Plain-language summary
- You are taking part in a research study. We record your answers.
- You can ask us to delete your data at any time.
- We do not sell your data.
- We do not train AI models on your data.
- We do not collect your name, email, IP address, or any other direct identifier.
1. About this policy
This Study Privacy Policy describes how Fast Insight Inc. ( “Fast Insight”, “we”) processes personal data collected from respondents who take part in AI-moderated research studies on the Fast Insight platform.
For these studies, Fast Insight acts as a Processor: we run the study on behalf of the organisation that commissioned it (the Research Organization), which is the Controller of your responses. For questions about this policy, or to exercise your rights, contact privacy@fastinsight.ai.
Fast Insight Inc. (ファストインサイト株式会社), SENQ Meguro, Tokyo, Japan.
2. Data we collect
When you take part in a study we collect only what is needed to run it:
- Your transcript — the text of your answers to the AI interviewer.
- If the study is a voice study: recorded audio of your answers.
- If the study is a video study: recorded video and audio of your answers.
- Your responses to any screening or survey questions.
- An opaque panel identifier supplied by the panel provider (Cint) that lets us return your completion status. This identifier is not linked to your name, email, or contact details on our side.
- A session cookie used only to keep your interview session alive in your browser.
- Metadata about screen activity during the interview, such as how often you left the interview screen before answering. We use this to check response quality and prevent fraudulent responses, and an interview may be ended early as a result. We never record what you do elsewhere on your device, what other pages you visit, or the contents of your clipboard.
We do not collect your name, email address, IP address, or any other direct identifier.
3. How we use your data
- To conduct the study and deliver the results to the Research Organization.
- To generate aggregate and anonymised insights used to improve the Fast Insight platform. We never use your individual answers to train AI models.
4. Who we share your data with
We share your responses with the Research Organization that commissioned the study — they are the Controller and decide how the findings are used within their organisation.
We also rely on a small number of sub-processors to run the platform. Each is bound by a data processing agreement and has been vetted for security.
- OpenAI(United States) — large language model and speech-to-text transcription. What we send: the text of your answers (for generating the AI interviewer's next question) and, in voice and video studies, the recorded audio of your answers (for transcription only). We never send your video, video frames, or any face data to OpenAI or any other external AI service. Respondent data sent via the API is not used to train OpenAI models, and OpenAI is bound by a data processing agreement providing protection equivalent to this policy. The app asks for your permission on the consent screen before any of this data is sent.
- Google Cloud(United States) — text-to-speech for the AI interviewer's voice.
- Supabase (Tokyo region, Japan) — database and object storage for transcripts, audio, and video.
- Railway (United States) — application hosting.
- Cint (Sweden / United States) — the panel provider that routed you to this study.
Video recordings are captured in your own browser using standard web APIs and uploaded directly to Supabase storage; we do not use a third-party video relay service.
Stripe is used only for researcher billing and never receives respondent data.
5. Storage, international transfers, and retention
Transcripts, audio, and video are stored in Supabase's Tokyo region (ap-northeast-1). Some sub-processors listed above are located in the United States. For respondents in the EEA or the United Kingdom, any transfer of personal data outside the EEA is protected by the European Commission's Standard Contractual Clauses (SCCs), supplemented by additional technical and organisational measures where required.
We keep your responses for the period specified by the Research Organization or as required by law. If no period is specified, we keep them only as long as necessary for authorized research and compliance purposes.
Face data
In video studies, the recording contains your face. We store this face data for two reasons: (1) the Research Organization needs the recording to verify and analyse your responses, and (2) we run automated analysis of recording frames (face presence and facial-expression estimation) on Fast Insight's own servers to support analysis of study results. Your face data (video frames) is never sent to OpenAI or any other external AI service or third party — it is processed exclusively on our own infrastructure and shared only with the Research Organization as part of the recording.
Face data is retained for the same period as the video recording it is part of. When the Research Organization deletes a study, the underlying files — including all face data — are erased from our storage. You can ask us to delete your recording at any time (see §6) and we apply the same procedure.
6. Your rights
Under the GDPR (and equivalent laws where you live) you have the right to:
- Access the personal data we hold about your participation.
- Correct inaccurate data.
- Ask us to delete your data (“right to erasure”). We honour deletion requests by removing your audio and video, redacting your transcript, and dropping the opaque panel identifier that links the record back to you.
- Object to or restrict processing.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@fastinsight.ai. We will act on valid requests within one month, in line with GDPR Art. 12(3), and we will relay the request to the Research Organization where they are the Controller of record.
7. Security
All traffic is encrypted in transit with TLS 1.2 or higher. Data at rest is encrypted with AES-256. Access to respondent data is limited to authorised personnel on a least-privilege basis, and database access is further constrained by row-level security policies.
8. Children
Fast Insight studies are not directed at people under the age of 16. If you believe a child has taken part in a study, contact us at privacy@fastinsight.ai and we will delete the data promptly.
9. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated effective date.
10. Contact
Fast Insight Inc. (ファストインサイト株式会社)
SENQ Meguro, Tokyo, Japan
privacy@fastinsight.ai
Effective: 2026-04-14
Last updated: 2026-07-22