Privacy policy

This policy explains how Candid Response, operated by [Mind Measure Ltd] ("we"), handles personal data. We are the data controller for account information, and a [data processor or joint controller, to confirm] for the responses gathered through your campaigns. For any privacy query, contact [privacy@candidresponse.com].

1. What we collect

Account data. Name, work email, organisation, and billing details for the person who sets up campaigns.

Company profile. The plain-language description of your organisation that you approve during setup.

Respondent data. For anonymous and named private modes we store an AI paraphrase of each answer and a sentiment read. We do not store the verbatim transcript, which is discarded after extraction, and we attach no name, email, or token to any answer row.

2. How we use it

To provide the service: to run conversations, produce reports, manage your account, take payment, and keep the service secure. We do not sell personal data, and we do not use respondent content to train third-party models outside the extraction step described here.

3. Legal bases

We rely on [contract] to provide the service to account holders, [legitimate interests] to keep it secure and improve it, [consent] for respondents taking part in a conversation, and [legal obligation] where the law requires. You may withdraw consent at any time, which will not affect prior processing.

4. Anonymity and respondents

Anonymity is enforced in code. No theme, slice, or sample is shown below five contributions. Because we do not retain identifiers against answers, we may be unable to locate a single respondent's individual data, which is the design that protects them.

5. Who we share it with

We use a small set of processors under contract, including [a cloud host (AWS, London region)], [a conversational voice provider (ElevenLabs)], [a model provider for extraction], and [a payment provider]. Each acts on our instructions. A current list is available on request.

6. Where it lives, and for how long

Data is processed in the [London (UK)] region. Account data is kept for the life of your account and [a period afterwards for legal reasons]. Paraphrases are retained for [the agreed campaign retention period]. Verbatim transcripts are not retained.

7. Your rights

Subject to law, you may ask to access, correct, delete, or port your personal data, or object to certain processing. Contact [privacy@candidresponse.com]. You may also complain to the [Information Commissioner's Office]. Note the anonymity design may limit our ability to act on requests about individual responses.

8. Contact

[Mind Measure Ltd], [registered address]. Data protection contact: [privacy@candidresponse.com].