Privacy Policy

1. Who We Are

Autoris Institute LLC (“Autoris,” “we,” “us,” “our”) is a U.S.-based leadership and learning organization offering programs, assessments, and AI-supported coaching worldwide, including in the United States and Europe.

Contact Information
Autoris Leadership Institute LLC
Harvard Square, 1 Mifflin Place
Cambridge, MA 02138, USA
Email: contact@autoris.com

European Representative
Email: contact@autoris.com

Managing Director: Prof. Dr. Dr. Matthias Ehrhardt

If you are located in the EU or UK, you may also contact our EU representative, Prof. Dr. Dr. Matthias Ehrhardt, at contact@autoris.com.

2. What Information We Collect

We collect personal information that you voluntarily provide when you:

  • Register for leadership programs or assessments

  • Subscribe to newsletters or updates

  • Interact with our AI assistant “Ati”

  • Make purchases or submit payments

  • Communicate with us by email or through our website

Categories of Data

  • Identification Data: name, title, organization, email address, phone number

  • Account Data: login credentials, preferences

  • Transaction Data: billing details, payment history

  • Assessment Data: your responses to our leadership or learning tools

  • Technical Data: IP address, device type, browser, time zone, and usage information

3. How We Use Your Information

We may use personal information for purposes such as:

  • Providing and improving our leadership programs and assessments

  • Delivering personalized coaching and feedback through our AI assistant

  • Communicating about updates, events, or new offerings

  • Processing transactions and managing billing

  • Analyzing website performance and optimizing user experience

  • Fulfilling legal, accounting, and administrative requirements

Marketing Communications
We send marketing communications only when you have provided consent or when permitted by law. You may unsubscribe at any time using the link in our emails.

4. Legal Bases for Processing (GDPR)

Where applicable under the EU General Data Protection Regulation (GDPR), the following principles may apply to the ways in which data is handled:

  • Contractual necessity (to deliver requested services)

  • Consent (for newsletters, marketing, or AI interactions)

  • Legitimate interest (for analytics, service improvement, and prevention of misuse)

  • Legal obligation (record keeping, tax laws)

5. Data Sharing and Third-Party Services

Autoris does not sell or otherwise commercially exchange personal data.

To operate our website, manage program registrations, deliver online learning, and understand how visitors engage with our content, we use a small number of trusted third-party services. These may include:

  • Fillout – to collect information that users choose to submit through forms on our website.

  • Airtable – to organize and store submitted information securely.

  • Thinkific – to provide access to our online courses, assessments, and learning materials, including participant registration and related communication.

  • Google Analytics 4 – to help us understand general website traffic and improve performance, using aggregated and anonymized data.

  • Google Apps Script / Google Workspace – to support internal automations such as sending confirmation emails or generating program materials.

These services may handle limited personal information as needed to perform their specific functions.
We select only reputable providers that maintain appropriate security and privacy standards and that agree to handle data responsibly and in line with applicable laws.

Where these services operate outside the European Economic Area, we may rely on recognized safeguards such as Standard Contractual Clauses or participation in the EU–U.S. Data Privacy Framework.

Autoris uses these services solely to deliver and improve its programs and online experience.

6. International Data Transfers

Because Autoris works with clients and partners worldwide, information may be processed in the United States or other countries.
We may rely on recognized safeguards such as:

  • EU–U.S. Data Privacy Framework certified vendors

  • Standard Contractual Clauses (SCCs) approved by the European Commission

  • Technical and organizational measures designed to protect confidentiality and security

7. Data Retention

We keep personal data only for as long as necessary to provide our services, fulfill legal requirements, or meet reasonable administrative needs.

Certain types of information, such as billing records, invoices, and business correspondence, may need to be retained for up to ten (10) years in accordance with applicable tax and commercial regulations in the United States and Germany.

Assessment data, feedback, and reports are generally kept for a much shorter period—typically no longer than three (3) years—and may be deleted or anonymized earlier when no longer needed for their original purpose.

Upon request, and where legally possible, we will delete or anonymize your data sooner.
Marketing-related data is retained until consent is withdrawn.

8. Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as the ability to:

  • Access and obtain a copy of your personal data

  • Correct inaccurate or outdated data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

If you are in the U.S. (California, Virginia, Colorado, etc.), you may also:

  • Request disclosure of information collected and shared

  • Request deletion of personal information

  • Opt out of any “sale” or “sharing” of personal data (Autoris does not sell data)


9. Use of Artificial Intelligence (AI)

We may offer or recommend AI-based tools—such as the assistant “Ati,” powered by OpenAI technology—to clients who wish to use them as part of their learning or leadership development.
The use of these AI tools is entirely optional and takes place outside Autoris’s own systems.

Autoris does not have access to, or control over, the information users choose to share with these external AI services.
According to OpenAI’s public statement, data from the Autoris workspace is not used to train its models.
However, Autoris cannot guarantee or assume responsibility for the data-handling practices of external AI providers.

We strongly recommend that users:

  • Avoid entering personal, confidential, or identifying information into AI tools.

  • Use only pseudonymized or anonymous data when interacting with AI.

  • Review OpenAI’s and other providers’ privacy policies before using such tools.

In some workshops, Autoris may use actual assessment reports to demonstrate the analytical capabilities or learning potential of AI systems.
In such cases, all names, organizations, and identifying details are altered or removed so that no recognizable information remains and no individual or organization can be identified.
These examples are used solely for educational and illustrative purposes to show the potential of AI-assisted analysis.

Autoris itself never uses, accesses, or shares any client or participant data for AI training, testing, or model development.

10. Data Security

We apply technical and organizational safeguards such as:

  • SSL/TLS encryption

  • Restricted access to stored information

  • Secure cloud infrastructure with multi-factor authentication

  • Periodic reviews of vendor security practices

While no system is entirely free of risk, we follow generally accepted security practices designed to protect information.

11. Children’s Privacy

Our programs are intended for adults and professionals. We do not knowingly collect information from individuals under 16 years of age.
If we become aware that such information has been provided, it will be deleted promptly.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent revision.
If we make significant changes, we will post a notice on our website or contact affected individuals when appropriate.

13. Contact

For any privacy-related questions or requests:

Email: [email protected]
Mail: Autoris Institute LLC, 1 Mifflin Place, Cambridge, MA 02138, USA

Last Updated: November 7, 2025