# Your privacy & your data

Before you record, the portal shows a privacy card. It says who is responsible for your data.
What your host chose decides which card you get.

| The card says | What you do |
|---|---|
| "The organiser is responsible for how your data is used in this session. dembrane processes your conversation on their behalf." | Press "I understand". |
| The same text, with the box "I consent to my conversation being recorded and processed." and the link "Read the organiser's privacy policy". | Tick the box, then press "I understand". You cannot go on without the tick. |
| "dembrane records and analyses this conversation based on our legitimate interest: to capture discussions accurately, deliver reliable insights, and develop our platform." | Press "I understand". You get this card at sessions dembrane runs itself. It links to "Read the full privacy policy". |

"The organiser" is your host. On the second card, their name can take its place.

A host can share a link that skips the cards. They must then give you this information another
way. If you saw no privacy card, ask them.

## The small print, in the portal's words

On the first two cards:

> Recordings are transcribed and analysed for insights. Your data is stored on secured servers
> in Europe, is not used to train AI models, and is deleted within 30 days after the project has
> ended.
>
> Questions about your privacy? Contact the organiser directly.

On the third card:

> Recordings and transcripts are deleted within 30 days of the session closing. Data is stored
> on secured servers in Europe and is not used to train AI models.
>
> Questions or want to object? Contact us at info@dembrane.com or see our privacy policy.

That is what the portal tells you, and this page adds nothing to it. For how long your data is
kept and what your rights are, ask your host or read
[dembrane's privacy policy](https://dembrane.notion.site/Privacy-Statement-Dembrane-1439cd84270580748046cc589861d115).
dembrane is ISO 27001 certified.

## Who can see what you share

- A language model (Gemini, on Google Vertex AI) turns your recording into text.
- Your host, and the people they work with in dembrane, can read that text and listen to the
  recording.
- If your host switched on anonymisation (Beta), the recording screen says: "This transcript will
  be anonymized and your host will not be able to listen to your recording." Names, email
  addresses, phone numbers and addresses in the text are replaced with placeholders.
- A report your host publishes can be read by anyone who has the link. It contains no
  transcripts.

## Your choices

- Say only what you want to share. The portal's own tip: "Avoid sharing details you don't want
  the host to know. Be mindful and don't record others without their consent."
- Remove a piece while you are still in the session: "View your responses", then "Delete".
- Stopping does not remove what you already recorded. Your host can delete your conversation
  from the project, so ask them if you change your mind.
- An email address is your choice. The thank-you page may ask for one. Your host can see it, and
  every report email has an unsubscribe link.

## Related

- [What to expect](./what-to-expect.md)
- [Recording your conversation](./recording-your-conversation.md)
- [Your report](./your-report.md)