1. Who We Are

Discurso.AI is an AI-powered negotiation training platform. We are responsible for the personal data described in this policy.

Contact: support@discurso.ai
Company: Discurso ApS – Skovvangsvej 26A 1. 9, 8200 Aarhus, Denmark · CVR 46787994

2. What Data We Collect

Depending on how you use Discurso.AI, we collect:

• Account data: name, email address, institution, role (negotiator or instructor), profile picture if you add one, negotiator ID if you give one, and your settings.
• Negotiation content: chat messages, offers and agreements, preparation notes, survey answers, and your conversations with the AI coach, AI counterparts and your team's shared AI chat.
• Video calls: in video rounds your camera and microphone are streamed live to the other participants. The audio is turned into a written transcript on our own servers; the audio itself is deleted once the transcript is made. We do not normally record the video — see “Recorded video rounds” below for the exception.
• Recorded video rounds: a video round is only recorded when Discurso has specifically agreed this with the organiser of that event, for example for a study or a competition. You are told before you join a recorded call, and a notice stays on screen for as long as it is recorded. The recording holds the video and voices of everyone in the call. It is stored in the EU, only Discurso staff can open it, it is used only for the purpose agreed for that event, and it is deleted once that purpose is fulfilled.
• Voice typing: if you use the microphone button to dictate a message, your browser's own speech recognition turns it into text (in Chrome this is a Google service, in Safari an Apple one). We only receive the text.
• Results and feedback: deal outcomes, scores, leaderboard positions, feedback from instructors and judges, and ratings you give or receive after a round.
• Payment data: if you buy a plan, our payment provider Stripe handles your card or other payment details. We only receive your plan, payment status, billing country and invoices — never your full card number.
• Messages to us: support emails and anything you send through the feedback button in the app.
• Usage and technical data: IP address, browser and device type, sign-in times, how much you use AI features and video calls, and error logs.
• Analytics (only with your consent): which pages you visit and for how long, through Google Analytics.

3. Who Can See Your Data

Discurso.AI is used in classes and events, so some of your data is visible to other people on the platform:

• Your counterparts in a round see your name, profile picture and email address, and everything you write or say to them in that round.
• Your teammates see your team's shared chat with the AI and your contributions to it.
• The instructor or organiser of an event you join can see your participation, results, chat messages, video call transcripts and feedback in that event, and can watch video rounds live. Judges assigned to an event can watch its video rounds live. Instructors, organisers and judges who watch a round do not appear in the call.
• Other participants in an event may see your name or team and your results on the event leaderboard.
• Discurso.AI staff can access this data where needed to run the platform, provide support and keep it safe.

When an instructor adds someone to an event as a judge by email address, we create an account for that person so they can take part, and send them an email explaining this.

If your university or organisation gave you access to Discurso.AI, it may also have its own privacy notice that applies to the events it runs.

4. Why We Collect It

We use your data to:

• Provide and operate our service
• Authenticate and manage your account
• Run negotiations, events, leaderboards and feedback, including sharing data with other participants as described above
• Process payments and manage subscriptions
• Respond to support requests and feedback
• Improve platform functionality
• Detect and prevent abuse, security or technical issues
• To conduct anonymized scientific research and academic studies

5. Legal Basis for Processing (GDPR)

We process data based on:

• Contractual Necessity: providing the platform, your account, events and paid plans
• Consent: analytics cookies and optional communications
• Legitimate Interest: improving the service, preventing abuse and keeping the platform secure
• Legal Obligation: keeping accounting records and complying with applicable laws

6. Service Providers

We use the following providers to run Discurso.AI. They only process your data on our behalf and under data protection agreements:

• Google (Firebase and Google Cloud): sign-in, database, file storage and hosting. Our app and our servers, including the ones that make call transcripts, run in the EU (Netherlands).
• OpenAI and Google Gemini: power our AI features. What you write to the AI coach or an AI counterpart is sent to them to generate a reply. Under their business terms they do not use this data to train their models.
• LiveKit: carries the live video and audio of video rounds, and makes the recording of a round that is recorded (see above) before it is stored with us.
• Stripe: payments, invoices and subscriptions.
• Resend: sends our emails, such as invitations and account messages.
• Google reCAPTCHA: protects sign-up and sign-in against bots.
• Google Cloud Text-to-Speech: reads text aloud when you use the read-aloud button.
• Google Analytics: only if you accept analytics cookies.

We do not sell your data and do not use it for advertising.

7. Cookies

We use necessary cookies to keep you signed in and to remember your choices. With your consent we also use analytics cookies (Google Analytics). When you first visit, our cookie banner lets you accept all cookies, accept only necessary ones, or reject them. You can change your choice or withdraw consent at any time with the “Cookie settings” link at the bottom of our pages or on your profile page. You can also clear cookies in your browser settings.

8. Data Retention

We keep your account and negotiation data while your account is active so you and your instructors can look back at past rounds. If you ask us to delete your account, we delete your personal data within 30 days: your account, profile, messages, feedback, survey answers, what you said in video calls, preparation notes, files and your place in every event. Results of negotiations you took part in together with others are kept for those other people, without your name. Payment records are kept for 5 years as required by Danish bookkeeping law. Call audio is deleted as soon as it has been transcribed, or after 7 days if transcribing it fails.

9. Data Security

We use HTTPS encryption, access control, and regular audits to safeguard your data. However, no internet transmission is ever 100% secure.

10. International Transfers

Some of our providers are based in the US or process data there. When your data leaves the EU, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses to keep it protected.

11. Your Rights

Under the EU GDPR, you have the right to:

• Access your data
• Rectify inaccuracies
• Request deletion ("right to be forgotten")
• Object to certain processing
• Request a copy in a portable format
• Withdraw consent at any time

To exercise these rights, email support@discurso.ai. We respond within one month. A copy of your data is sent as a machine-readable file (JSON). You can also complain to the Danish Data Protection Agency (Datatilsynet).

12. Use of Data for Scientific Research

We may use anonymized and aggregated data to support academic research and scientific studies related to negotiation training, learning performance, and AI-human interaction. No personally identifiable information will be shared or published without your explicit consent. Participation in such studies is never mandatory, and you may opt out by contacting us.

13. Updates

We may revise this policy and will update the “Last updated” date. We will tell you about important changes by email or in the app before they take effect.