Intervolut
GDPR Compliant
Legal

Privacy Policy

Last updated December 2025
01

Data Controller

Intervolut is operated by Foxary SRL, a company registered in Belgium. Foxary SRL Rue Martin Pfeiffer 7 Brussels, Belgium Email: contact@intervolut.com We act as the data controller for all personal data collected through Intervolut.
02

Data We Collect

We collect only what's necessary to operate the platform. Account Data Name, email, password (encrypted), and company information. Usage Data IP address, device and browser information, pages visited, and actions performed. Interview Simulation Data Written answers, optional voice and camera recordings, transcriptions, analysis metrics, AI-generated feedback and scores, and session logs. Manager Access Managers can view consultant profiles, session results, and AI feedback for their team only. They cannot see global rankings or compare unrelated consultants. Billing & Support Payment data is handled by Stripe. We don't store card numbers. Support conversations are retained for service quality.
04

How We Use Data

Your data enables us to: • Authenticate and manage your account • Run interview simulations and generate AI feedback • Provide managers visibility into their team's readiness • Improve platform performance and security • Deliver support and send updates (with consent) AI scores are advisory only. They are never used for hiring decisions or any legally significant purpose.
05

Data Storage & Processors

We use GDPR-compliant infrastructure: Supabase Database storage, authentication, and encryption. Cloudflare CDN, security, and video/camera recording storage. Stripe Payment processing. For transfers outside the EU, we use Standard Contractual Clauses (SCCs) to ensure adequate protection.
06

Retention Periods

Account & Interview Data Kept until you delete them or your account. Voice & Camera Recordings Kept until you delete them or your account. Support Logs Retained for 2 years after last interaction. Billing Records Retained for 7 years as required by Belgian law. When you delete your account, all personal data is permanently removed within 30 days, except where retention is legally required.
07

Cookies & Tracking

We use cookies to operate our website and understand how you use it. Essential Cookies (Always Active) Authentication, security, and consent preferences. These cannot be disabled. Analytics Cookies (Require Consent) We use PostHog to understand visitor behavior. Data collected includes anonymized usage patterns, device type, browser, and country. Retained for 12 months. Your Choices When you first visit, you can accept or reject analytics cookies. Change your preference anytime via "Cookie Settings" in the footer. If you reject cookies, no tracking data is collected. We only store your consent preference. We respect browser "Do Not Track" signals.
08

Your Rights

Under GDPR, you have the right to: • Access your personal data • Correct inaccurate information • Delete your data ("right to be forgotten") • Restrict how we process your data • Receive your data in a portable format • Object to processing • Withdraw consent at any time To exercise any right, email contact@intervolut.com. We respond within 30 days. Complex requests may take up to 90 days total. You may also lodge a complaint with the Belgian Data Protection Authority: Autorité de protection des données Rue de la Presse 35, Brussels www.dataprotectionauthority.be
09

Children's Privacy

Intervolut is not intended for users under 16. We do not knowingly collect data from minors. If we discover such data, we delete it immediately.
10

AI & Automated Processing

Our interview simulations process: Voice recordings, camera recordings, transcriptions, analysis metrics, and AI-generated feedback. Purpose Provide training feedback and improve our AI models using fully anonymized data only. Automated Decision-Making AI scores are generated automatically but never used for decisions with legal or significant effects on you. All outputs are for self-improvement only. No automated profiling affects hiring or consequential decisions.
11

Data Breach Notification

If a data breach poses high risk to your rights, we will notify you without undue delay via email or platform notification. We also notify the supervisory authority within 72 hours as required by GDPR.
12

Contact

Foxary SRL Rue Martin Pfeiffer 7 Brussels, Belgium contact@intervolut.com