Intervolut
Legal

Privacy Policy

Last updated April 22, 2026
01

Data Controller

Intervolut is operated by Foxary SRL, a company registered in Belgium. Foxary SRL VAT: 1032.783.843 Rue Martin Pfeiffer 7 Brussels, Belgium Email: contact@intervolut.com We act as the data controller for all personal data collected through Intervolut.
02

Data We Collect

We collect only what's necessary to operate the platform. Account Data Name, email, password (encrypted), and company information. Usage Data IP address, device and browser information, pages visited, and actions performed. Interview Simulation Data Written answers, optional voice and camera recordings, transcriptions, analysis metrics, AI-generated feedback and scores, and session logs. Manager Access Managers can view consultant profiles, session results, and AI feedback for their team only. They cannot compare unrelated consultants or access recordings outside their team. Billing & Support Payment data is handled by Stripe. We don't store card numbers. Support conversations are retained for service quality.
04

How We Use Data

Your data enables us to: • Authenticate and manage your account • Run interview simulations and generate AI feedback • Provide managers visibility into their team's readiness • Improve platform performance and security • Deliver support and send updates (with consent) AI scores are advisory decision-support. Intervolut is not configured to make decisions automatically; customers remain responsible for how outputs are reviewed and used in staffing or employment workflows.
05

Data Storage & Processors

We use EU-hosted infrastructure and contracted processors: Supabase (Frankfurt, Germany, eu-central-1) Database storage, authentication, and encryption at rest. Cloudflare R2 (Western Europe, WEUR) Voice and video recording storage with server-side encryption. Postmark Transactional email delivery. Vercel Website hosting and basic deployment telemetry. Cal.com Demo scheduling embeds and meeting booking. Stripe Payment processing. Crisp In-product support chat, loaded after cookie consent on the marketing site. PostHog Product and website analytics after cookie consent. We configure analytics to respect Do Not Track signals. AI providers Interview transcription and scoring may be processed by contracted AI providers, including OpenAI, Azure OpenAI, and Google Gemini. The full sub-processor list and Data Processing Agreement are available on request. For transfers outside the EU, we use Standard Contractual Clauses (SCCs) to ensure adequate protection.
06

Retention Periods

Account & Interview Data Kept until you delete them or your account. Voice & Camera Recordings Kept until you delete them or your account. Support Logs Retained for 2 years after last interaction. Billing Records Retained for 7 years as required by Belgian law. When you delete your account, all personal data is permanently removed within 30 days, except where retention is legally required.
07

Cookies & Tracking

We use cookies to operate our website and understand how you use it. Essential Cookies (Always Active) Authentication, security, and consent preferences. These cannot be disabled. Analytics Cookies (Require Consent) We use PostHog to understand visitor behavior. Data collected includes anonymized usage patterns, device type, browser, and country. Retained for 12 months. Your Choices When you first visit, you can accept or reject analytics cookies. Change your preference anytime via "Cookie Settings" in the footer. If you reject cookies, no tracking data is collected. We only store your consent preference. We respect browser "Do Not Track" signals.
08

Your Rights

Under GDPR, you have the right to: • Access your personal data • Correct inaccurate information • Delete your data ("right to be forgotten") • Restrict how we process your data • Receive your data in a portable format • Object to processing • Withdraw consent at any time To exercise any right, email contact@intervolut.com. We respond within 30 days. Complex requests may take up to 90 days total. You may also lodge a complaint with the Belgian Data Protection Authority: Autorité de protection des données Rue de la Presse 35, Brussels www.dataprotectionauthority.be
09

Children's Privacy

Intervolut is not intended for users under 16. We do not knowingly collect data from minors. If we discover such data, we delete it immediately.
10

AI & Automated Processing

Our interview simulations process: Voice recordings, camera recordings, transcriptions, analysis metrics, and AI-generated feedback. Purpose Provide training feedback to the consultant and readiness signals to authorized managers. We do not use your interview data to train our models. Automated Decision-Making AI scores are generated automatically as advisory feedback. AI outputs support human review; Intervolut does not execute hiring, promotion, termination, or staffing decisions. Your organization remains responsible for any decision it makes with the output. See also: our Trust & Security page for the EU AI Act posture and sub-processor details.
11

Data Breach Notification

If a data breach poses high risk to your rights, we will notify you without undue delay via email or platform notification. We also notify the supervisory authority within 72 hours as required by GDPR.
12

Contact

Foxary SRL VAT: 1032.783.843 Rue Martin Pfeiffer 7 Brussels, Belgium contact@intervolut.com