AI disclosure by design
Respondents are told they are interacting with an AI assistant. Calls may be recorded and transcribed for structured summaries. The displayed notice is saved in the receipt; the spoken statement is logged separately with the conversation.
Granular respondent choices
Acceptance of the terms and acknowledgement of the AI notice are required; consent for optional purposes remains separate. Marketing consent is optional, never pre-checked, and stored as a distinct purpose. On PAYG, Growth, and Scale, campaigns can add a controller privacy informative and optional scopes—or bring your own privacy policy texts on Scale—without replacing the platform layer.
Retention and minimization
Raw transcripts and provider events follow a 90-day raw retention window. Business outputs follow a longer business window, then anonymization. Consent receipts are retained longer as evidence. Provider recordings are purged when raw retention runs.
EU hosting baseline
Application and database run on Hetzner infrastructure for Betterstood. Some subprocessors may still process data outside the EU until residency work in our deferred readiness track completes — see the subprocessor list.
Deployer responsibility
Platform customers configure scenarios and campaigns. They remain the deployer for intended purpose, what their agent asks, and any campaign-specific privacy texts they paste. Betterstood provides the runtime, platform consent layer, disclosure, and security controls.
Self-hosted analytics without cookies
Public marketing pages and the enabled phone demo use self-hosted Umami for pageviews and fixed events. Demo browser observations are distinct from confirmed call, analysis, CRM and email acceptance outcomes. No contact details, transcript or extracted answers are sent. Measurement uses no analytics cookies and respects Do Not Track and Umami opt-out. The app, other respondent flows and embedded campaigns are excluded. The cookie notice describes processing and browser storage. Cloudflare Turnstile remains the disclosed security provider for new PUBLIC_WEB interaction starts.
Legal hub
Operational compliance text for pilots. Counsel review remains required for broader rollout.