How this site uses personal data
Who we are
This site is operated by Cognitif Group Limited (company no. 17154680), 128 City Road, London EC1V 2NX. Cognitif Group Limited is the data controller for all personal data processed through this site.
We are registered with the Information Commissioner (ICO) under registration number ZC 173064.
Our Data Protection Officer is Andrew Carter, who can be contacted at andrew@cognitifgroup.ai.
Our lawful basis
We process personal data on the basis of our legitimate interests, under Article 6(1)(f) of the UK GDPR. Our legitimate interests are running a secure, working website, controlling who can use it, replying to people who contact us, and internal research to develop voice-affect analysis. We process only what those purposes need.
What we collect, and why
- Server logs. When you visit, our web server records your IP address, the date and time, the page requested and basic browser and device information. We use this to keep the site running and secure. Logs are deleted automatically after 14 days.
- Signing in. This site is open only to people with a Cognitif Group (Petalyx) account. When you sign in, we check your username and password against that account, and record the time of your sign-in. Passwords are stored only in a scrambled (hashed) form.
- Voice recordings. If you take part, we record you reading 17 short set phrases in different tones of voice, together with your username, the time, and the volume and background-noise levels from the microphone test. We use the recordings only for internal research. An administrator may add an accent marker to your recordings, to check that the research covers a range of voices. Each recording is encrypted with its own key, and the keys are held in a separate database. We keep recordings until the research no longer needs them, or until you ask us to delete them, whichever is sooner.
- Emails you send us. If you email us, we use your name, email address and message to reply. We keep them only as long as needed to deal with your enquiry.
Cookies. When you sign in, the site sets one cookie that keeps you signed in. It lasts at most 8 hours and is removed when you sign out. It is strictly necessary for the site to work, so it does not need your consent. We use no other cookies, analytics or tracking.
Who else receives data
- Google Fonts. The typeface on this site is loaded from Google, so your browser sends your IP address to Google when the page loads. Google may process it outside the UK.
- Our database provider. Recordings, and separately their encryption keys, are stored with Supabase, which processes them on our behalf.
- Our hosting provider. The site runs on a server in London operated by DigitalOcean, which processes the server logs on our behalf.
We do not sell personal data or use it for automated decision-making.
Your rights
You have the right to ask for access to your personal data, and to ask us to correct, erase or restrict it. Because we rely on legitimate interests, you also have the right to object to our processing. To exercise any of these rights, or to have your recordings deleted, contact our Data Protection Officer at the address above.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.