Data privacy & roles
Respondent anonymity, who’s the data controller, and who inside your organisation can see individual answers.
Voice, video & AI
How recordings are stored, which AI models process your study’s data, and voi’s no-training commitment.
Your rights & data retention
Accessing or deleting your data, how a respondent’s answer gets removed, and how long different data is kept.
Security & storage
Where data is stored, what protects it technically, voi’s use of cookies, and the current sub-processor list.
AI models & providers
What an AI gateway is, which companies process your study’s data, and how voi chooses its models.
Permission matrix
Every privilege in voi, broken down by role: billing, workspace, single-study, platform, and the public edge.
GDPR alignment
voi is built so your organisation can meet its GDPR obligations as the data controller for the studies it runs. In practice, that means:- Your organisation is the data controller for respondent data, and voi acts only as your data processor, under the Data Processing Agreement you accept when you create a workspace; see Data privacy & roles.
- Respondent data is processed and stored in the EU, and every AI provider voi uses is contractually barred from training on it; see AI models & providers.
- Respondents consent before they answer, and your organisation can act on their data protection rights, including deletion, through the tools voi gives you; see Your rights & data retention.
AI Act alignment
voi’s AI features are built as tools for the organisation running a study, not as decisions about a person. In practice, that means:- No emotion recognition, and no voice-based inference of any kind, is run on a recording; see Voice, video & AI.
- voi makes no automated decisions or profiling about respondents that would have a legal or similarly significant effect on them; see Data privacy & roles.
- Respondents are told, before they answer, that an AI system is conducting the interview; see Share.
This section explains voi’s approach to data protection. It isn’t legal advice, and it doesn’t replace your organisation’s own privacy policy or the Data Processing Agreement you accept when you create a workspace.