Privacy Policy

SeverityIQ™ Privacy Policy
Effective Date: 27-September-2026
Website: https://severityiq.com
Entity: Ann Marie van den Hurk d/b/a Mind The Gap Advisory
Location: Newport, Rhode Island, United States

1. Overview

SeverityIQ™ is a decision activation service that uses AI-assisted classification to assess external risk signals and routes alerts to designated executive authorities. Decisions remain with those authorities.

This Privacy Policy explains what information is collected, how it is used, and how individuals can manage their data.

SeverityIQ is intentionally designed as a minimal data, controlled exposure system.

2. Information Collected

a. Website Visitors

When you visit the website, limited technical data may be collected:

  • IP address
  • Browser and device information
  • Basic site interaction data

This supports site performance, security, and reliability.

b. Contact and Inquiry Data

If you submit a form, contact request, or demo booking:

  • Name
  • Email address
  • Message content

Used solely to respond to inquiries and schedule requested meetings.

c. Client Service Data

If you engage with SeverityIQ, the service may process:

  • External risk signals (e.g., public content, alerts)
  • Client-submitted signal descriptions
  • Executive names, roles, and contact details for routing
  • Decision logs, classification outputs, and AI-generated summaries

This data is operational and limited to what is required to activate decisions.

3. What Is Not Collected

SeverityIQ does not collect or process:

  • Payment card information
  • Protected Health Information (PHI)
  • Sensitive personal data
  • Credentials or authentication data
  • Data from internal client systems (e.g., SIEM, SOAR, EDR)

SeverityIQ operates independently of client internal infrastructure. Clients are asked not to include sensitive personal data, credentials, or regulated data in signal descriptions.

4. How Information Is Used

Information is used to:

  • Respond to inquiries
  • Operate the SeverityIQ service
  • Classify signals and route alerts
  • Generate Decision Briefs summarizing each signal
  • Maintain decision logs for governance
  • Improve system reliability and the accuracy of classification rules (this does not include training AI models; see Section 6)

Information is not sold, rented, or used for advertising.

5. How SeverityIQ Uses AI

SeverityIQ uses AI to assist with two functions:

  1. Recommending a severity level for incoming signals
  2. Generating a written summary (Decision Brief) of each signal

AI-generated content is labeled as such. AI does not determine who holds decision authority; authority routing follows rules defined by the client. All decisions remain with the client’s designated decision-makers, who may review or reclassify any AI-assisted assessment.

6. AI and Model Training

SeverityIQ does not use client data to train artificial intelligence models. Our AI processing providers are prohibited under their commercial terms from using the data we send them to train their models. AI providers may retain limited data for a short period where required by law or for safety and abuse monitoring.

7. Third-Party Service Providers

SeverityIQ uses a limited number of trusted third-party service providers to operate the service, including:

  • Cloud-based data storage providers
  • AI-based processing services used for signal classification and summary generation
  • Workflow automation platforms
  • Email delivery infrastructure
  • Hu-manity.co for consent management and data rights handling

These providers process data solely to support the operation of the service and are subject to their own privacy and security controls. Only the minimum necessary data is shared to perform these functions.

A list of our subprocessors is available to clients under our service agreement upon request.

8. Cookies and Analytics

The website may use limited cookies or similar technologies to:

  • Support basic functionality
  • Monitor performance and reliability
  • Manage consent preferences

Consent for cookies and tracking is managed through Hu-manity.co.

SeverityIQ does not use behavioral advertising or retargeting.

9. Data Retention

  • Client service data (signals, decision records, authority maps): retained for the duration of the service agreement.
  • After the engagement ends: clients may export their decision records for 30 days, after which their data is deleted from our systems.
  • Backups and service-provider logs: residual copies are purged within 90 days of deletion.
  • Extended retention: clients may request a longer retention period in writing to meet their own records obligations.
  • Website inquiries and demo bookings: retained for up to 24 months from last contact.

10. Data Sharing

Data is shared only when required to operate the service:

  • With the service providers described above
  • When required by law

SeverityIQ does not sell, rent, or share personal data for marketing purposes.

11. Data Access, Deletion, and Privacy Rights

You may request access to, correction of, or deletion of your data.

Requests can be submitted:

  • By email: privacy@severityiq.com
  • Through consent and privacy tools provided by Hu-manity.co

Hu-manity.co is used to manage:

  • Consent preferences
  • Data access and deletion requests
  • Privacy rights workflows

Requests are typically fulfilled within 10 business days.

SeverityIQ uses Hu-manity.co to provide:

  • Transparent consent collection
  • Ongoing privacy preference control
  • Structured handling of data rights requests

13. Security

SeverityIQ follows a minimal data exposure model:

  • Only essential data is collected
  • No integration with sensitive internal systems
  • Data flows are constrained and auditable

Data is stored using commercially established platforms with standard security controls.

14. Children’s Information

SeverityIQ is not intended for individuals under the age of 13.

Personal information is not knowingly collected from children.

15. Governing Law

This Privacy Policy is governed by the laws of the State of Rhode Island, United States.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date.

17. Contact

Ann Marie van den Hurk SeverityIQ™ Newport, Rhode Island, USA Email: privacy@severityiq.com