The ITIL v5 Designer (itil.design) is operated by Better Skills (better-skills.com), which acts as the data controller for the personal data described in this policy. For any privacy matter, contact comercial@better-skills.com.
Account data: name and email address, provided when you create an account (authentication is handled by a specialised identity provider). Product content: the canvases, capability assessments, improvement projects and organization profile you create, linked to your account. AI usage data: a log of your AI interactions (request type, a truncated prompt, the reply summary and token counts) used for usage metering and abuse prevention. Technical data: essential security and access logs.
We do not use advertising trackers or third-party analytics cookies, we do not profile you for marketing, and we never sell personal data.
We process your data to provide the service you requested (performance of a contract): authentication, storing your content, running the AI features and enforcing fair-use limits. We process security logs and usage metering under our legitimate interest in keeping the service safe and economically viable. Where consent is required, we ask for it explicitly.
AI features send the relevant context (your prompt, a canvas summary or assessment data) to our enterprise AI provider's API for processing. Under our agreement with that provider, your data is not used to train AI models. AI interactions are stored in your account history with token counts so that usage can be metered in credits.
We use a small number of processors under data processing agreements: a specialised identity provider (authentication), a managed database platform (storage), an enterprise AI provider (AI processing) and a hosting/CDN provider; the full list of subprocessors is available on request. These providers are based in the United States; transfers are safeguarded by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.
We use essential authentication cookies and the browser's localStorage for autosave and preferences. These are strictly necessary for the service and carry no advertising function.
Account data and product content are kept while your account exists. AI interaction logs are kept for usage metering and may be aggregated. When your account is deleted, your stored content is removed from the production database.
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise any of these rights, email comercial@better-skills.com; we respond within one month. You will not be discriminated against for exercising your rights.
Data is encrypted in transit (TLS), access to production systems is restricted and authenticated, and administrative access to usage data is limited to authorized Better Skills personnel.
The service is intended for professionals and is not directed at children under 16. We do not knowingly collect data from children.
You may lodge a complaint with your supervisory authority; in Portugal, the CNPD (cnpd.pt). We will update this policy as the product evolves, changing the date above. Questions: comercial@better-skills.com.