Skip to main content

Privacy Policy

Privacy Policy

Last updated: September 18, 2025

This Privacy Policy informs you about the processing of personal data by deep choice UG (haftungsbeschränkt) in connection with the use of our website and services.

We process your personal data responsibly and in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

1. Data Controller​

deep choice UG (haftungsbeschränkt)
Mühlenstraße 8 A, 14167 Berlin, Germany
Email: contact@valueflow.ai · Tel.: +49I5229963575
Authorized representatives: Dr. Patrick Winter, David Berscheid

2. Who does this statement apply to?​

Website visitors (including newsletter, demo interviews) – Data Controller: us.

Customers/Admins/Users of the studio – Data Controller: us.

Interview participants in customer projects – We process as data processor for our customers. The information obligation primarily lies with the respective client (Art. 13/14 GDPR). This statement describes additionally how we process on behalf of clients.

3. Categories of personal data​

  • Master data: Name, company, role, contact details, billing data.
  • Account/Usage data: Log-ins, roles, settings, IP address, timestamps, device/browser data.
  • Communication: Support requests, emails.
  • Audio & Transcript: Voice recordings, transcripts, possibly metadata (duration, pauses, speech rate).
  • Analytics/Operational data: Error/performance logs, token/minute consumption, telemetry/usage data (e.g., call frequencies, feature usage, latencies), configuration metadata (e.g., selected languages/models). Not included are the content data of interviews (audio/transcripts) for analysis/product improvement purposes.
  • Newsletter data: Email, double opt-in proof.
  • Payment data: via payment service providers (e.g., Token, last 4 digits).

4. Purposes & Legal basis​

  • Provision of website/studio, registration & contract fulfillment (Art. 6 para. 1 b GDPR).
  • Operation, security, fraud prevention, abuse detection (Art. 6 para. 1 f GDPR).
  • Support & communication (Art. 6 para. 1 b/f GDPR).
  • Newsletter/product updates only with consent (double opt-in) (Art. 6 para. 1 a GDPR; revocable at any time).
  • Demo interviews: Processing of audio/transcripts based on consent (Art. 6 para. 1 a GDPR).
  • Customer interviews: Processing of audio/transcripts on behalf of clients (Art. 28 GDPR); legal basis determined by the client (e.g., consent, contract, legitimate interest).
  • Legal obligations (Art. 6 para. 1 c GDPR), e.g., tax retention.

No training purpose​

Interview data is not used for training AI models (except for explicitly activated opt-in/beta functions).

Product analysis (usage data/metadata, no content tracking)​

We evaluate usage data and technical metadata (e.g., call frequencies, feature usage, performance and error metrics, token/minute consumption, configuration metadata) for billing, security, error analysis and service improvement (Art. 6 para. 1 f GDPR – legitimate interest in a stable and improved product). Conversation content (audio/transcripts) is not evaluated for this purpose. Content evaluation only occurs with explicit prior consent (e.g., for beta/support purposes).

Reference mentions (without personal reference)​

We may use company names and logos of our customers for reference purposes (e.g., website, presentations, social media, PR/sales). This does not affect personal data. If marketing materials exceptionally contained personal content (e.g., quote with name), we would only process this based on consent (Art. 6 para. 1 a GDPR) or another permissible legal basis. An objection to pure reference mention is possible at any time (contact: contact@valueflow.ai).

5. Cookies, Tracking & Consent management​

We use essential cookies (operation/security) and – only with consent – analytics/marketing cookies. Manage/revoke consents in the consent banner. Details on services see cookie notices.

6. Recipients & Data processors (categories)​

  • Hosting/Cloud by region (EU/EEA, USA, UK, APAC, … – depending on chosen plan/server location).
  • Speech-to-Text / Text-to-Speech / LLM providers (transcription, generation, post-processing).
  • Email/Newsletter, payment service providers, error/performance monitoring, analytics, support.

Example providers:​

  • Microsoft Azure (Hosting/Compute, storage; depending on plan in chosen region)
  • Azure OpenAI Service (OpenAI via Microsoft Azure) for voice/AI functions

7. Third country transfer​

For processing outside the EU/EEA, we use EU Standard Contractual Clauses (SCCs) and possibly additional measures. For USA providers, we check the EU-US Data Privacy Framework status, where applicable.

8. Retention period & Deletion​

  • Accounts/Contract data: during contract term; legal retention up to 10 years.
  • Logs/Security data: usually 30–180 days.
  • Newsletter data: until revocation, then blocked for proof purposes.
  • Customer interview data (audio/transcript): according to client specifications
  • Demo interviews: 180 days, unless revoked earlier.

9. Your rights (GDPR)​

Access, rectification, erasure, restriction, data portability, objection, withdrawal, complaint to supervisory authority.

Competent: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, https://www.datenschutz-berlin.de

10. Obligation to provide​

The provision of personal data is partially legally or contractually required. Without this data, we may not be able to fulfill the contract.

Contact​

If you have questions about data protection, please contact:
Email: contact@valueflow.ai