- stopping.
When you stop, your name is detached from your data (anonymised). After that you no longer count towards the research and the benchmark.
What you have already submitted and that is included in group figures can no longer be removed. Those figures can no longer be traced to you, so we cannot retrieve or delete them. Withdrawal works for the future: earlier processing remains lawful.
If you delete your account, your name is detached from your data immediately.
Switching to a paid account
If you choose to switch, AI Survivors creates a separate environment for you. Your research data stays in the research environment and does not move with you.
Organisations and the commercial opt-in
If you withdraw the commercial opt-in for an organisation, we no longer approach that organisation about STAIDA. If you withdraw your consent for research, what is said above about stopping also applies to your organisation data.
7. Who we share data with
We do not sell your data. We use the following recipients to provide the service. We make arrangements with these parties under Art. 28 GDPR.
| Recipient | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting of the platform | EU |
| Resend | Sending email, such as the confirmation and the invitation | May be outside the EU |
| The provider of the language model for the Coach | Generating the Coach's answers | May be outside the EU |
Transfers outside the EU
With Resend and the language model provider, data may be processed outside the EU, for example in the United States. Such transfers take place on the basis of appropriate safeguards, such as the EU-US Data Privacy Framework for recipients that are certified under it, and the European Commission's standard contractual clauses (SCCs). Want to know which safeguard applies to which recipient? Email support@aisurvivors.com.
8. How long we keep data
We keep your data, including your organisation data and the dates of your commercial opt-ins, for as long as you take part. If you withdraw consent or delete your account, section 6 applies. Group figures from which nobody can be identified may continue to be used.
9. Your rights
You can ask for access to, correction of or deletion of your data. You can also object, ask for restriction of processing and request your data in a usable format. Send your request to support@aisurvivors.com. We respond within 30 days.
Data that can no longer be traced to you cannot be looked up by us. For that data we cannot carry out your rights.
10. Security
We take appropriate technical and organisational measures to protect your data. See also the Information security page.
11. Minimum age
You can only take part from the age of 18.
12. Complaints
If you believe we are not handling your data correctly, please contact us first at support@aisurvivors.com. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
13. Changes
We update this statement when needed. The date of the latest version is at the top of the page. For a material change we notify you by email.
