How the Atlas uses your data

We set functional cookies to keep you signed in, to remember your market edition, and to record your answer to the tracking question below. Reading activity is recorded once you create an account: the sign-in form tells you so before you submit, and the Terms & Conditions cover it. Separately, if we enable HubSpot website tracking cookies, they load only after you accept them through a consent banner; declining loads nothing, your choice is remembered, and browsers sending the Global Privacy Control signal are treated as having declined.

To give you access to the Atlas, to understand which processes and markets interest you so our team can follow up meaningfully, and to improve the Atlas itself. Reading activity may be synced to our customer-relationship system (HubSpot) alongside your contact details. We do not sell it or use it for third-party advertising.

Assessment answers describe your organisation’s operational maturity and are commercially sensitive. Three rules govern them. The people in your own workspace see your organisation’s answers in full. Fifth Dimension staff who support or deliver your engagement can access the full detail, only while doing so. Our sales team sees a signal only: whether and when an assessment was started or completed and an overall maturity band, never individual answers or per-process scores. Assessment answers are never published as Atlas content and never shared outside Fifth Dimension.

One use of assessment answers goes beyond your own workspace, and it is anonymous. Once a day we count how many organisations using the assessment have placed each process at each of the four maturity positions, and we show those counts back to customers as an industry benchmark. Four things make it anonymous rather than merely aggregated. The counts are stored with no organisation, account or time of day attached, so there is no route from a number back to you. Only the four maturity positions and whether a process is in scope are counted: no free text, and nothing else from your assessment. Our own demo workspace and Fifth Dimension staff accounts are left out. And customers can only ever see the most recent day’s counts, so nobody can compare two days to work out what changed. You can see exactly what is published on the industry lens inside the assessment.

We store account and assessment data in Supabase (database) and host on Vercel. Contact details and reading activity are sent to HubSpot so our team can respond, and sign-in emails are delivered by Twilio SendGrid. These are consistent with the processors named in our main policy, and each is bound by a data processing agreement.

Your profile is kept until you ask us to delete your account. Assessment answers are kept for the life of your organisation’s workspace. Anonymous usage statistics and zero-result search logs are automatically deleted after 180 days. The anonymous benchmark counts described above are kept as a running record, because they contain nothing that identifies anyone. CRM contact data is kept until you object or ask us to delete it.

You can access, correct, erase, restrict or object to the use of your data, ask for portability, and withdraw consent, as set out in our main Privacy Policy (UK GDPR; you may also complain to the ICO). If you are in Singapore, the PDPA gives you access, correction and withdrawal rights too, and you may complain to the PDPC. Write to hello@fifthdimensionai.com; we respond within 30 days. Deletion removes your account, your profile and your CRM contact record. Withdrawing consent for follow-up contact does not affect your access to the Atlas.

Data is encrypted in transit and at rest, access inside Fifth Dimension is restricted by role, and every content page of the Atlas sits behind sign-in. If a data breach occurs that is likely to put you at risk, we will notify the relevant regulator within the required window (72 hours under UK GDPR; three calendar days under Singapore’s PDPA where it applies) and notify you without undue delay.