Privacy notice

The organisation that invites you to an assessment decides its purpose, questions, participants, and how long its assessment data should be kept. Contact that organisation first with questions about those choices.

Core Of Development operates CODIAC and processes information to provide, secure, maintain, and improve the service. You can contact your usual Core Of Development contact or the administrator who invited you about this notice.

• Account and access information: name, email address, customer memberships, roles, sign-in credentials or one-time-code activity, and session information.
• Assessment administration: customer and assessment names, questionnaires, invitations, department or team labels, deadlines, completion status, and reminder history.
• Assessment answers: ratings you enter, including unsubmitted drafts saved so you can continue later.
• Results: aggregated averages, score ranges, standard deviations, and response counts. Your private self-comparison uses your own answers when you ask for it.
• Technical information: error details, page paths, security events, and the website analytics described below.

• Create and secure accounts and keep each customer's information separate.
• Administer questionnaires, rounds, invitations, deadlines, and reminders.
• Save drafts, record completed answers, and show respondents their own private comparison.
• Show authorised customer administrators participation progress and aggregated results.
• Produce downloadable reports and round comparisons using aggregate results.
• Provide support, troubleshoot errors, prevent misuse, and maintain the service.

Other respondents and customer administrators cannot view your individual answers in CODIAC. They can see whether you have completed an assessment and, where used, your department or team label.

Aggregated results are shown only when at least three people have completed the assessment. Reports and round comparisons exclude names, email addresses, personal answers, and personal comparison scores. Answer ranges and standard deviations describe the group without identifying who gave a particular rating.

When you submit, your saved draft is removed and your completed answers are retained for the assessment record. Archiving a round or customer closes activity and stops reminders; it does not delete completed responses.

CODIAC keeps your sign-in session in your browser's local storage so you can remain signed in and return to protected pages. Signing out removes the active session. This is separate from Lovable's analytics, which does not use cookies.

CODIAC does not use advertising cookies or advertising pixels. External services used by a page may still receive technical request information, as described below.

Lovable's analytics uses no cookies, stores nothing on the visitor's device, does not keep IP addresses, and does not identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

On this site, it records pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and clicks. Click tracking is on. Clicks, page visits, time on page, page speed, and errors are recorded for every visitor to the published site, without analytics cookies and without identifying anyone. There is currently no analytics consent banner, and editor-preview visits are not counted.

CODIAC also sends technical error reports to Lovable when a page fails. These can include the page path and error details. Detailed analytics and error data is kept for 90 days; daily visit summaries are kept for one year.

• Lovable Cloud hosts the application, database, authentication, and file delivery. Account, assessment, response, and session information is processed there to operate CODIAC.
• Lovable's email delivery service sends account confirmations, sign-in codes, password resets, invitations, and reminders through notify.coreofdevelopment.com. It processes the recipient address and email content, including secure links and relevant customer or round details.
• Google Fonts supplies the Inter font used on the website. Your browser requests font files from Google, which receives technical request information such as your IP address and browser details. Assessment answers are not included in those font requests.

Core Of Development and the relevant customer keep assessment and account information for as long as needed for the assessment, their relationship, support, security, and applicable obligations. CODIAC does not apply one fixed deletion period to every customer.

Archiving preserves completed responses. Unsubmitted drafts are removed when the response is submitted. To ask about correction, export, or deletion of an account or assessment record, contact the inviting organisation or your usual Core Of Development contact.

Depending on where you live and your role, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. The inviting organisation and Core Of Development may need to verify your identity and distinguish information about you from confidential information about others.

You may also have the right to complain to a data-protection authority. Privacy rules differ by country, so organisations using CODIAC should check the rules that apply to their respondents and processing.

We may update this notice when CODIAC, its providers, or its data practices change. The latest version and its update date will appear on this page. Our terms of use explain the rules for using the service.