Privacy for teams
For teams that use Talkieback in their applications and websites.
Last updated: 30 October 2026
This is a translation for convenience. The French version prevails.
Contents
In short: Red Brick Studio keeps what is needed to run your account and bill it, never for advertising. Your users' feedback is covered by the data processing agreement.
1. Who this policy is for
You use Talkieback to receive feedback from the users of your applications and websites: you have an account, you are a member of a team, you have received an invitation to join one, or you have requested an invitation to the beta. This policy explains what data Red Brick Studio processes about you, why, for how long, and your rights.
The feedback your team receives from the users of its apps is not covered here. For that feedback, your team is the controller and Red Brick Studio is its processor: see the data processing agreement.
2. Who is responsible for your data
Red Brick Studio, sole proprietorship of Simon Gavelle (EI), 41 rue Jacquemars Giélée, 59800 Lille, France, SIRET 131 744 013 00015, publisher of Talkieback.
For any question about your data: contact@redbrickstudio.fr.
3. The data processed
| Data | Where it comes from |
|---|---|
| Your email address | You, when you sign in. Or the person who invites you to their team |
| Your name, if you provide it | You |
| Your preferences: emails (each feedback, daily digest or none), language, theme, shortcuts | You |
| Your teams, your role (owner, admin, viewer) and the apps you have access to | You and the team owners |
| The replies and notes you write on feedback, with your name | You |
| The team's name, its plan, its apps and their settings, its usage for the month (number of feedback items, voice minutes) | Your team |
| Billing: name or company name, address, VAT number, payment method, invoices | You, on Stripe's payment page. Talkieback never sees your card number |
| Sign-in: one-time code (stored as a hash), session, browser, date of last visit | Your browser |
| Web notification subscriptions, if you enable them | Your browser |
| Access granted to an agent (MCP): authorized tool, app, dates | You |
| Beta invitation request: email address | You, on the home page |
| Technical logs: IP address, date, browser | Your browser |
Talkieback does not ask for your date of birth, your location or any sensitive data.
4. What for, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create your account, sign you in with a code, manage the team, its members and its apps, provide the service | Performance of the contract (the terms of use) |
| Send you the service's emails and notifications: sign-in code, invitation, new feedback, daily digest, end of trial, quota, account closure | Performance of the contract. You control feedback emails in your preferences |
| Bill the subscription, collect payment, keep the accounts | Performance of the contract, then legal obligation (accounting) |
| Respond to a beta invitation request | Pre-contractual measures taken at your request |
| Protect the service: attempt limits per IP address and per email, sessions, technical logs | Legitimate interest of Red Brick Studio and its customers: the security of the service |
| Help you when you write to support | Performance of the contract |
No advertising, no resale, no audience measurement, no promotional email without your consent. Your data is not used to train artificial intelligence models.
5. Cookies and storage
The site sets two cookies, which are necessary for the service and therefore do not require your consent:
- The session: a random token that keeps you signed in, for 30 days at most. The database keeps only a hash of it.
- The selected team: the team you opened last, when you have several, kept for one year.
No advertising cookies and no audience measurement trackers.
6. Who receives your data
- The other members of your teams see your name, your email address, your role, and the replies and notes you write.
- The tools your team connects to Talkieback (webhooks, API, MCP agents) receive the feedback and its replies, with the name of the person who replied. Your team is responsible for them.
- Red Brick Studio, for support, billing and maintenance.
- Red Brick Studio's service providers, each for its own task only:
| Provider | Role | Where |
|---|---|---|
| Supabase Inc. | Database | Data hosted in the European Union; US company |
| Vercel Inc. | Hosting of the site and the API | Processing in the European Union; US company |
| Resend | Sending emails | United States |
| Stripe Payments Europe, Ltd. | Payment, subscription, invoices | Ireland; US group |
| Google, Apple, Mozilla, Microsoft (your browser's notification service) | Delivery of web notifications | United States; notifications end-to-end encrypted |
Stripe also processes some data on its own behalf (fraud prevention, financial obligations), under its own privacy policy.
7. Transfers outside the European Union
Some providers are established in the United States or have access from there. These transfers are covered by the EU–US Data Privacy Framework, where the provider is certified under it, or by the standard contractual clauses of the European Commission.
8. How long
- The team's account, its apps and its settings: as long as the account is open. After it is closed, the owners have 30 days to export the feedback or reopen the account; everything is then deleted.
- Your profile (email address, name, preferences): as long as you are a member of a team. Once you no longer are, it is deleted upon simple request.
- Your replies and notes: together with the feedback they relate to, according to the retention period chosen by the team.
- Sign-in codes: 1 day. Sessions: 30 days at most, or until you sign out.
- Unaccepted invitations: 30 days after they expire.
- Beta invitation requests: 30 days after they are handled.
- Access granted to agents: 30 days after it expires, or until it is revoked.
- Web notification subscriptions: until you disable them, or your browser removes them.
- Attempt limits per IP address: 1 day. Technical logs: 30 days.
- Invoices and accounting records: 10 years, as required by law.
- Backups: erased no later than 30 days after the data is deleted.
9. Your rights
You have the right to access your data, to have it rectified or erased, to object to its processing, to restrict its processing and to receive a copy of it.
- Directly on the site: your name and preferences in Preferences; leaving a team, or closing the team's account if you are its owner, in Team; your billing details and invoices in Billing.
- For everything else, write to contact@redbrickstudio.fr from your account's email address. We reply within one month.
- You may lodge a complaint with the CNIL (cnil.fr), the French data protection authority, or with the data protection authority of your country.
10. Security
Encrypted exchanges (HTTPS), data encrypted at rest, passwordless sign-in with a one-time code, sessions and codes stored as hashes, webhook secrets encrypted, administrative access limited to Red Brick Studio with two-factor authentication on the hosting providers' accounts.
11. Changes
This policy may change. The date at the top shows the last update; in the event of a material change, account owners are notified by email.