Privacy policy.
How User Echo handles personal data on this website, in free studies, in customer projects and in job applications.
1. Who we are
The controller of your personal data is User Echo BV, De Burletlaan 158, 2610 Wilrijk, Belgium. Enterprise and VAT number BE 1040.593.333. Email: olivier@userecho.io.
2. What we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You request a free study | Name, work email, company, role, company size, decision timing, your research question and audience, optional questions and files | Set up and deliver your free study, walk you through it, follow up | Your request (pre-contractual steps) and legitimate interest |
| You book a call or contact us | Name, email, company, message, meeting details | Answer your question and prepare the call | Legitimate interest |
| You apply for a job | Name, email, profile links, CV, the work you share, contract preference | Assess your application | Pre-contractual steps; consent for keeping your application longer |
| You become a customer | Contact and billing details; the research data you provide for your study | Deliver the agreed service, invoicing | Contract; legal obligation (accounting) |
| You visit the website | Usage data via analytics and, with consent, marketing cookies | Understand and improve the site, measure campaigns | Consent (non-essential cookies) |
3. Files and research data you share
Files uploaded for a free study are used only to set up that demo study. They are never used to train Echo or shared with anyone else, and we delete them after your walkthrough call. Please remove personal data about your customers before uploading.
For customer projects, we process research data on your behalf under a data processing agreement. Your data is never used to train AI models: not Google's, and not Echo's own. When the project ends, or whenever you ask, we delete or return your data within 30 days.
4. Who we share data with
We use trusted service providers (processors) to run our business. They only process data on our instructions.
| Provider | Used for | Location |
|---|---|---|
| HubSpot | Forms, contact and lead management | [EU data centre?] |
| Calendly | Booking calls | [region] |
| Google Cloud (Cloud Run) | Hosting the Echo platform | EU (europe-west) |
| Google (Gemini API) | AI model inference and embeddings | USA, under EU Standard Contractual Clauses |
| Supabase | Database and vector storage | EU (europe-west) |
| [Analytics: Plausible or Google Analytics] | Website statistics | [region] |
| Ad measurement (with consent) | [region] | |
| [Email provider] | [region] |
Where data leaves the European Economic Area, we rely on adequacy decisions or the European Commission's standard contractual clauses.
5. How long we keep data
- Free study requests and leads: [e.g. 24 months after last contact]
- Free study files: deleted after your walkthrough call
- Job applications: [e.g. 6 months, or 12 months with your consent]
- Customer research data: deleted or returned within 30 days after the end of the project, or earlier on request
- Billing data: as long as required by Belgian accounting law (currently 10 years for accounting records)
6. Your rights
You can ask to access, correct or delete your data, object to or restrict processing, receive your data in a portable format, and withdraw consent at any time. Email olivier@userecho.io. You can also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).
7. Security
We take appropriate technical and organisational measures to protect your data. See our Trust page.
8. Changes
We may update this policy. The date at the top shows the latest version.