Conveo.AI BV
Last Updated: August 13, 2026
Summary for study participants
- 🎙️ We collect your responses — which may include audio and/or video recordings — for research purposes only.
- 🏢 Your study is commissioned by a Conveo customer (the Research Sponsor). In some studies the Research Sponsor's identity is withheld during the study to avoid influencing your responses — you will always be told why, and you can ask us who they are at any time, including after the study closes. They are contractually required to protect your data.
- 🤖 AI technology is used to conduct the interview, generate transcripts, and analyse responses. Your data is processed by Conveo's technology partners under strict contractual safeguards.
- 🔒 Your personal data is protected by industry-standard security measures including encryption at rest and in transit.
- ⚖️ Depending on where you live, you have rights including access, correction, deletion, and objection. Contact us at [email protected] to exercise them.
- 🚫 We do not sell your personal data. We do not use it for advertising.
ℹ️ Blinded studies are addressed across multiple sections — see Section 1 (controller identity), Section 2.2–2.3 (purposes and sharing), and Section 3 (withdrawal rights).
Conveo.AI BV and its affiliated entities ("Conveo", "we", "us") operate an AI-moderated qualitative research platform. This Study Privacy Policy (this "Policy") explains how we collect and process personal data from individuals who participate in research studies hosted on the Conveo platform (each, a "Study", and each participating individual, a "Participant").
"Personal Data" means any information that identifies or relates to a particular individual, including information referred to as "personally identifiable information", "personal information", or "sensitive personal information" under applicable data privacy laws — including the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable US state privacy laws.
This Policy applies to data collected directly in the context of Studies. It does not govern data collected when you visit our website or use our platform as a customer — those activities are covered by our main Privacy Policy at Conveo Privacy Policy.
Controller identity
For the purposes of GDPR and UK GDPR, the Research Sponsor commissioning the Study is the data controller for your research responses. Conveo.AI BV processes your data on the Research Sponsor's behalf as a data processor, and independently as a controller for platform operations and service improvement purposes.
Blinded studies
Some studies are conducted on a blinded basis, meaning the identity of the Research Sponsor is not disclosed to participants at the time of the study in order to avoid influencing responses. This is standard independent research methodology. Where a study is blinded: (i) participants are informed at the consent stage that the commissioning company's identity is being withheld and why; (ii) participants may request disclosure of the Research Sponsor's identity at any time, including after the study has closed; and (iii) participants may withdraw consent and request deletion of their data within 30 days of that disclosure. Contact [email protected] at any time to request disclosure of the Research Sponsor's identity in relation to a study you have participated in.
If you have questions or concerns about this Policy or your personal data, please contact:
Data Protection Officer — Conveo.AI BV
Maarten Claes
Conveo.AI BV
Frankrijklei 5, Floor 3, 2000 Antwerp, Belgium
[email protected]
Our lead supervisory authority is the Gegevensbeschermingsautoriteit (GBA), the Belgian Data Protection Authority. See Section 7 for details on how to contact your local authority.
When you participate in a research study (via audio, video, or text), we may collect:
Special category data
If a Study involves topics related to health, political opinions, ethnicity, religious beliefs, or other sensitive categories under GDPR Article 9, you will be informed specifically and asked to provide explicit consent before participating. Such studies require additional safeguards and are only conducted where a valid legal basis exists.
We collect and use your personal data for the following purposes:
We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you within the meaning of GDPR Article 22.
Your responses will be shared with the Research Sponsor commissioning the Study. In blinded studies, the Research Sponsor's identity is not disclosed to you at the time of the Study — see the blinded studies note in Section 1. Research Sponsors are contractually required to:
We also share personal data with:
We do not sell your personal data. We do not use or share your personal data for targeted advertising.
Conveo's infrastructure is primarily located within the European Economic Area (EEA). Some of our technology sub-processors operate servers outside the EEA, including in the United States. Where personal data is transferred outside the EEA or the UK, we ensure appropriate safeguards are in place, including:
Details of transfer mechanisms for each sub-processor are available on request.
Retention: We retain personal data collected during a Study for the duration of the contractual relationship between Conveo and the Research Sponsor that commissioned the Study, as the Research Sponsor may need to access raw recordings, transcripts, and derived insights during that period as part of the services we provide.
Personal data will be deleted earlier where: (i) the Research Sponsor deletes the data through the Conveo platform; (ii) you exercise your right to erasure and we have no overriding legal basis for retention; or (iii) the Research Sponsor's contractual relationship with Conveo ends, in which case your data will be deleted within 90 days of termination.
In any event, your personal data will not be retained in identifiable form for longer than 5 years from the date of the Study without your further consent. Anonymised or aggregated research insights that no longer identify you may be retained beyond this period.
You may request deletion of your personal data at any time by contacting [email protected] — see Section 3.
🇪🇺 EEA-primary infrastructure 🔐 SCCs for US transfers 🗓️ Retained while client is active · 🗑️ Deleted within 90 days of termination · ⏱️ 5-year outer cap
Depending on your location and applicable law, you have the following rights regarding your personal data. These rights are subject to certain conditions and exceptions under applicable law.
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Correction | Ask us to correct inaccurate or incomplete personal data. |
| Deletion | Request deletion of your personal data where we no longer have a lawful basis to retain it. |
| Objection | Object to processing based on legitimate interests. We will cease processing unless we have compelling legitimate grounds that override your interests. |
| Restriction | Ask us to pause processing of your data in certain circumstances — for example, while we verify an accuracy challenge. |
| Portability | Receive a copy of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract. |
| Withdraw consent | Where processing is based on your consent, you may withdraw it at any time — including during the Study by closing the session, or after the Study by contacting [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal. Blinded studies: you have an additional right to withdraw within 30 days of receiving disclosure of the Research Sponsor's identity. |
| Complaint | Lodge a complaint with your local data protection authority (see Section 7). |
How to exercise your rights
Contact us at [email protected]. We will respond within one calendar month as required by GDPR Article 12 (extendable by two further months for complex requests, with notice). We do not charge a fee for reasonable requests.
Where rights relate to data controlled by the Research Sponsor (for example, how they use insights derived from your interview), we will forward your request to the relevant Research Sponsor within 3 business days.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
While we apply industry-standard safeguards, no system is completely immune to risk. If we become aware of a personal data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
For more information about our security practices, including our SOC 2 Type II compliance status and a full list of approved sub-processors, please visit Conveo Trust Center.
Conveo's research Studies are intended for adults. We do not knowingly collect personal data from individuals under the age of 18.
Under GDPR Article 8, the minimum age of consent for information society services is 16 in most EU member states (with some permitting 13). We apply a stricter standard of 18 for research participation, consistent with established research ethics norms and the requirements of applicable US law.
If you are under 18, please do not participate in a Study. If you believe we have inadvertently collected personal data from a person under 18, please contact us immediately at [email protected] and we will delete it without delay.
Where a Research Sponsor specifically requires research involving minors (for example, in an educational context), such Studies require separate safeguards including verifiable parental consent and are subject to additional contractual requirements agreed with Conveo in advance.
We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will indicate the date of the most recent update at the top of this page.
Where changes are material — meaning they affect how we use your personal data in ways that require fresh consent or that may surprise you — we will notify affected participants and obtain any additional consent required by law before the changes take effect.
We recommend checking this page periodically if you participate in multiple Conveo-hosted studies over time.
If you have questions about this Policy or concerns about how we handle your personal data, please contact us:
Conveo.AI BV — Privacy Team
Frankrijklei 5, Floor 3, 2000 Antwerp, Belgium
[email protected]
You have the right to lodge a complaint with your local data protection supervisory authority. Key contacts by jurisdiction:
We would always appreciate the opportunity to address your concern directly before you contact a supervisory authority — please reach out to us first at [email protected].
Conveo.AI BV · Frankrijklei 5, Floor 3, 2000 Antwerp, Belgium · [email protected]