What we collect,and what we don't

Brass Ready holds your department's policy documents and a record of how you performed studying them. That is sensitive, and how we treat it is part of the product rather than a footnote to it.

What we collect

When you sign up to test

Your name, work email, department or agency, service type, and your answer to what is hardest about preparing right now. If you tell us you are a candidate, the rank you are testing for and your exam date. If you are a training officer, roughly how many candidates you support and whether you can share source documents.

When you use the product

Your answers to questions, whether they were right, how confident you said you were, and which lessons you completed. This is what the Promotional IQ is calculated from — there is no version of the product that works without it.

Automatically

Standard server logs: IP address, browser, and the pages you requested, kept 30 days for security and debugging.

What we don't

  • We do not sell your data, and we do not share it with advertisers.
  • We do not add you to a mailing list from the signup form. If we later want to email you something that isn't about your pilot, we will ask first.
  • We do not contact your chief, your training division, or anyone else in your chain of command without telling you first.
  • We do not use your department's documents to train models that serve any other department.
  • We do not sell or share anything for advertising, and we run no advertising pixels or cross-site trackers of our own.

Cookies

This site is hosted by Wix, which sets cookies to manage your session and to measure how the site is used. You will be asked to accept them the first time you visit, and you can decline. Separately, the application uses one session cookie to keep you signed in. We add nothing on top of that: no advertising pixels, and no analytics of our own.

What your supervisor sees

This is the question people actually ask, so it gets its own section.

Visibility is set by your department, not by us, and every change to it is written to an audit log. Most departments run outcomes only: scores and completion, never when or how long you studied.

Where a supervisor can see your Promotional IQ, they see it with its four contributors always expanded and the reasons stated. We do not build a ranked list of candidates by score, and we do not provide one on request. Effort measures — study time, session count, streak, login frequency — are not in the score and are not exposed to supervisors.

If your department turns on more detailed visibility, you will be told inside the product before it takes effect.

Your department's documents

General orders, SOPs, and protocols you or your training officer upload stay inside your department's tenant. They are not visible to other customers, and they are not used to generate questions for anyone else.

Documents are encrypted in transit with TLS and at rest with AES-256 under per-tenant keys, versions are pinned so an answer always cites the version it came from, and deleting a document removes the questions generated from it.

Your rights

  • Ask what we hold about you, and get a copy.
  • Correct anything wrong.
  • Have your account and your study record deleted. During the pilot this is unconditional and we will not ask why.
  • Withdraw from the pilot at any time without giving a reason.

Email privacy@brassready.com and a person will answer within seven days.

How long we keep it

Your study record is kept while your account is open and for 12 months after, so a returning candidate does not start from nothing. Server logs are kept 30 days. Signup submissions from people we do not enroll are deleted after 12 months.

You can ask for deletion sooner at any time.

Who else touches it

We use these third parties to run the product. They process data on our instructions and cannot use it for their own purposes.

  • Hosting and compute: Amazon Web Services — US regions only (us-east-1, us-west-2). Everything the product stores.
  • File storage: Amazon S3 — The policy documents you upload, encrypted with per-tenant keys. Same US regions.
  • Question generation: Anthropic — The uploaded documents themselves, sent to generate and check questions. Under Anthropic’s commercial terms inputs are not retained beyond the request and are not used to train their models.
  • Search indexing: Voyage AI — Passages of your documents, converted to the numeric form that makes them searchable.
  • Error monitoring: Sentry — Stack traces and the account identifier attached to them. Configured not to capture request bodies or document text.
  • This website, and your signup: Wix — Wix hosts this site and holds what you send through the signup form. It also sets the cookies described above and keeps standard server logs. It does not touch your study record or your documents.
  • Email delivery: Microsoft — Your work email address and the messages we send you, through Microsoft 365 in US regions.

Changes

If we change this in a way that affects what we collect or who can see it, we will tell pilot participants by email rather than quietly updating the page.

Covers the pilot program · Last updated 22 August 2026