Behavioural data is
personal data

What the platform collects

Only what a module needs to do its job. There is no advertising network, no third-party analytics profile and no sale of personal data to anyone, ever.

From an organisation

• An organisation code and password, and the people it puts on its roster — name, work email, department and job title.

From a person

• Assessment responses— Core & Force, Big Five and habit answers in Logix-FX, and the reflections and appraisal entries in Logix-PX.
• Derived profiles — the Career DNA synthesis, its archetype, strengths, development areas and role suggestions.
• Operational records — audit submissions in Logix-QX and shift, service and property records in Logix-HX.

Who can see it

This is what the software enforces, not an aspiration. It is worth reading before you take an assessment.

Access to every console is granted to an organisation, and a person signs in under the organisation that issued their account. Nobody can create their own way in, and no console shows one organisation’s data to another.

Big-George, the voice assistant

The glass orb on the home page is an AI assistant you can talk to or type to. It only starts after you tap it and agree to the notice that appears the first time. Here is where your words go.

The conversation is switched on only when the assistant is set up on our side. Until then the orb only analyses sound on your device, to move with your voice: it asks you nothing, does not turn your voice into text and sends nothing anywhere.

What leaves your device

• Your voice becomes text in your browser’s own speech service. In Chrome that sends your audio to Google, in Safari to Apple. eCogLogy never receives the audio. If your browser cannot do this, you can type instead.
• The text of what you said goes to our server and to Google’s AI (Gemini), with a set of instructions and a few notes from our own pages, so that it can write an answer. If you are signed in and ask about your own account, the assistant may look up your own records to answer, and what it finds is sent to Google with your question. It can only read what you could read yourself.
• Each sentence of the reply goes to Google’s voice serviceto be read aloud, with no name, account or conversation attached. When that service is unavailable your browser’s own voice reads the reply instead, on your device. Google may process this outside Singapore.
• The movement of the orb while you talk is worked out on your device from the sound level. That analysis is not sent anywhere.

What we keep

• Signed in: the conversation is saved as text in your inbox, where only you can read it, and you can delete any conversation there whenever you like. Deleting your account deletes them too. We aim to remove conversations after 90 days without activity; that automatic clean-up is not switched on yet, so until it is they stay until you delete them. A short notification tells you a conversation was saved, without saying what was said.
• Guest: nothing is saved. To keep a conversation going, the server holds the last few turns in memory for up to 30 minutes and then forgets them.
• Our logs record that a turn happened, who (a person’s account or “guest”), how long it was and which model answered. They never record what was said or answered. Audio is never stored by us.

What it can and cannot do

Big-George answers questions and can offer to open a page or to make a small change to your own account, such as your job interests. Nothing changes until you press the button that confirms it. It cannot apply for jobs, message anyone, delete anything or take payment, and it does not decide anything about your employment. It can be wrong: check anything that matters.

You can stop at any time with the small cross beside the orb, and you can withdraw your agreement by clearing this site’s data in your browser, after which the orb will ask again. For any question about this section, use the addresses below.

Data protection officers

Two named people are accountable for how this platform handles personal data — one for the European regime, one for Singapore’s. Write to whichever fits your question; if you are not sure, either will route it.

Singapore’s PDPA requires an organisation to appoint a Data Protection Officer and to make their contact details available; the GDPR expects a reachable point of contact for data-subject requests. Both are named above rather than hidden behind a form.

Your rights

Under the GDPR and the PDPA you can ask for a copy of the personal data held about you, ask for it to be corrected, ask for it to be deleted, withdraw a consent you previously gave, and object to a particular use of it. Logix-FX also lets you download your own Career DNA and assessment reports as PDFs from inside the app at any time, without asking anyone.

Automated decisions

BIG GEORGE proposes; a person decides. Career DNA profiles, role suggestions, risk flags and rate recommendations are produced by the platform with their reasoning attached, and are reviewed by a human before anything that affects a person’s employment or a published price is acted on. No hiring, appraisal or disciplinary outcome is decided by the system alone.

Security and storage

Credentials are organisation-issued and meet a minimum strength rule. Each console is served from its own origin, so a session in one is not a session in another.

Current build. The consoles presently run against browser-local storage: assessment data stays in the browser it was entered in and is not transmitted to a server. This is a pilot arrangement — when the hosted backend replaces it, this notice will be updated to name the processor, the hosting region and the transfer mechanism before any personal data leaves the device.

Asking us about your data

Write to discover@ecoglogy.com and we will answer. That address reaches the people responsible for data protection at eCogLogy, and it is the right first stop for a request about your own records, a question about anything on this page, or a concern about how a module has handled something. For a formal data-protection request, the two officers named above are the direct route.

If your organisation issued your account, it is the data controller for the records it holds about you. Where a request is properly theirs to answer we will say so and point you to them rather than leave it sitting with us.

Help & support lists the same contacts alongside the practical routes into each console.