Thank you for visiting Voiceform! We value your privacy and want you to understand how we collect, use, and protect your personal data when you interact with our website, sign up for our services as a customer, connect Voiceform to an AI assistant, request demos, receive marketing communications, or otherwise engage with us.
1. Introduction & Contact Information
Voiceform is a platform that provides survey services, research services, AI-driven qualitative research services, and other customer, employee, and audience feedback services. This Privacy Policy ("Policy") focuses on how we collect and process personal data from:
- Website visitors
- Prospective or existing customers
- Users who connect their Voiceform account to third-party AI assistants and developer tools, such as ChatGPT, Claude, and Cursor, through our Model Context Protocol ("MCP") server ("AI Integrations")
- Anyone engaging with our Site or services.
If you have questions or concerns about this Policy or your personal data, please contact our Data Protection Officer:
Data Protection Officer:
Artem Alekhin
68 Claremont St
Toronto, Ontario M6J 2M5
Canada
privacy@voiceform.com
2. Information We Collect (Website Visitors, Customers, and AI Integration Users)
When you use our website, our platform, or our AI Integrations (excluding participation in research studies), we may collect:
2.1 Contact Details
- Name, job title, employer name, and work email (e.g., when you request demos, sign up for newsletters, or create an account).
2.2 Technical & Usage Data
- IP address, browser type, operating system, device details, pages viewed, and links clicked.
- We collect this data through cookies and other similar tracking technologies.
2.3 Marketing & Communication Preferences
- Data you provide when subscribing to newsletters, webinars, or requesting marketing materials.
2.4 AI Integration Data
When you connect Voiceform to an AI assistant or developer tool through our MCP server, we collect:
- Authorization data: your Voiceform account identifier, workspace, granted permissions (scopes), and the OAuth access and refresh tokens issued to the AI client.
- Tool requests: the name of each Voiceform tool the AI client calls and the inputs it sends (for example, a study ID, survey questions, or filter criteria).
- Connection metadata: the name of the AI client (e.g., ChatGPT, Claude, Cursor), timestamps, IP address of the requesting server, request status, and error information.
We do not receive your full conversation with the AI assistant. We only receive the information the AI client includes in a request to a Voiceform tool. See Section 6 for details.
We may also obtain personal data from third parties or public sources (e.g., LinkedIn, trade shows, event registration lists).
3. How We Use Your Information
We use your information for purposes that include:
- Operate and Maintain Our Website and Services: Ensure the Site, platform, and AI Integrations function properly and are secure.
- Perform Actions You Request Through AI Integrations: Authenticate your connection and carry out the tool requests your AI assistant makes on your behalf.
- Respond to Inquiries & Provide Customer Support: Fulfill demo requests, answer questions, and offer assistance.
- Marketing & Communications: Send you updates about our services, newsletters, or promotional offers, where allowed by law or with your consent. When you provide your email after completing our personality test, we do not store any association between your email address and your test results, and your test responses are not used to personalize marketing communications.
- Analytics & Improvements: Understand how users interact with our Site and integrations, measure campaign performance, and improve our user experience.
- Other Legitimate Business Interests: Such as ensuring network and information security, preventing fraud and abuse, enforcing rate limits, improving our platform, and enforcing our agreements.
6. AI Assistant Integrations (MCP)
Voiceform offers an MCP server that lets you connect your Voiceform account to third-party AI assistants and developer tools, including ChatGPT (OpenAI), Claude (Anthropic), and Cursor (Anysphere), and other MCP-compatible clients. Once connected, the AI assistant can call Voiceform tools on your behalf—for example, to create, edit, publish, or delete surveys and studies, and to retrieve responses, transcripts, and AI-generated summaries from your workspace.
6.1 How Connection Works
You connect by signing in to Voiceform and approving the requested permissions through a standard OAuth 2.0 authorization flow. Voiceform does not ask for your password for the AI platform, and the authorization flow is designed so that the AI platform does not receive your Voiceform password. The connection can only access the workspaces and data that your Voiceform account is permitted to access.
6.2 What We Receive and What We Don't
We receive only the information described in Section 2.4: your authorization data, the tool requests the AI client sends, and connection metadata. Our MCP server is not designed to receive your broader chat history, prompts that are not sent to a Voiceform tool, files you share with the AI assistant, or information from other apps or connectors you use with it.
6.3 How We Use AI Integration Data
We use AI Integration Data only to authenticate your connection, perform the actions you request, keep the service secure and reliable (including preventing abuse and enforcing rate limits), troubleshoot errors, provide support, and produce aggregate usage statistics (such as the number of tool calls per day). We do not use AI Integration Data for advertising, do not sell it, and do not use it or content returned through AI Integrations to train AI or machine learning models.
6.4 Data Shared With the AI Platform
When your AI assistant calls a Voiceform tool, we return the requested results to that AI platform so it can respond to you. Depending on what you ask for, results may include survey content, study settings, and response data such as respondent answers, transcripts, audio or video links, and AI-generated analysis.
Once delivered, that information is processed by the AI platform under its own terms and privacy policy, which Voiceform does not control. Voiceform is not responsible or liable for how any AI platform collects, uses, stores, shares, or secures information, including information returned by Voiceform at your request. Your use of AI Integrations is also subject to our Terms of Service, including its disclaimers and limitation of liability. We encourage you to review them:
- OpenAI (ChatGPT): https://openai.com/policies/privacy-policy
- Anthropic (Claude): https://www.anthropic.com/legal/privacy
- Anysphere (Cursor): https://cursor.com/privacy
If you use AI Integrations to access data about research respondents, you are solely responsible for ensuring you have the necessary notices, consents, and legal basis to share that data with the AI platform you choose.
6.5 Retention
- OAuth tokens are kept until you disconnect, they expire, or we revoke them, and are then deleted.
- Tool request and connection logs are kept for up to 30 days for security, debugging, and abuse prevention, then deleted or aggregated.
- Content you create or change through an AI Integration (for example, a new survey) becomes part of your Voiceform account and is retained like any other account content under Section 7.
6.6 Disconnecting
You can disconnect at any time from the AI platform's connector or app settings, or from your Voiceform account settings. Disconnecting revokes the tokens issued to that AI client so it can no longer access your Voiceform data through our MCP server. Disconnecting does not delete information the AI platform has already received; contact that provider to request deletion. To request deletion of AI Integration logs before the retention period ends, contact privacy@voiceform.com.
6.7 Security
All MCP traffic is encrypted in transit using HTTPS/TLS. We use reasonable measures designed to protect tokens, such as limiting them to the permissions you approve and allowing you to revoke them at any time. Actions that change data (such as creating, publishing, or deleting a survey) are labeled so that AI assistants that support it can ask for your confirmation before running them. We cannot guarantee that any AI assistant will do so, and you are responsible for reviewing actions before you approve them.
7. Data Storage, Transfers, and Retention
- Location of Servers: We primarily store data on servers located in the United States and Canada.
- International Transfers: If you access our Site from the EEA, UK, or other regions, we rely on lawful transfer mechanisms to ensure adequate data protection. When you use an AI Integration, results are sent to the AI platform you choose, which may process them in other countries under its own terms.
- Retention Period: We keep personal data only as long as needed for the purposes described above or as required by law. AI Integration Data is retained as described in Section 6.5. You may request deletion of your data by contacting privacy@voiceform.com (where feasible).
8. Your Rights and Choices
Depending on your jurisdiction (e.g., GDPR, CCPA, PIPEDA), you may have certain rights regarding your personal data, such as:
Right to be Informed: You have the right to be informed about how we collect and use your personal data. This Privacy Policy serves as our primary means of providing that information in a clear, transparent, and accessible way.
Right of Access: You have the right to request a copy of the personal data we hold about you, including information about how it is being used.
Right to Rectification/Correction: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to be Forgotten (Erasure): You have the right to request the deletion of your personal data where there is no compelling reason for us to continue processing it, subject to applicable legal obligations.
Right to Restrict Processing: You have the right to request that we limit or suspend the processing of your personal data in certain circumstances, for example if you contest the accuracy of the data or object to our use of it.
Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that we transfer it directly to another controller where technically feasible.
Right to Object to Processing: You have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party), including profiling based on those interests. You also have the right to object at any time to processing for direct marketing purposes.
Rights in Relation to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces a legal or similarly significant effect on you. If we use automated decision-making, we will inform you and provide a means to request human review.
Right to Withdraw Consent: Where our processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to your withdrawal.
Disconnecting AI Integrations:You can revoke any AI assistant's access to your Voiceform account at any time, as described in Section 6.6.
To exercise your rights, please email privacy@voiceform.com. We will respond within the timeframe required by applicable law.
9. Security Measures
We employ industry-standard security measures to protect personal data, including encryption, access controls, and continuous monitoring. AI Integrations use OAuth 2.0 authorization and encrypted HTTPS connections. However, no method of storage or transmission is completely secure, and we cannot guarantee absolute security. We continually improve our security protocols to help ensure your data remains protected.
For more details on our security practices (e.g., approved subprocessors), please visit trust.voiceform.com.
10. Children's Data
Our website, services, and AI Integrations are not intended for individuals under the age of 18 (or higher age if mandated by law). We do not knowingly collect personal data from children in this context. If you believe we have unintentionally collected data from someone under the applicable age, please contact us to request deletion.
11. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our AI Integrations, or our legal obligations. If we make material changes, we will notify you by posting an update on this site or via email. Your continued use of our website or services after any such update constitutes acknowledgment of the modified Policy.
12. Questions, Concerns, or Complaints
If you have questions about this Policy or how we handle your personal data, please contact us at:
Voiceform Inc.
68 Claremont St
Toronto, ON M6J 2M5
Canada
privacy@voiceform.com
If you are in the EU or UK, you may also have the right to lodge a complaint with your local data protection authority. If you are in Canada, you may contact the Office of the Privacy Commissioner of Canada.