Plain-language summary
- Fast Insight K.K., a market research company, runs this study on behalf of the research sponsor.
- We record your answers. In voice and video studies, we also record your voice and, in video studies, camera video. These recordings are personal data.
- We record a hashed IP address and device and browser information to prevent duplicate or fraudulent participation.
- We do not collect your name or email address.
- We do not sell your data.
- We do not train AI models on your data.
- Participation is voluntary. You can stop at any time and ask us to delete your data.
- For deletion requests or questions, contact privacy@fastinsight.ai.
1. About this policy
This Study Privacy Policy describes how FAST INSIGHT K.K. ( “Fast Insight”, “we”) processes personal data collected from respondents who take part in AI-moderated research studies on the Fast Insight platform.
For these studies, Fast Insight acts as a Processor: we run the study on behalf of the organisation that commissioned it (the Research Organization), which is the Controller of your responses. For questions about this policy, or to exercise your rights, contact privacy@fastinsight.ai.
FAST INSIGHT K.K., 3-2-1 Kamiosaki, Shinagawa-ku, Tokyo 141-0021, Japan.
2. Data we collect
When you take part in a study we collect only what is needed to run it:
- Your transcript — the text of your answers to the AI interviewer.
- If the study is a voice study: recorded audio of your answers.
- If the study is a video study: recorded video and audio of your answers.
- Your responses to any screening or survey questions.
- In screen-sharing studies, recordings of the screen you share.
- An opaque panel identifier supplied by the panel or recruitment partner that invited you (for example Cint or Respondent) that lets us return your completion status. This identifier is not linked to your name, email, or contact details on our side.
- A session cookie used only to keep your interview session alive in your browser.
- A hashed IP address: a salted, one-way SHA-256 hash. The raw IP address is not stored with your responses. We also record a device identifier (a random ID set in your browser by our product analytics tool, PostHog) and information about your device and browser. We use these to detect duplicate or fraudulent participation and check response quality. They are kept with the interview record and deleted with it, on study deletion or your deletion request.
- Metadata about screen activity during the interview, such as how often you left the interview screen before answering. We use this to check response quality and prevent fraudulent responses, and an interview may be ended early as a result. We never record what you do elsewhere on your device, what other pages you visit, or the contents of your clipboard.
We do not collect your name or email address.
3. How we use your data
- To conduct the study and deliver the results to the Research Organization.
- To detect duplicate or fraudulent participation and check response quality.
- To generate aggregate and anonymised insights used to improve the Fast Insight platform. We never use your individual answers to train AI models.
4. Who we share your data with
We share your responses with the Research Organization that commissioned the study — they are the Controller and decide how the findings are used within their organisation.
We also rely on a small number of sub-processors to run the platform. Each is bound by a data processing agreement and has been vetted for security.
- OpenAI (United States) — AI moderator dialogue, transcription, translation, and analysis. It receives answer and dialogue text, and audio for transcription in recording studies. We never send your camera video, video frames of your face, or any face data to OpenAI or any other external AI service. Face analysis runs locally on Fast Insight infrastructure. In screen-sharing studies, shared-screen images may be sent to OpenAI to help the moderator understand what you are showing; this does not include camera video. Respondent data sent via the API is not used to train OpenAI models.
- Cartesia (United States) — AI interviewer voice synthesis; text only.
- Google Cloud (United States) — fallback AI interviewer voice synthesis; text only.
- ElevenLabs (United States) — real-time and batch transcription and subtitles in voice and video studies; audio.
- Alibaba Cloud (Singapore) — Cantonese interviewer voice synthesis only; text only.
- Microsoft Azure (Singapore) — Khmer interviewer voice synthesis only; text only.
- PostHog (United States) — device identifier and usage analytics; device and browser information and usage events.
- Supabase (Tokyo region, Japan) — database and storage; interview records, transcripts, audio, and video.
- Railway (United States) — application hosting; data processed by the application.
- Cloudflare (global edge network) — delivery and caching of our website; request and connection information.
- Panel and recruitment partners (currently Cint and Respondent; we may add others) — the partner that invited you receives your participation status (for example completed or screened out) and the identifier it issued. We do not send them your interview answers or recordings. Respondent also receives an invitation link and qualification, attendance, and payment-related decisions; reports of suspected fraud include reason codes and explanatory notes.
Video recordings are captured in your own browser using standard web APIs and uploaded directly to Supabase storage; we do not use a third-party video relay service.
Stripe is used only for researcher billing and never receives respondent data.
5. Storage, international transfers, and retention
Transcripts, audio, and video are stored in Supabase's Tokyo region (ap-northeast-1). Some sub-processors listed above are located in the United States or Singapore; Cloudflare operates a global edge network. For respondents in the EEA or the United Kingdom, any transfer of personal data outside the EEA is protected by the European Commission's Standard Contractual Clauses (SCCs), supplemented by additional technical and organisational measures where required.
We keep your responses for the period specified by the Research Organization or as required by law. If no period is specified, we keep them only as long as necessary for authorized research and compliance purposes.
Face data
In video studies, the recording contains your face. We store this face data for two reasons: (1) the Research Organization needs the recording to verify and analyse your responses, and (2) we run automated analysis of recording frames (face presence and facial-expression estimation) on Fast Insight's own servers to support analysis of study results. Your face data (video frames) is never sent to OpenAI or any other external AI service or third party — it is processed exclusively on our own infrastructure and shared only with the Research Organization as part of the recording.
Face data is retained for the same period as the video recording it is part of. When the Research Organization deletes a study, the underlying files — including all face data — are erased from our storage. You can ask us to delete your recording at any time (see §6) and we apply the same procedure.
6. Your rights
Under the GDPR (and equivalent laws where you live) you have the right to:
- Access the personal data we hold about your participation.
- Correct inaccurate data.
- Ask us to delete your data (“right to erasure”). We honour deletion requests by removing your recordings, redacting your transcript, and clearing panel identifiers, your hashed IP address, and your device identifier. Non-identifying records needed for aggregate counts and accounting may remain.
- Object to or restrict processing.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@fastinsight.ai. We will act on valid requests within one month, in line with GDPR Art. 12(3), and we will relay the request to the Research Organization where they are the Controller of record.
7. Security
All traffic is encrypted in transit with TLS 1.2 or higher. Data at rest is encrypted with AES-256. Access to respondent data is limited to authorised personnel on a least-privilege basis, and database access is further constrained by row-level security policies.
8. Children
Fast Insight studies are not directed at people under the age of 18. If you believe a child has taken part in a study, contact us at privacy@fastinsight.ai and we will delete the data promptly.
9. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated effective date.
10. Contact
FAST INSIGHT K.K.
3-2-1 Kamiosaki, Shinagawa-ku, Tokyo 141-0021, Japan
privacy@fastinsight.ai
Effective: 2026-04-14
Last updated: 2026-10-26