Privacy Policy

We are OV Labs Ltd ("OriginalVoices", "we", "us", "our"), a company registered in England and Wales.

Registered Office: 2 Leman Street, London, United Kingdom, E1W 9US
Company Number: 16368446
Contact: hello@originalvoices.ai

We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, and share personal data when you:

• Visit the OriginalVoices website
• Use the OriginalVoices platform, API, SDKs, or MCP integrations (the "Services")
• Interact with us as a customer, prospect, supplier, or business contact

1. What OriginalVoices does

OriginalVoices provides real-time audience insight powered by anonymised insights from Digital Twins of real people, derived from our consumer product, Twineo.

Brands and organisations ask questions to defined audiences via the OriginalVoices Services. We ask questions and return anonymised, often summarised, insights from members via their Digital Twins.

We do not provide customers with any personal or personally identifiable data or information about Twineo users.

2. Scope of this policy

This Privacy Policy applies to:

• Visitors to the OriginalVoices website
• Users of the OriginalVoices platform, API, SDKs, and MCP integrations
• Individuals who receive marketing or sales communications from us
• Business contacts and suppliers we work with

It explains what personal data we collect about you in these contexts and what we do with it.

3. The data we collect about you

"Personal data" means any information that can identify you directly or indirectly.

We may collect and process the following types of personal data in connection with OriginalVoices:

3.1 Identity and contact data

• Name
• Work email address
• Job title / role
• Company name
• Country or region
• Any details you provide in forms, demos, or emails

3.2 Account and usage data

• Login details (email/username)
• Organisation / workspace
• Actions you take in the platform (e.g. creating questions, viewing results)
• API usage logs (e.g. endpoints called, timestamps, request volume, error logs)
• MCP / SDK integration events

We use this to operate the Services, secure access, troubleshoot issues, and improve performance.

3.3 Technical and browsing data

When you visit our website or use the platform, we may collect:

• IP address
• Browser type and version
• Device type and operating system
• Time zone and approximate location
• Pages visited, clicks, navigation paths, session duration
• Login timestamps and access patterns

3.4 Marketing and communications data

• Your preferences for receiving marketing emails or updates
• Which emails you open, links clicked, content viewed
• Event registrations, webinar attendance, or content downloads

3.5 Cookies and similar technologies

We use cookies and similar technologies on our website and platform. These may include:

• Essential cookies (for login, security, basic functionality)
• Analytics cookies (to understand usage and improve the site)
• Marketing/advertising cookies (where consent is given)

4. What we do not collect or share

• Names or contact details of individual Twineo users
• Any personal data that directly or indirectly identifies a Twineo user

All insights and Output Data available through OriginalVoices are anonymised.

5. How we collect your data

5.1 Directly from you

• Request a demo or contact us
• Create an account or log in
• Use the platform, API, SDKs, or MCP integrations
• Register for events, webinars, or content
• Talk to us via email, support chat, or meetings

5.2 Automatically

• Visit our website
• Use the platform
• Send API or MCP requests

We do this using:

• Server logs
• Cookies and similar technologies
• Analytics tools

5.3 From third parties or public sources

• Professional networks (e.g. LinkedIn)
• Event platforms or partners
• Public company records
• CRM or marketing tools where you have already interacted with us or our partners

6. How we use your data (and legal bases)

Under UK GDPR, we must have a legal basis to use your personal data. We generally rely on:

• Contract — to provide the Services you or your organisation have signed up for
• Legitimate interests — to operate, secure, and grow our business
• Consent — for certain marketing and non-essential cookies/tracking

7. AI features and usage logs

Some features of OriginalVoices use artificial intelligence (AI/ML models).

• We log your queries, including the questions and audience descriptions you submit, together with metadata such as timestamp, endpoint and parameters
• We use these logs to provide the Services, monitor performance and prevent abuse. We do not use your queries or the answers we generate to train or improve our models
• Organisations can be configured so that question and answer text is not retained in our databases and is not sent to our monitoring providers

Our AI processing is provided by Google Cloud Vertex AI, using Google's Gemini models, in Google's EU region. Under Google Cloud's terms, Google does not use customer data to train its models. We do not use any other AI model provider to process your queries.

8. Marketing and your choices

You can opt out at any time by:

• Clicking "unsubscribe" in any marketing email
• Contacting us at hello@originalvoices.ai

9. Cookies

We use cookies and similar technologies to keep you logged in and secure, remember preferences, and improve user experience.

10. Who we share your data with

• Group companies
• Service providers
• Professional advisers
• Regulators and authorities
• Potential buyers or investors

Our main service providers, what they do and where they process data:

• Google Cloud: hosting, databases and storage, in London, United Kingdom
• Google Cloud Vertex AI: AI processing using Gemini models, in the European Union
• Langfuse: monitoring of AI requests, in Frankfurt, Germany
• Sentry: application error monitoring, in Frankfurt, Germany
• Stripe: payment processing

Each provider is bound by a data processing agreement and processes data only on our instructions.

11. International transfers

Your queries, the answers we generate and the data in our databases are stored in the United Kingdom. Some processing takes place outside the UK:

• AI processing and our monitoring providers are in the European Union. These transfers rely on the UK's adequacy regulations for the EEA
• Account details of platform users, such as name and email address, are processed by our email and analytics providers in the United States. These transfers rely on the UK-US data bridge or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, as applicable to each provider

12. Data security

• Access controls and authentication
• Encryption in transit where appropriate
• Logging and monitoring
• Restricted access based on role

13. Data retention

We retain data only as long as necessary for legal and operational purposes:

• Account data is kept while your account is active
• Queries, generated answers, logs and monitoring traces are deleted within 30 days of a deletion request or the end of your agreement with us
• Encrypted backups expire within a further 7 days, so deleted data is removed from backups within 37 days at most
• Operational request records, which contain no question or answer content, are kept for up to 12 months for security and troubleshooting
• Billing and financial records are kept for as long as the law requires

On request, we will confirm in writing when deletion is complete.

14. Your rights

You have the right to access, correct, erase, restrict, object to processing, and request portability of your data.

15. Change of purpose

We will only use your personal data for the purposes described unless lawful and compatible reasons apply.

16. Changes to this Privacy Policy

We may update this policy and will notify you of material changes.

17. Contact us

If you have any questions, contact: hello@originalvoices.ai