Privacy Policy

PJI Commercial provides practical AI adoption support, AI Scorecard tools, paid assessment reports and related business workflow guidance for founder-led businesses, SMEs and scale-up businesses.

For the purpose of this Privacy Policy, "PJI Commercial", "we", "us" and "our" means:

We may collect and process the following types of information.

Account information:

• name
• email address
• password or authentication details
• company name
• account activity
• login/session information

Business profile information:

• company website
• sector or industry
• company size
• location or primary market
• main products or services
• target customer type
• current sales channels
• current marketing channels
• CRM or sales tools used
• AI tools used
• competitors, where provided
• growth goals
• AI adoption goals
• workflow challenges
• commercial challenges
• other information submitted by the user

AI Scorecard information:

• scorecard answers
• scorecard category scores
• overall score
• saved results
• retake history where available
• AI clarity score
• workflow readiness score
• data and knowledge score
• team confidence score
• commercial impact score

Paid assessment report information:

• assessment order details
• business profile snapshot
• AI Scorecard snapshot
• report input snapshot
• public website research
• market or competitor research
• AI-generated or AI-assisted report content
• report status and access history

Payment information:

Payments are processed by Stripe. We do not store full card details. We may store payment metadata such as payment status, Stripe checkout session ID, payment reference, amount paid, currency and purchase date.

Website and technical information:

• IP address
• browser type
• device type
• pages visited
• referral source
• cookie preferences
• analytics information where enabled
• security and error logs

Communication information:

• emails sent to us
• contact form submissions
• support requests
• meeting requests
• marketing preferences

We collect information when users:

• visit the website
• create an account
• complete the AI Scorecard
• complete or update their business profile
• purchase a paid assessment report
• use dashboard features
• contact us
• book a conversation
• subscribe to updates or marketing communications
• interact with cookies, analytics or site functionality

Some information may also be collected from publicly available sources, such as a company website, public business profiles or publicly accessible market and competitor information, where this is needed to prepare a paid assessment report.

We use personal information to:

• create and manage user accounts
• provide access to the AI Assessment dashboard
• save AI Scorecard results
• generate profile-based recommendations
• process purchases through Stripe
• generate and deliver paid assessment reports
• support AI adoption analysis and workflow recommendations
• provide support and respond to enquiries
• improve the website, scorecard and assessment process
• maintain website security
• prevent fraud or misuse
• send service emails related to accounts, purchases or reports
• send marketing emails where the user has chosen to receive them
• comply with legal, tax, accounting and regulatory obligations

We only use personal information where we have a lawful basis to do so. Our lawful bases may include:

• Contract: to provide account access, scorecards, paid assessments, reports and related services.
• Legitimate interests: to operate, improve and protect the website and services, respond to enquiries and understand how users interact with the site.
• Consent: where users opt in to marketing communications or accept optional cookies.
• Legal obligation: where we need to keep records for tax, accounting, legal or regulatory reasons.

Marketing consent is separate from account creation and purchasing. Users can withdraw marketing consent at any time.

PJI Commercial may use AI tools, including the OpenAI API or similar model providers, to support research, synthesis and drafting of paid assessment reports.

Information submitted by users, AI Scorecard data, profile data and publicly available business information may be included in structured prompts or report input snapshots to generate the assessment.

AI tools are used to support the assessment process. The final assessment is designed to provide commercial and AI adoption guidance only. It does not constitute legal, financial, tax or investment advice.

Users should not submit sensitive personal information, special category data or confidential third-party information unless it is necessary and they have the right to provide it.

We may share information with trusted service providers where needed to operate the website and provide the services. These may include:

• Vercel for website hosting and deployment
• Supabase for authentication, database and storage
• Stripe for payment processing
• OpenAI or another AI model provider for report generation
• email service providers for transactional or marketing emails
• analytics providers where analytics are enabled
• professional advisers such as accountants, lawyers or compliance advisers where required

We do not sell personal information.

Some service providers may process data outside the United Kingdom. Where this happens, we aim to use providers that apply appropriate safeguards, such as data processing agreements, contractual protections or other recognised transfer mechanisms.

We keep personal information only for as long as reasonably needed. Typical retention periods are:

• Account and profile data: while the account remains active, unless deletion is requested.
• AI Scorecard and dashboard data: while the account remains active, unless deletion is requested.
• Paid assessment reports and input snapshots: while the account remains active and for a reasonable period afterwards where needed for audit, support, dispute handling or service improvement.
• Payment and transaction records: up to 6 years where needed for tax, accounting or legal purposes.
• Marketing preferences: until the user unsubscribes or asks us to remove them.
• Website logs: for a limited period needed for security, diagnostics and performance monitoring.

Where exact periods are not set, we use criteria such as the nature of the data, the reason it was collected, legal requirements, account status and whether the data is still needed.

We take reasonable technical and organisational steps to protect personal information and commercially sensitive business information. These may include:

• secure hosting
• authenticated account access
• database access controls
• encrypted connections
• restricted admin access
• secure payment processing through Stripe
• server-side handling of API keys
• role-based access where available
• monitoring and error logging

No online system can be guaranteed to be completely secure, but we take security seriously and aim to use trusted providers and sensible safeguards.

Individuals may have rights under data protection law, including the right to:

• access their personal information
• correct inaccurate information
• request deletion
• restrict processing
• object to processing
• request data portability
• withdraw consent where processing is based on consent
• complain to the Information Commissioner's Office

To make a request, contact: hello@pjicommercial.com

We only send marketing emails where users have opted in or where we are otherwise permitted to do so under applicable law.

Users can unsubscribe from marketing communications at any time by using the unsubscribe link in the email or by contacting: hello@pjicommercial.com

Service emails related to accounts, purchases, security, assessment status or report delivery may still be sent where needed to provide the service.

The website may use cookies and similar technologies for essential site functionality, authentication, payment flow, analytics and performance monitoring. More information is available in our Cookie Notice.

The website and services are intended for business users and are not intended for children.

We may update this Privacy Policy from time to time. The latest version will be published on this page.

For questions about this Privacy Policy or how personal information is handled, contact: