Privacy Notice

ValConAI is a UK company serving customers worldwide. We handle personal data under the UK GDPR, the EU GDPR and PECR. This notice has two parts: one for customers who hold an account, and one for the experts who are interviewed. It should be read with our Cookie Notice and Data Processing Agreement.

Our roles

For customer account data (users and billing) ValConAI is the data controller. For interview transcripts, expert personal data and the generated content, the customer is the controller and ValConAI is the processor acting on the customer's instructions. For affiliate data ValConAI is the controller.

Part 1: for customers

What we hold and why

• Your account details (email, name, hashed password, two factor secrets), held in our database to provide the service under our contract with you, for the life of the account and purged on deletion.
• Your billing identity and invoices, held by Stripe with references in our ledger, to meet our contract and legal obligations, and retained for six years (HMRC). Ledger records are retained in anonymised form after an account is purged.
• Generated content, held to provide the service and controlled by you.
• Email delivery events, held in Postmark and our email log to run the service, retained for 12 months and then pruned.
• Advertising attribution (ad click identifiers and, at event time, a hashed email), captured only with your consent under PECR and shared with Meta, TikTok and Google for measurement. See the Cookie Notice.
• Server logs and error reports, held on Hetzner and Sentry for security under our legitimate interest, kept for 30 days and scrubbed of personal data; interview content is never logged.
• Our admin audit log, kept for six years under our legitimate interest and legal obligations.

AI processing is carried out by Anthropic as a processor under contract. Anthropic does not train on data sent through its API, and a zero retention option is noted in our Data Processing Agreement.

Your rights

You can access, correct, export or delete your account data. A workspace can be exported and then deleted, with a 14 day grace period before purge. To exercise a right, contact privacy@valconai.com.

Part 2: for interview experts

If you have been sent a link to be interviewed, this part is for you. The customer who invited you decides why the interview happens and is the controller of your answers; ValConAI processes them on their behalf.

Consent

Before an interview starts you are shown a plain English line and asked for a single affirmative tap to agree. Without your consent there is no interview. We record that consent with the time and the IP address it came from, as proof of lawful processing.

What happens to your answers

Your name, role and answers form a transcript that the customer uses to create content. Your email is used only if the customer chose to send your link by email, under our legitimate interest to deliver it on their instruction, and it is removed from the interview record 30 days after completion.

Your rights as an expert

• Access and portability: email privacy@valconai.com. After an identity check we supply your transcript within 30 days.
• Erasure: we anonymise your name to "industry expert", remove your email and redact your answers. The generated content belongs to the customer, so we notify them of your request. The consent record is retained as proof of lawful processing before erasure.
• Objection or withdrawal during an interview: closing the chat and asking for removal follows the erasure route above.

Cookies and advertising measurement

Essential cookies (your session and CSRF protection) are exempt and need no consent. Advertising measurement (ad click identifier capture and server side events) requires your consent through the banner; declining means no capture and no events, and the product still works fully. We never use third party browser pixels. Postmark open tracking is off for expert facing emails and on for account emails under our legitimate interest. Full detail is on the Cookie Notice.

Who we share data with

We use a small set of sub-processors to run the service. They are listed, with the safeguards for international transfers, in our Data Processing Agreement.

Contact

For any privacy question or request, contact privacy@valconai.com.