Privacy notice

Who we are

Competency Builder is run by Evolv Up, a company registered in England and Wales (company number 17415350), Northampton NN3 3LL.

We have applied to register with the Information Commissioner's Office (ICO). Our application reference is C2075299.

For any privacy question or request, email annekaspence@evolvup.co.uk.

Our role

For customer accounts, packages and payments, Evolv Up decides how personal information is used (we are the controller).

When an organisation invites its people to take part in interviews, or uploads its own documents, that organisation decides why the information is collected. We process it on the organisation's behalf to build their framework (we act as their processor). If you're a contributor, your organisation is your first point of contact, but you're always welcome to contact us too.

Information we collect

If you have a customer account:

• Your name, work email address, organisation name and password (passwords are stored securely and we can't see them).
• Your Google account name and email, if you choose to sign in with Google.
• The package you buy and your payment record. Card details are handled by our payment provider, Stripe, and never reach us.
• What you add to the app: framework details, sector and function, documents, your logo and brand colours, interview questions, contributor details, transcripts and notes, and the frameworks and booklets you create.

If you're an interview contributor:

• Your name, email address, role or perspective and level, as given by the organisation that invited you.
• Your interview answers. If you speak an answer, the recording is turned into text and only the text is kept. The recording itself isn't stored.
• The time you spend on voice answers and where you are in the interview, so you can save and come back.
• Transcripts or notes of an interview held outside the app, if your organisation uploads them.

How we use it

• To create and run your account, and to provide the package you've bought.
• To send interview invitations and reminders to contributors, and service emails such as account confirmations and package notices.
• To analyse documents and interview answers, find common themes and draft the competency framework and booklet.
• To take payment and keep financial records.
• To answer your questions and give support.
• To keep the service secure and working properly.

Our lawful bases are: performing our contract with you; our legitimate interest in running and improving a secure service; and legal obligations, such as keeping financial records. Where an organisation invites contributors, that organisation is responsible for its own lawful basis for doing so.

How contributors' answers are used

• Contributors don't need an account. Each person has a private link, which is the only way to open their interview.
• Contributors can review and change their answers before anything is submitted.
• The organisation that invited them can read submitted answers.
• Sources are labelled by role or perspective, never by name, when the evidence is analysed. Contributors' names are not shown in the framework or booklet.
• Short quotes may be shown to the organisation, without names, to explain the themes that were found.

Use of AI

Competency Builder uses AI to run the guided interviews, turn spoken answers into text, read scanned documents, find themes and draft frameworks. This is done through Lovable AI, which uses leading AI models. Your organisation reviews and edits everything before a framework is finalised. AI isn't used to make decisions about individual people.

Who we share it with

We don't sell personal information or use it for advertising. We share it only with the providers that help us run the service:

• Lovable, which hosts the app, its database and file storage, provides the AI processing described above and sends our emails.
• Stripe, which processes card payments.
• Google, only if you choose to sign in with Google.

Some of these providers may process information outside the UK. Where they do, the transfer is protected by safeguards recognised under UK data protection law, such as approved contract clauses.

We may also share information if the law requires it.

How long we keep it

• Account, framework, document and interview information is kept while your organisation's account is open, so you can come back to your work and download your booklets after your access period ends.
• Your organisation can delete documents and transcripts in the app at any time. To delete a whole account, or a contributor's information, email us and we'll do it.
• Payment records are kept for six years, as UK law requires.

Keeping it safe

Information is sent over encrypted connections. Each organisation can only see its own information, uploaded files are kept in private storage, and contributors can only open their own interview through their private link.

Your rights

Under UK data protection law you can ask to see the information we hold about you, have it corrected or deleted, limit or object to how we use it, and receive a copy to take elsewhere. Email annekaspence@evolvup.co.uk and we'll reply within one month. If we hold your information on behalf of your organisation, we may pass your request to them.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

We don't use advertising or tracking cookies. Your browser stores what's needed to keep you signed in. Stripe uses its own essential cookies on the payment form to process payment securely and prevent fraud.

Changes to this notice

We'll update this page when anything changes and show the date at the top. Please also read our terms of use.