Legal
Last updated 29 October 2026. Questions to hello@assayalabs.com.
Assaya Labs is a workforce measurement company registered in Lisbon, Portugal. For questions about this policy or about data we hold, write to privacy@assayalabs.com.
In almost every case your employer is the data controller and Assaya Labs is the processor, acting only on their documented instructions. Where we process data for our own purposes, such as operating this website or maintaining our anonymised cross client benchmark, we act as controller.
We do not collect special category data, and we ask participants not to volunteer it.
Responses are de identified on ingest, aggregated above a minimum group size, and reported to the employer as patterns rather than records. Transcripts are never disclosed to the employer, are never sold, and are not used to train third party models.
Processing rests on the employer's lawful basis as controller, usually legitimate interests supported by a documented assessment. Participation is voluntary and declining carries no consequence.
Raw interview records are deleted on a fixed schedule set in the engagement contract. De identified and aggregated data may be retained for benchmarking, in a form that cannot be traced to an individual.
You may request access, correction, erasure, restriction or portability, and may object to processing. Requests reach us at privacy@assayalabs.com and are normally answered within 30 days. Where we act as processor we will pass your request to your employer and support them in answering it. You may also complain to your national supervisory authority.
Data is held in the client's own region by default. Any transfer outside that region relies on an approved safeguard such as standard contractual clauses.