Akteora is run by [Legal business name]. This page explains what personal data we handle, why, and what you can do about it. If anything here is unclear, email us at [support@akteora.com].
Who is responsible for what
For the businesses that use Akteora, we decide how their account data is used, so we are responsible for it. The testimonials those businesses collect are different: we handle them on the business’s behalf and follow its instructions. If you sent a testimonial, the business you sent it to decides what happens to it, and you can contact them directly.
If you use Akteora for your business
- Your name, email address and password. We only ever store passwords as secure hashes, never as readable text.
- Your organisation’s name, brands, logos, team members and settings.
- Your plan and subscription status. Paddle handles the actual payment, so your card details go to Paddle, not to us.
- A record of important actions in your account, like approving or deleting a testimonial, so you can see who did what. We keep a hashed version of the IP address with it, never the address itself.
- If you sign in with Google or GitHub, we receive your name and email address from them. We don’t keep their access tokens.
We use this to run your account, bill you, keep the service secure and support you.
If you send a testimonial
- What you send: your video, voice recording or written words, plus any details you choose to add, such as your name, email, job title, company and rating.
- The consent wording you agreed to, saved word for word, and when you agreed.
- Your browser type and rough country, and a hashed version of your IP address (never the address itself), which helps us stop abuse.
- A written transcript of recordings, which is shown with your testimonial and makes it searchable for the business.
Your recording stays private. It only becomes public if the business approves it and chooses to publish it. If you gave an email address, you’ll get a confirmation email with a link that lets you remove your testimonial whenever you want. Removing it permanently deletes the recording, your words and your details.
Reviews a business imports
A business can bring in reviews it already has, for example from Google or Trustpilot. These contain what was in the original review, usually a name, the text, a rating and a date. They are labelled with where they came from. If you wrote one and want it removed, contact the business, or email us and we’ll pass it on.
If you view testimonials
Our public testimonial pages and the testimonial widget on other websites set no cookies and use no analytics or tracking. The dashboard only uses the essential cookies needed to keep you signed in.
Services that help us run Akteora
We use a small number of trusted providers, and they may only use your data to provide their service to us:
- Hostinger, which hosts our servers and database.
- Cloudflare, which stores recordings and files and delivers them quickly.
- Paddle, which handles payments, taxes and invoices as our reseller. Paddle is responsible for the payment details it collects, under its own privacy policy.
- OpenAI, which turns recordings into transcripts, suggests tidy-ups of spoken text that only the respondent can accept, and helps pick moments for video reels. OpenAI does not use this data to train its models.
- Google and GitHub, only if you choose to sign in with them.
- An email delivery provider, which sends the emails the service needs to send.
Some of these providers may process data outside your country, including in the United States. We only work with providers that protect it to the standard the law requires.
How long we keep things
- Account data stays for as long as your account is open.
- When you ask us to close your account, we delete its data within 30 days.
- A deleted testimonial is removed from the service straight away. Copies can remain in our private backups for up to 6 months, until those backups are replaced.
- Export files are deleted 7 days after they’re made.
Keeping data safe
All traffic is encrypted. Recordings are stored privately and are only reachable through short-lived links, unless the business publishes them. Passwords, API keys and IP addresses are stored as hashes. Only the people who run Akteora can reach the servers.
Your rights
Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, get a copy of it, or object to how we use it. Email [support@akteora.com] and we’ll reply within 30 days. If your request is about a testimonial, we may involve the business you sent it to, since it decides what happens to it. You can also complain to your local data protection authority.
Children
Akteora isn’t meant for anyone under 16, and we don’t knowingly collect their data.
Changes
If we change this policy in a way that matters, we’ll tell businesses by email or in the app before it takes effect, and update the date at the top of this page.