Privacy Policy

Overview

Soak provides LLM-assisted qualitative analysis tools for researchers. This policy explains how we handle data when you use our service.

What We Process

Research Data (Your Customers' Data)

When you upload research transcripts or documents for analysis, you remain the data controller. We act as a data processor on your behalf. Your data is stored on OVHcloud infrastructure in France; OVHcloud acts as a sub-processor under GDPR.

• Qualitative transcripts and documents you upload
• Embeddings generated from your documents
• Analysis results (themes, codes, quotes)

Account Data

Information we collect to provide the service:

• Email address and name
• Organisation/institution (if provided)
• Usage data (runs created, features used)
• Payment information (processed by TBC)

How We Process Data

LLM Processing

Your research documents are sent to LLM providers for analysis. By default, we use Azure OpenAI in EU regions.

• Your data is not used to train models
• Processing region is controller-configurable
• BYOK (Bring Your Own Key) users control their own API provider

Embeddings

We generate vector embeddings from your documents to enable semantic search and comparison features. These are stored alongside your analysis results.

Data Retention

• Free tier: Results retained for 14 days, then deleted
• Paid tiers: Results retained until you delete them
• Account data: Retained while your account is active

Your Rights

You have the right to:

• Access your data
• View your analysis results
• Delete your data and account

To exercise these rights use the account settings in your dashboard or contact us at [TBC EMAIL].

Subprocessors

We use third-party services to provide Soak. See our subprocessor list for details.

International Transfers

By default, data is stored and processed in the EU (OVHcloud, France). If you use a US-based BYOK provider, data may be transferred to the US under Standard Contractual Clauses.

Security

We implement technical and organisational measures to protect your data. See our security overview for details.

Contact

For privacy-related questions:
Email: [TBC PRIVACY EMAIL]
Address: [TBC ADDRESS]

Changes

We may update this policy. Significant changes will be communicated via email or dashboard notification.