Respondent Privacy Notice

1. AI-Moderated Interview Transparency (EU AI Act Art. 50)

When you participate in an Askdepth interview, you are interacting directly with an autonomous AI moderator. The AI asks questions, processes your spoken responses in real time, and synthesizes qualitative insights. This interview is not conducted by a human interviewer.

2. Data Controller & Processor Roles (GDPR Art. 13 / 14)

The Data Controller is the research organization or enterprise sponsor that invited you to this study. They determine the purpose and scope of the interview. Askdepth acts as a Data Processor providing the software, automated moderation, and data processing platform.

3. Data Collected & Purpose

• Voice Audio (never stored): Your microphone stream is transcribed to text in real time and is not recorded or retained — the raw audio is discarded as soon as it has been transcribed.
• Verbatim Transcript: Automated speech-to-text transcription of your answers. This text is the only form in which your spoken answers are retained.
• Derived Insights: Key themes, summaries, and quotes extracted for the research project.
• Technical & Anti-Fraud Signals: Truncated IP subnet (/24 for IPv4, /64 for IPv6) and device integrity checks to prevent duplicate responses and fraud.

4. Legal Basis for Processing

Processing of your audio, transcript, and qualitative feedback rests upon your explicit consent under GDPR Article 6(1)(a) and, to the extent any health, political, religious, or other sensitive information is spontaneously shared, Article 9(2)(a). You may withdraw consent at any time before anonymization.

5. AI Subprocessors & International Transfers

To transcribe audio and analyze responses, data may be processed through trusted AI subprocessors. All transfers outside the European Economic Area are safeguarded under Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework. Subprocessors do not use customer research data to train public foundation models. See the full subprocessor list for the current registry, including each vendor's purpose, processing location, and transfer mechanism.

6. Data Retention & Anonymization

Personal data and direct identifiers are retained only for the duration set by the sponsoring organization (typically 30 to 90 days), after which identifying details are permanently anonymized while preserving aggregated analytical units.

7. Your Rights

Under GDPR, you have the right to request access to, rectification of, or erasure of your personal data, as well as the right to withdraw consent and to lodge a complaint with your supervisory authority. To exercise these rights — including withdrawing consent or requesting erasure — use our Data Subject Request portal. You can also contact the research sponsor who issued your invitation, or reach our privacy team at privacy@askdepth.com for general questions.