Autoris Leadership Institute

Legal

Privacy Policy

How Autoris collects, uses, and protects personal information across its programs, assessments, AI-supported coaching, and the My Autoris account area. Last updated: October 1, 2026.

1. Who We Are

Autoris Institute LLC (“Autoris,” “we,” “us,” “our”) is a U.S.-based leadership and learning organization offering programs, assessments, and AI-supported coaching worldwide, including in the United States and Europe. Contact: Autoris Leadership Institute LLC, Harvard Square, 1 Mifflin Place, Cambridge, MA 02138, USA, contact@autoris.com. Managing Director: Prof. Dr. Dr. Matthias Ehrhardt. If you are located in the EU or UK, you may also contact our EU representative, Prof. Dr. Dr. Matthias Ehrhardt, at contact@autoris.com.

2. What Information We Collect

We collect personal information that you voluntarily provide when you register for leadership programs or assessments, create or sign in to a My Autoris account, subscribe to newsletters or updates, interact with our AI coach “Ati,” make purchases or submit payments, or communicate with us by email or through our website. Categories of data:

3. How We Use Your Information

We may use personal information for purposes such as:

Marketing communications are sent only when you have provided consent or when permitted by law. You may unsubscribe at any time using the link in our emails.

4. Google Sign-In and Google User Data

You can sign in to My Autoris (autoris.com/my-autoris) with your Google account. This is optional; you can sign in with a link sent to your email address instead.

Data we receive from Google. When you choose Google Sign-In, Google shares your name, your email address, and your profile picture with us (the standard “openid,” “email,” and “profile” permissions). We request no other Google data and have no access to your Gmail, Drive, Calendar, contacts, or any other Google service.

How we use it. We use this data solely to create and identify your My Autoris account, to show your name in the account area, and to connect the programs, assessment reports, and purchases registered under the same email address.

Sharing. We keep Google user data to ourselves. It is stored with our authentication and database provider, Supabase, which processes it on our behalf. We use it for no advertising purpose and share it with no data brokers or other third parties, and we use it to train no AI models.

Storage and protection. The data is transmitted over encrypted connections (TLS) and stored in access-restricted systems.

Retention and deletion. We keep this data for as long as your My Autoris account exists. To delete your account and the associated Google user data, email contact@autoris.com; we complete deletion within 30 days. You can also withdraw our access at any time at myaccount.google.com/permissions.

Limited Use. Autoris’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Legal Bases for Processing (GDPR)

Where applicable under the EU General Data Protection Regulation (GDPR), the following principles may apply to the ways in which data is handled:

6. Data Sharing and Third-Party Services

Autoris does not sell or otherwise commercially exchange personal data. To operate our website, manage program registrations, deliver online learning, and understand how visitors engage with our content, we use a small number of trusted third-party services. These may include:

These services may handle limited personal information as needed to perform their specific functions. We select only reputable providers that maintain appropriate security and privacy standards. Where these services operate outside the European Economic Area, we may rely on recognized safeguards such as Standard Contractual Clauses or participation in the EU–U.S. Data Privacy Framework.

7. International Data Transfers

Because Autoris works with clients and partners worldwide, information may be processed in the United States or other countries. We may rely on recognized safeguards such as:

8. Data Retention

We keep personal data only for as long as necessary to provide our services, fulfill legal requirements, or meet reasonable administrative needs. Certain types of information, such as billing records, invoices, and business correspondence, may need to be retained for up to ten (10) years in accordance with applicable tax and commercial regulations in the United States and Germany. Assessment data, feedback, and reports are generally kept for a much shorter period, typically no longer than three (3) years, and may be deleted or anonymized earlier when no longer needed for their original purpose. Account data is kept while your My Autoris account exists. Upon request, and where legally possible, we will delete or anonymize your data sooner. Marketing-related data is retained until consent is withdrawn.

9. Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as the ability to:

If you are in the U.S. (California, Virginia, Colorado, etc.), you may also request disclosure of information collected and shared, request deletion of personal information, and opt out of any “sale” or “sharing” of personal data (Autoris does not sell data).

10. Use of Artificial Intelligence (AI)

Ati, the Autoris AI and Virtual Coach (autoris.com/ati and My Autoris), runs on Anthropic’s Claude models through Anthropic’s commercial API. Using Ati is optional. When you use Ati:

We recommend uploading assessment reports in anonymized form, ideally the pseudonymized version of your report, and using roles or initials when you talk about colleagues. The same applies when you share results with any other AI tool.

In some workshops, Autoris may use actual assessment reports to demonstrate the analytical capabilities or learning potential of AI systems. In such cases, all names, organizations, and identifying details are altered or removed so that no individual or organization can be identified. These examples are used solely for educational and illustrative purposes. Autoris itself never uses, accesses, or shares any client or participant data for AI training, testing, or model development.

11. Data Security

We apply technical and organizational safeguards such as:

While no system is entirely free of risk, we follow generally accepted security practices designed to protect information.

12. Children’s Privacy

Our programs are intended for adults and professionals. We do not knowingly collect information from individuals under 16 years of age. If we become aware that such information has been provided, it will be deleted promptly.

13. Updates to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision. If we make significant changes, we will post a notice on our website or contact affected individuals when appropriate.

14. Contact

For any privacy-related questions or requests, including account deletion: contact@autoris.com, or Autoris Institute LLC, Harvard Square, 1 Mifflin Place, Cambridge, MA 02138, USA.

See also our Terms of Service, Cookie Policy, and Legal Notice.