Assay — Privacy Policy
1. Introduction
This Privacy Policy explains how Gordian Knot, LLC (“Gordian Knot,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with Assay, our web-based software application available at getassay.ai and related subdomains (the “Service”). Assay helps hiring managers and talent acquisition professionals create structured interview guides, job advertisements, and related hiring materials.
Assay is a business-to-business tool intended for use by professionals in the course of their work. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.
A note on the content you submit. When you use Assay, you enter information about your company, team, and the roles you are hiring for, and the Service generates hiring materials from that information. You are responsible for the information you choose to enter. Please see Section 12 (“Information You Provide About Others”) before entering information that identifies any individual.
2. Information We Collect
2.1 Information You Provide to Us
- Account information. When you create an account, our authentication provider collects your name, email address, and login credentials on our behalf.
- Company and role content. Information you enter into the Service, including your company name, description, industry, and culture notes, and role details such as role name, description, seniority, location, compensation, and role-specific notes.
- Generated materials. The interview guides, questions, rubrics, role analyses, and job advertisements created for you, which are stored in your account.
- Billing information. When you make a purchase, our payment processor collects your billing details and payment card information directly. We receive transaction records and billing contact details but do not store full payment card numbers.
- Communications. Information you provide when you contact us for support or otherwise correspond with us.
2.2 Information We Collect Automatically
- Usage data. Information about how you interact with the Service, such as pages viewed, features used, actions taken, and timestamps.
- Device and connection data. Information such as your IP address, browser type, operating system, and device identifiers.
- Session replay. We use a product analytics provider that may record your interactions with the Service (such as clicks, navigation, and form interactions) to help us understand usage and improve the product.
- Cookies and similar technologies. See Section 6 for details.
2.3 Information From Third Parties
We receive information from the service providers that support the Service, including our authentication provider, payment processor, and advertising and analytics providers, as described in Sections 5 and 7.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including authenticating your account and generating the materials you request;
- Process transactions and manage billing;
- Communicate with you, including sending transactional messages, service notices, and responses to your inquiries;
- Send marketing and product communications, where permitted and subject to your ability to opt out;
- Monitor, analyze, and improve the performance, features, and usability of the Service;
- Measure the effectiveness of our advertising and marketing;
- Detect, prevent, and address fraud, security issues, abuse, and technical problems; and
- Comply with legal obligations and enforce our Terms of Service and other agreements.
4. AI Processing of Your Content
A core function of the Service is to generate hiring materials using artificial intelligence. To do this, the company, team, and role content you submit is transmitted to Anthropic, PBC through the Claude API for processing, and the generated output is returned to you and stored in your account.
We instruct our AI provider to process your content solely to generate output for you.
You should not enter information into the Service that you are not authorized to disclose, including confidential information of third parties or sensitive personal information about individuals.
5. How We Share Your Information
We do not sell your personal information for money. We share information in the following circumstances:
- Service providers (subprocessors). We share information with third parties that perform services on our behalf, subject to obligations to protect that information.
- Legal and safety. We may disclose information if required by law or legal process, or where we believe disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or security issues.
- Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will provide notice consistent with applicable law.
- With your direction or consent. We may share information at your direction or with your consent.
6. Cookies and Tracking Technologies
We and our service providers use cookies and similar technologies to operate and secure the Service, remember your preferences, understand how the Service is used, and measure and improve our advertising. These include:
- Strictly necessary cookies, which are required to authenticate you and operate core features;
- Analytics cookies and technologies, which help us understand usage; and
- Advertising cookies and technologies, which help us measure the performance of our advertising (see Section 7).
Most browsers let you control cookies through their settings. Blocking some cookies may affect how the Service functions.
7. Analytics and Advertising
Analytics. We use a product analytics provider to collect usage and interaction data, including session replay, to understand and improve the Service.
Advertising. We advertise the Service, including through paid search, and use conversion-tracking technologies to measure which advertisements lead to sign-ups and purchases. This may involve sharing online identifiers and conversion events with advertising platforms.
Depending on how this tracking is configured, this activity may be considered “sharing” of personal information for cross-context behavioral advertising under California law.
8. Data Retention
We retain your information for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.
9. Data Security
We use reasonable administrative, technical, and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
10. Your Choices
- Account information. You can review and update certain account information through the Service or by contacting us.
- Marketing communications. You can opt out of marketing emails by following the unsubscribe instructions in those messages. We may still send you non-promotional, transactional messages.
- Cookies. You can manage cookies through your browser settings as described in Section 6.
- Deletion. You may request deletion of your account and associated content by contacting us, subject to the retention practices described in Section 8.
11. California Privacy Rights
This section applies to California residents and supplements the rest of this Privacy Policy, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).
11.1 Categories of Information We Collect
In the preceding twelve months, we have collected the following categories of personal information:
| Category | Examples | Source(s) | Sold / Shared? |
|---|---|---|---|
| Identifiers | Name, email address, account identifiers, IP address. | You; automatically; authentication provider. | No |
| Customer records / commercial information | Billing contact details and records of purchases and transactions. | You; payment processor. | No |
| Internet or other electronic network activity | Usage data, interactions with the Service, session replay data, device and browser information. | Automatically. | Yes — for advertising measurement |
| Geolocation data | Approximate location inferred from IP address. | Automatically. | No |
| Professional or employment-related information | Company, team, and role information you choose to enter (for example, role descriptions, seniority, compensation ranges, and culture notes). | You. | No |
| Sensitive personal information | Account log-in credentials (managed by our authentication provider). | You; authentication provider. | No |
We collect this information for the business and commercial purposes described in Section 3, and from the sources described in Section 2. We disclose information to the categories of service providers and other recipients described in Section 5.
11.2 Sale and Sharing
We do not sell personal information in exchange for money. As described in Section 7, our advertising measurement may constitute “sharing” of identifiers and internet activity for cross-context behavioral advertising under the CCPA. We do not knowingly sell or share the personal information of consumers under 16 years of age.
11.3 Your California Rights
Subject to certain exceptions, California residents have the right to:
- Know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients;
- Request deletion of personal information we have collected, subject to exceptions;
- Request correction of inaccurate personal information;
- Opt out of the “sale” or “sharing” of personal information; and
- Not receive discriminatory treatment for exercising these rights.
11.4 How to Exercise Your Rights
You may submit a request by contacting us using the details in Section 16. We will verify your request using information associated with your account. You may use an authorized agent to submit a request on your behalf, subject to verification. To opt out of “sharing” for advertising, you may click the “Do Not Share My Personal Information” link in the settings of your account.
12. Information You Provide About Others
The Service is designed for you to enter information about your organization and the roles you are hiring for. If you choose to enter information that identifies an individual — for example, the name of a colleague, interviewer, or candidate — you represent that you have a lawful basis to provide that information to us and to have it processed as described in this Privacy Policy. You are responsible for the information about others that you enter into the Service.
13. Children’s Privacy
The Service is intended for use by businesses and professionals and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
14. Third-Party Links and Services
The Service may contain links to third-party websites or services that we do not operate or control. This Privacy Policy does not apply to those third parties, and we are not responsible for their practices. We encourage you to review their privacy policies.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update becomes effective constitutes acceptance of the revised Privacy Policy.
16. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Gordian Knot, LLC
Email: admin@getassay.ai
Mailing address: 177 Vinton St, Providence, RI 02909