Privacy Policy

Last updated: February 21, 2026

MSR Research ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Policy Generator service at aipolicy.msrresearch.com.

Information We Collect

  • Contact information (name, email, phone number) provided through our questionnaire and contact forms.
  • Municipal or organizational data submitted during the policy generation process, including city name, state, population size, department information, and AI readiness responses.
  • Website analysis data gathered with your consent during the assessment process.
  • Usage data including pages visited, time spent, and interaction patterns collected through analytics tools.
  • Device and browser information for service optimization and security purposes.

How We Use Your Information

  • To generate customized AI governance policies tailored to your municipality or organization.
  • To communicate with you about your order status, policy delivery, and implementation support.
  • To improve our service, including refining our AI models and policy templates.
  • To send relevant updates about AI governance best practices and regulatory changes (with your consent).
  • To analyze aggregate usage patterns and improve the user experience.

Payment Processing

  • All payment transactions are processed securely through Stripe, a PCI DSS Level 1 certified payment processor.
  • We do not store credit card numbers, CVV codes, or other sensitive payment credentials on our servers.
  • Stripe handles all payment data in accordance with their privacy policy and PCI compliance standards.
  • We retain only transaction identifiers and order summaries necessary for billing records and customer support.

Cookies and Tracking

  • We use essential cookies to maintain your session and save questionnaire progress.
  • Analytics cookies (Google Analytics) help us understand how visitors use our site. These can be disabled in your browser settings.
  • We do not use advertising cookies or share data with ad networks.
  • Local storage is used to save your questionnaire draft so you can return and complete it later.

Your Rights (GDPR / CCPA)

  • Right to Access: Request a copy of all personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Portability: Receive your data in a structured, machine-readable format.
  • Right to Opt Out: Unsubscribe from marketing communications at any time.
  • California residents have additional rights under CCPA, including the right to know what data is sold (we do not sell personal data) and the right to non-discrimination for exercising privacy rights.

Data Retention

  • Questionnaire submissions and generated policies are retained for the duration of your service agreement plus 12 months.
  • Contact information is retained until you request deletion or unsubscribe from all communications.
  • Analytics data is retained in aggregate form and cannot be used to identify individual users after 26 months.
  • Payment records are retained for 7 years as required by tax and accounting regulations.

Data Security

  • All data is transmitted over HTTPS with TLS 1.2+ encryption.
  • Database access is restricted through row-level security policies and role-based access controls.
  • We conduct regular security reviews and follow industry best practices for data protection.
  • Access to personal data is limited to authorized personnel on a need-to-know basis.

Third-Party Services

  • Stripe for payment processing.
  • Supabase for secure data storage with row-level security.
  • SendGrid for transactional email delivery.
  • Google Analytics for anonymized usage statistics.
  • Each third-party provider maintains their own privacy practices. We select providers that meet or exceed industry security standards.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: [email protected]

MSR Research, Austin, Texas

Back to Home