Privacy Policy

This Privacy Policy describes how the depoia platform ("Platform") handles personal data, aligned with GDPR principles and applicable data protection laws.

1. Roles

Regarding data from testimonial senders, the account owner (the business that created the campaign) acts as data controller. The Platform acts as data processor. For account owners' own data, the Platform is the controller.

2. Data collected

• From senders: name, email, role/company (optional), rating, testimonial content (text, video or voice), AI transcript, and consent record (timestamp).
• From owners: name, email and picture from Google sign-in, campaigns and payment metadata processed by Stripe (we don't store card data).

3. Purpose

Sender data is processed exclusively to (i) collect, store and display testimonials on the business's public wall and marketing materials, subject to consent given at submission; (ii) allow the owner to manage, approve or delete testimonials; and (iii) generate transcripts and highlights. Senders' emails are never displayed publicly.

4. Legal basis and consent

Every submission requires explicit consent, recorded with timestamp, authorizing use of the testimonial on the business's site and marketing materials.

5. Sharing

Approved testimonials are public on the wall embedded in the business's site. We use infrastructure providers (file storage, payments, AI transcription) strictly to operate the Platform.

6. Data subject rights

You may request confirmation of processing, access, correction and deletion of your data at any time. Contact the business the testimonial was sent to (controller), who can permanently delete the testimonial via the dashboard — including video/audio removal from storage. The Platform helps controllers fulfill these requests.

7. Retention and security

Data is retained while the account and testimonial exist, or until deletion is requested. We use reasonable technical and organizational safeguards including encrypted transmission (HTTPS) and session-based access control.

8. Contact

For questions or to exercise your rights, contact the business responsible for the campaign or Platform support.