Privacy policy

How Research Agent handles personal data

This privacy page explains the data the platform stores for researchers and participants, why that data is used, and how deletion requests are handled. It is a product starter policy and should be reviewed by the operator before production use.

ResearchersAccount data

Email, authentication records, credits, interviews, invitations, and reports.

ParticipantsInterview data

Email, interview responses, audio uploads, transcripts, and consent decisions.

RetentionUntil deletion

Data is retained until it is removed through an approved deletion process.

1. What we collect

Account, interview, and consent records

The platform stores only the information needed to let researchers manage interviews and let participants complete them.

Researcher data

Researcher accounts include email address, password-based login records, onboarding status, credit balance, interview guides, invitations, transcripts, and analysis outputs.

Participant data

Participant records may include email address, interview answers, audio recordings, transcript text, session progress, consent decisions, and timestamps connected to the interview session.

Operational data

The system may also store service metadata such as audit timestamps, system-generated IDs, session state, and request notes used for security, debugging, and administration.

2. How data is used

Interview research and platform operation

Data is used to operate the service requested by the researcher and to support the interview process end to end.

  • Create and manage researcher accounts and interview projects.
  • Send and manage participant invitations.
  • Run AI-assisted interview preparation, interview conduct, and analysis workflows.
  • Store transcripts, audio, consent records, and related project outputs.
  • Track credits, platform settings, and admin review actions.
  • Respond to privacy and deletion requests.
3. Retention

Data stays until deletion is requested and processed

The product plan assumes data is retained until an operator processes a deletion request, unless a shorter retention rule is defined by the organization running the platform.

  • Researcher accounts remain active until the account is deleted or removed.
  • Participant interview records remain stored until an approved deletion request is completed.
  • Consent records are retained as part of the privacy audit trail until deletion is processed.
  • Archived records may be hidden from normal views but are not considered permanently deleted.
4. Third-party services

Infrastructure and AI providers

The platform relies on external services to provide hosting, storage, authentication, AI processing, and later email delivery.

Supabase

Database, authentication, and storage infrastructure.

OpenAI

AI processing for interview preparation, live interviewing, and analysis workflows.

Resend

Email delivery provider planned for invitation and confirmation emails.

5. Your rights

How to request deletion

Participants can request deletion without signing in. Researcher deletion controls are planned for the authenticated settings area.

  • Participants can submit their email address through the public deletion request form.
  • Admins review each request in the GDPR workspace and mark it completed or rejected.
  • If the submitted email does not match stored records, the request can be rejected during admin review.
  • Researcher self-service deletion requests are planned as a later settings-page feature.

Contact information

Use the GDPR deletion request form for privacy-related deletion requests today. Before production rollout, the operator should replace this temporary contact guidance with a dedicated privacy contact email or support channel.