Privacy Policy

1. Data We Collect

For researchers (our users): When you create an account, we collect your name, email address, company name, and billing information. We also collect the studies you create, including discussion guides, audience criteria, and study configurations.

For panel respondents: When respondents are recruited through our panel partner, we collect their voice recordings, transcripts, and anonymous demographic identifiers. We do not collect their names or email addresses.

For BYOP (Bring Your Own Participants) respondents: When a researcher uploads their own participant list, we collect and store the email addresses provided by the researcher in order to send interview invitations. We also collect voice recordings and transcripts during the interview. The researcher who uploaded the email list is the data controller for this personal data; Insightum acts as a data processor on their behalf.

2. How We Use Your Data

We use your data to deliver the Insightum.ai service: setting up studies, recruiting respondents, conducting AI-powered voice interviews, generating research reports, and enabling follow-up analysis. We also use data to process payments, communicate with you about your account, and improve our platform. We do not sell your data to third parties.

3. Legal Basis for Processing

We process researcher data under Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) (legitimate interest in improving our service). Respondent data is processed under Article 6(1)(a) (consent) — respondents provide informed consent before every interview. You may withdraw consent at any time by contacting us.

4. Data Sharing

We share data with trusted sub-processors who help us deliver the service: Cint (respondent recruitment), ElevenLabs (voice interview technology), Google (AI analysis), Stripe (payment processing), and Resend (email delivery for BYOP invitations). All sub-processors are bound by Data Processing Agreements (DPAs) and are GDPR-compliant. For a full list of sub-processors, see our Sub-processors page. We do not share respondent data with any other third parties.

5. Data Retention

Account data is retained for as long as your account is active. Interview recordings are automatically deleted within 90 days of study completion. Research reports and transcripts are retained according to your plan. You may request earlier deletion at any time by contacting us at info@insightum.ai.

6. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR). To exercise any of these rights, contact us at info@insightum.ai.

7. Security

We protect your data with end-to-end encryption in transit (TLS 1.3) and at rest (AES-256). All data is stored in EU data centers. We implement access controls, regular security reviews, and follow industry best practices to keep your data safe.

8. Contact

For any privacy-related questions or requests, contact us at info@insightum.ai. Our data controller is CE Fidelity Slovakia, s.r.o., Špitálska 2, 811 08 Bratislava, Slovakia.