Privacy Policy

Odevio is an AI-powered voice interview platform operated by DEUSE SRL, registered with the BCE under number BE 0654.792.659, with its registered office at Avenue Maurice Destenay 1, 4000 Liège, Belgium ("we", "us", "Odevio").

This Privacy Policy explains how we collect, use, and protect personal data when you use the Odevio platform (the "Platform"), whether you are a client, a member of a client's team, or a respondent participating in an interview.

1. Who Is Responsible for Your Data?

The answer depends on your role:

• If you are a client or team member: DEUSE SRL is the data controller for the account and billing data we collect directly from you.
• If you are a respondent (i.e. a person participating in an interview): the client who created the interview is the data controller. DEUSE SRL acts as a data processor on their behalf, processing your data solely according to the client's instructions and for the purpose of delivering the service.

2. What Data We Collect

a) Client and team member data

• Name, email address, phone number, job title
• Company name, VAT number, billing address
• Account credentials and usage logs
• Payment information (processed by our payment provider; we do not store card details)

b) Respondent data

• Name and email address (if provided by the client)
• Voice recordings and transcripts of interviews
• AI-generated analyses, scores, and summaries
• Technical metadata (browser type, IP address, timestamps)

c) Automatically collected data

• Cookies and similar technologies (see Section 8)
• Log data: IP address, device information, pages visited, access times

3. Why We Process Your Data

We do not sell personal data to third parties. We do not use respondent voice recordings or personal data to train AI models without explicit, separate consent.

4. Who We Share Data With

We only share personal data with the following categories of recipients, and only to the extent necessary:

• Cloud hosting and infrastructure providers (for storing and delivering the service)
• AI service providers (for processing voice interviews — data is processed, not retained by these providers beyond what is necessary to deliver results)
• Payment processors (for handling transactions)
• Professional advisors (accountants, legal counsel, when required)
• Law enforcement or regulators (only when legally compelled)

A list of our current sub-processors is available upon request at privacy@odevio.com.

5. International Transfers

Your data is primarily hosted within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.

6. How Long We Keep Your Data

Clients can delete individual respondent data at any time through the Platform.

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing in certain circumstances
• Port your data to another service (in a structured, machine-readable format)
• Object to processing based on legitimate interest
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@odevio.com.

Respondents: since your data is controlled by the client who invited you, we recommend contacting them first. We will assist them in fulfilling your request.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA) or your local supervisory authority.

8. Cookies

We use cookies and similar technologies for:

• Essential cookies: required for the Platform to function (authentication, security). No consent needed.
• Analytics cookies: help us understand how the Platform is used. Only placed with your consent.

We do not use advertising or tracking cookies. You can manage your cookie preferences at any time through the cookie banner or your browser settings.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, regular security reviews, and incident response procedures. Security is an obligation of means — we take reasonable steps to protect data but cannot guarantee absolute security.

In the event of a data breach likely to affect your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay, in accordance with the GDPR.

10. AI-Specific Information

The Platform uses AI to conduct voice interviews and generate analyses. Key points:

• AI outputs (transcripts, scores, summaries) are decision-support tools — they do not replace human judgment.
• Voice recordings are processed to generate transcripts and analyses. They are not used to build or train general-purpose AI models unless you have given separate, explicit consent.
• We work to identify and mitigate bias in our AI systems, but no AI system is entirely free from bias.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to clients via email or through the Platform at least 30 days before taking effect. The latest version is always available on our website.

12. Contact

For any privacy-related question or request:

DEUSE SRL — Odevio
Avenue Maurice Destenay 1, 4000 Liège, Belgium
Email: privacy@odevio.com