Privacy, in plain language
Last updated 2026-07-16 · Controller: Ousios LLC (Kira Hancock) — company details on the Ousios legal notice · hello@composa.team
What happens when you take the assessment
Your answers are scored on your device, in your browser. Your result is saved to your browser's local storage so it's still there when you come back. By default, none of it is transmitted to us.
What we collect, and only when you choose to give it
- Your email — if you enter it to receive your guide or unlock your team plan, we receive your email address together with your result (archetype and axis scores, or team composition) and basic campaign attribution (how you found us). We use it to send you what you asked for and occasional Composa updates. Submissions are delivered to a private spreadsheet we control (via Google Apps Script), or — if configured — to Formspree, our form provider.
- Research responses — if you participate in our research study (a separate, clearly-marked flow with its own consent step), your answers are stored with an anonymous participant ID in a private spreadsheet we control. Research data is used only in aggregate.
What we deliberately don't do
- No advertising trackers, no cross-site tracking pixels, no selling or renting data — to anyone, ever.
- No cookies. Local storage is used only to keep your own results on your own device.
- No hidden collection: if a screen is about to transmit something, it says so next to the button.
Shared result links
If you use the share feature, your result is encoded in the link itself. Anyone you send that link to can see that result — share accordingly.
Retention and deletion
Email leads are kept until you ask us to remove them. Research responses are stored under an anonymous participant ID and kept for up to 24 months, after which they're deleted or reduced to non-identifiable aggregates. You can ask us to delete your responses sooner — email us with your participant ID and we'll do it within 30 days. To clear your on-device results, clear this site's data in your browser.
Your rights
Everything above that reaches us does so with your consent (GDPR Art. 6(1)(a)) — which you can withdraw at any time. You can also ask for access, correction, deletion, restriction, a portable copy, or object to processing: email hello@composa.team and we'll confirm within a few business days (and always within one month). To protect your data from impostors, we act on requests sent from — or confirmed by — the email address the data concerns; research-data requests work via your participant ID. You can also complain to your local data-protection supervisory authority. Composa isn't directed at children under 16.
Where data lives
Form submissions and research data land in a private Google Sheet we control (US); if Formspree (US) is used as the form provider, it processes submissions on our behalf. The site itself is hosted on Vercel. None of these providers may use your data for their own purposes beyond providing the service.
Changes
If this policy changes materially, the date above changes with it, and we'll note what changed.