Mayim Ops

Privacy

Last updated 20 August 2026

A note on this document. This is a working draft written to describe what the system actually does, which is the hard part. It has not been reviewed by a lawyer. Before taking real money or real client data, have a solicitor check it against your jurisdiction and your registered entity.

This explains what we collect when you take the operations assessment, why, who else sees it, and how to have it deleted. It describes the system as built rather than as generically as possible.

Who we are

Mayim Ops provides an operations diagnostic and improvement service. For the data described here we are the controller. Contact: mayimops@gmail.com.

What we collect

What you type into the assessment

What we generate

What the system records about activity

A timestamped trail of events against your record: assessment started, submitted, report generated, report emailed, report downloaded, which of the four service paths you clicked, checkout started, purchase delivered, deletion requested. It exists so a support question can be answered, so we can tell whether something failed, and so we can see where people stop. It contains no answer text.

If you take the two-minute check on the home page, the trail records that it was started and completed, and which maturity band the result fell into. Your individual answers to it stay in your own browser until you continue into the full assessment, at which point they become part of it.

What we do not collect

No advertising or analytics trackers, no third-party cookies, and no behavioural profiling. We do not sell your data or share it for anyone else's marketing. Card details never reach us: they go directly to the payment provider.

Do not put sensitive information in the free-text boxes

This one matters and is easy to get wrong

The assessment asks open questions about what is not working, and the honest answer often involves a person. Please write about roles rather than people. Do not enter names, contact details, performance or disciplinary matters, health information, or anything else about an identifiable individual.

Do not enter your clients' confidential information, credentials, passwords, API keys, or anything under an NDA. The boxes are not validated for this and we cannot detect it. Text you enter is stored and sent to our AI provider as described below.

How AI is used, and what that means

The written parts of your report are generated by a large language model, currently Claude, provided by Anthropic. Your assessment answers are sent to Anthropic's API to produce it. Anthropic processes this on our behalf as a processor and, under their commercial API terms, does not use it to train their models.

Your score, dimension scores and derived figures are not produced by AI. They are arithmetic on your own answers, calculated in your browser and on our server. The report distinguishes the two throughout, and it matters: the numbers are checkable and the narrative is a reading.

Its limits, stated plainly

Why we are allowed to hold it

What forBasis
Producing and sending your reportPerforming the service you asked for
Saving progress so you can resumePerforming the service you asked for
Taking payment and delivering what you boughtPerforming a contract
Keeping receiptsA legal obligation to retain financial records
Being told a new assessment came inOur legitimate interest in operating the business
Contacting you about your resultsYour consent, given by the tick box, withdrawable at any time

Who else processes it

WhoWhat they do
CloudflareHosts the site, the application and the database
AnthropicGenerates the written analysis from your answers
ResendDelivers the emails
The payment providerTakes payment. They hold your card details; we never do

These providers operate internationally, so your data may be processed outside your country under the safeguards in their own terms.

How long we keep it

Retention is enforced by a job that runs every night, rather than being a paragraph here that nobody executes.

If you bought something, the assessment behind it is kept while that lasts. Deleting it would strip the context out of what you paid for: the toolkit arrives briefed on your business, and a session or a build is worked from your report. For an engagement that means the assessment is kept until the work is finished, rather than for the life of a download.

Deleting your data

There is a button at the bottom of your report. Because report links are designed to be forwarded, holding a link is not proof of being the person who filled the assessment in, so deletion runs in two steps: we email a confirmation link to the address on the record, and the deletion happens when you use it.

Your answers, report and process maps are removed permanently and cannot be recovered. Any purchase record stays, with its link to the assessment severed, because a receipt is a financial record and deleting it is not something either of us gets to choose.

You can also email us and we will do it.

Your rights

Depending on where you live you may have rights to access, correct, delete, restrict or object to our use of your data, to receive a portable copy, and to withdraw consent. To exercise any of them, email mayimops@gmail.com. If you are unhappy with our response you can complain to your local data protection authority.

Security

Everything is served over HTTPS. API keys are held as encrypted secrets and are never present in any page you can view. The admin view is behind a key. The endpoints are rate limited and restricted to our own origin. No system is perfectly secure, which is the reason for the warning above about what not to type in.

Cookies and browser storage

No tracking or advertising cookies, and no third-party storage of any kind. The site uses your own browser's storage for three things:

All three stay in your browser and are not sent anywhere except as part of an assessment you submit. Clearing site data removes all of them.

Changes

If this changes materially we will update the date at the top. Continuing to use the service after a change means you accept it.

Questions: mayimops@gmail.com  ·  Terms  ·  Home