How we handle your data

Last updated: 2026-07-01

Who we are

earnedautonomy.ai is operated by RYU Advisory & Media, LLC (“RYU”, “we”, “us”). RYU is a United States limited-liability company. This policy covers the marketing site, the Readiness Assessment platform, and the free digital edition of the book.

Respondent anonymity is the default

When you complete a Readiness Assessment through your organization’s tokenized link, we do not collect your name, email, department, or any other identifying information. Open-ended answers include a caution to avoid identifying details. We hash the network address you connect from with a per-assessment salt for duplicate mitigation and purge the hash when the assessment closes.

Report data is aggregated. No report is generated until at least five respondents have completed the assessment. Distributions display only counts per scale point, never a single identifiable answer.

What we collect from admins and book leads

When you sign up as an organization admin to deploy an assessment, or when you request the free digital edition of the book, we collect the following:

• Your full name, work email, company, and role or title.
• An optional company size band for triage.
• Your explicit consent to receive follow-up communication.
• The messages you send us through the contact form.

We use these details to provision your account, to deliver the digital edition, and to follow up about your results or engagement. All personal data is encrypted at rest by our managed database provider.

Marketing communication and Kit

Marketing emails (occasional insights from Phil Clark and RYU) are sent exclusively through Kit. Kit owns the consent record, the unsubscribe link, and the suppression list. Kit unsubscribes are mirrored back into our system so no code path can re-add a contact who has opted out. Transactional email (verification links, download links, account notifications) is sent through AWS SES and is exempt from marketing rules but still identifies RYU as the sender.

Retention

By default we retain the following:

• Raw assessment responses for 24 months. After that we keep aggregates only.
• Book-download leads for as long as your consent is active plus 12 months.
• Contact form messages for 24 months.
• Salted IP hashes for open assessments only, purged on close.

Your rights

You can request the following at any time by contacting us:

• A copy of the data we hold about you.
• Correction of anything inaccurate.
• Deletion of your account and any associated data.
• Withdrawal of marketing consent (also possible via any Kit email footer).

We respond to verified requests within 30 days. To make a request, email us via the contact page.

Analytics and cookies

We use privacy-consistent, cookieless analytics to understand aggregate site traffic. The analytics provider does not set persistent identifiers, does not track you across sites, and does not build a profile of your behavior. We do not use marketing cookies or third-party ad tracking.

Security

The site uses HTTPS with HSTS, security headers appropriate to a modern application, and Row Level Security in the database so no organization can see another organization’s data. We limit what we collect precisely so that a breach, if it occurred, would carry a small blast radius. That minimization is intentional; it is the first line of defense.

Changes to this policy

If we make material changes, we will update this page and the “last updated” date. If the changes affect how we use data you have already given us, we will notify you by email before the change takes effect.