Privacy policy — found from the homepage — involve.me

Cited by

Facts read from this source

• Entity Report an error

  “The services are provided by involve.me, a product of stereosense GmbH (hereinafter referred to as “involve.me”), an Austrian company with registered address at Gußhausstraße 15/8, 1040 Vienna, company registered at the court Handelsgericht Wien with the commercial register number: FN 461219p.”

• Policy last updated Report an error

  “Last updated on July 15, 2025”

• Controller roles Report an error

  “For the purpose of this Privacy Policy, we act as a Data Controller when processing personal data of: Website visitors (who access the site), and involve.me account owners (who use the service directly).”

• Processor role funnel participants Report an error

  “In instances where involve.me funnels collect user data on behalf of our customers, we act as a Data Processor.”

• DPA available Report an error

  “For more details on how we process data on behalf of our customers, please refer to our Data Processing Agreement.”

• Retention billing Report an error

  “Account’s Billing Data: Retained for 7 years after contract end (Austrian tax law).”

• Retention marketing leads Report an error

  “Marketing Leads: Retained for 24 months after the last interaction, or until consent is withdrawn.”

• Retention participant submissions Report an error

  “Collected via free accounts: Retained for 30 days (default). Collected via paid accounts: Retained indefinitely (default).”

• Retention account Report an error

  “Free accounts: Retained for 7 months with no interaction. Paid accounts & previously paid accounts: Retained indefinitely or until deletion request.”

• Deletion request SLA Report an error

  “Deletion Requests: Data deleted within 30 days upon request.”

• Region Report an error

  “We primarily process and store data within the European Union, where the core infrastructure is located.”

• Transfer safeguards Report an error

  “When transferring data outside the EU, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) and Transfer Impact Assessments (TIAs).”

• AI features optional Report an error

  “Optional Use: The use of AI-powered features within our services is entirely optional. We do not transmit any data to large language models (LLMs) or AI services unless you specifically choose to utilize an AI feature.”

• AI personal data filtering Report an error

  “By default, we do not send any personal data to AI LLMs. Even when respondent data is analyzed through AI-generated reports, personal data is filtered out, provided that users collect personal information correctly using designated Contact Forms rather than free text input fields.”

• Payments stripe Report an error

  “Personal Data collected: Name, Address, Email, Phone, Credit Card Details. Place of processing: United States.”

• Affiliate Report an error

  “Reditus is a service provided by Reditus B.V. Europalaan(Netherlands).”

• No card storage Report an error

  “We will not store or collect your payment card details. That information is provided directly to our third-party payment processors”

• Pci dss Report an error

  “These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.”

• Min age Report an error

  “Our Service does not address anyone under the age of 18 (“Children”). Accounts can and should only be registered by individuals of at least 18 years of age, though involve.me does not have explicit technical mechanisms in place to enforce this.”

• Encryption Report an error

  “Encryption: All personal data is encrypted in transit using TLS and at rest using industry-standard encryption algorithms.”

• MFA admin Report an error

  “Authentication: Multi-factor authentication (MFA) is required for administrative access to critical systems.”

• Audits Report an error

  “Regular Audits: We conduct regular (at least annual) internal and external audits to evaluate the effectiveness of our security and privacy controls.”

• Breach notification Report an error

  “Data breaches are reported to the Austrian Data Protection Authority within 72 hours of becoming aware of the incident.”

• Trust center Report an error

  “You’ll find a documented list of measures in our Trust Center.”

• Subject rights Report an error

  “To access and receive a copy of the Personal Data we hold about you To rectify any Personal Data held about you that is inaccurate To request the deletion of Personal Data held about you”

5 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Academic Researcher Consent, GDPR & respondent data
• The Academic Researcher Hosting choice, teams & portability
• The Academic Researcher European sovereignty
• The Data Protection Officer Consent, GDPR & respondent data
• The Data Protection Officer Hosting choice, teams & portability
• The Data Protection Officer European sovereignty
• The HR Lead Consent, GDPR & respondent data
• The HR Lead Hosting choice, teams & portability
• The HR Lead European sovereignty
• The Market Researcher Consent, GDPR & respondent data
• The Market Researcher Hosting choice, teams & portability
• The Market Researcher European sovereignty
• The Operations Manager Consent, GDPR & respondent data
• The Operations Manager Hosting choice, teams & portability
• The Operations Manager European sovereignty
• The Skeptic Consent, GDPR & respondent data
• The Skeptic Hosting choice, teams & portability
• The Skeptic European sovereignty