Privacy notice

Viton is a voice-first feedback platform operated by GoldinKollar. This notice explains what we collect when someone answers a survey, and what a customer workspace can see.

What we process

• Voice recordings you submit as survey answers, and the transcript derived from them.
• Derived analysis: the structured answer, language and dialect, sentiment, emotion scores, and whether the words and the tone disagree.
• Optional expression signals, only if the workspace enabled camera capture and you consented. These are aggregate facial measurements computed in your browser — no image or video ever leaves your device.
• Technical data needed to run the service: an anonymous session identifier, coarse timing, and your IP address — hashed with a secret key before it reaches our security log, and otherwise used only to count requests against our abuse limits.

What we do not do

• We do not ask respondents for their name, and surveys are answered without an account.
• We do not sell personal data, and we do not use respondent audio to train third-party models.
• We do not store raw camera frames at any point.

Where it lives

Every answer is analysed as it arrives. The transcript and the analysis derived from it are what the workspace works with afterwards, and they are held in the workspace’s own records.

Keeping the recording itself, so that a workspace member can play it back, depends on the audio storage the deployment is configured with: a recording is retained only where that storage accepts private writes, and it is then reachable only through authenticated, tenant-checked endpoints — a signed-in member of that one workspace, never a public URL on its own. Where private storage is not configured, the recording is not retained at all: it is analysed and discarded, and only the transcript and the analysis remain. Either way, each workspace sets its own retention window; a nightly job then permanently deletes any stored audio and erases the transcript and analysis derived from it, for survey answers and for uploaded analysis clips alike.

Who processes it besides us

Answers are analysed by Google’s Gemini API, which is the only third party that receives respondent content. A spoken answer is sent as audio; a typed answer is sent as text. Google processes it to return the transcript and the analysis, and under its paid API terms does not use that content to train its models. It is the only subprocessor that sees an answer.

Two others hold data without reading answers as such: Vercel hosts the application and its blob storage, and Neon hosts the database. Outbound email — invitations and password resets to workspace members, never to respondents — is sent through Resend.

Where this runs. The database and the application are hosted in the United States (us-east-1), so answers are transferred outside the country they were given in. We state this plainly because it is the question a data-protection officer asks first and the one an unnamed “cloud infrastructure” clause is written to avoid. Where a client needs processing confined to a particular region, that is arranged before a survey is fielded, not after.

The analysis is not regional. Answers are analysed through Google’s general API address (generativelanguage.googleapis.com), which pins no region: Google routes each request to its own capacity, so we cannot today tell you which country a particular answer was processed in. Hosting in us-east-1 is a fact about where the database and the application sit, not a claim about where analysis happens, and we would rather say so than let the first imply the second.

Google publishes regional and data-residency options for this API; moving onto one is a configuration and contract change, arranged before a survey is fielded rather than after. Separately, a workspace can switch off AI reading of open-ended text altogether — but a spoken answer is still sent to be transcribed, because that is the product.

Your rights

You can ask for a copy of your data or its deletion. Workspace owners and admins can download the whole workspace as a single file from Settings, and owners can permanently delete it there. For respondent requests, contact the organisation that sent you the survey — they are the data controller; Viton processes on their behalf.

Automated analysis

Sentiment, emotion and mismatch scores are model estimates, not ground truth about a person. They are intended to prioritise human attention, and should not be used as the sole basis for a decision that affects someone.

Contact

Questions: privacy@goldinkollar.com