What happens to your answers

Who is responsible

The organisation that invited you, such as your employer, your school or university, or a company you are a customer of, set up the survey. It decides what the survey is for, on what legal basis it uses your data and what happens to the results. Under the GDPR, it is the controller.

ScoreStory provides the software and runs the interview on behalf of that organisation. We are the processor: we only do with your data what the organisation instructs us to, and that is set out in a data processing agreement.

For this website, scorestory.eu, we are the controller ourselves. That is covered in the section on cookies.

ScoreStory B.V.
Generaal Vetterstraat 82
1059 BW Amsterdam
Chamber of Commerce (KvK) 42132130
welcome@scorestory.eu

What we store

• Your score and the conversation. The score you give and the full text of the interview: your messages and the interviewer's questions.
• Speech, if you record your answer. The recording is converted to text and then discarded. We never store audio, only the text.
• Attributes that the organisation supplied or that you were asked for at the start, such as your department, location or age group.
• Your name and email address, only if you were invited personally or entered them yourself, and the survey is not anonymous.
• Your answer to a closing question, if the organisation asks one. If it asks for an email address or phone number, that is stored exactly as you type it.
• Technical data: the type of device (phone, tablet or computer, not which specific device) and when you started and finished.
• The analysis: for each answer, an assessment of the sentiment and the topics you mention, plus a short summary of the whole conversation. These are used to build the themes the organisation sees in its results.

We do not sell your data and we do not use your answers to train AI models.

Which AI model processes your conversation

The interview is conducted and analysed by an AI model. The organisation that invited you chooses which model that is:

• Claude, from Anthropic, an American company. The text of your conversation then goes to the United States, and in a survey that is not anonymous it may include your name. Recorded answers are converted to text in France, by Scaleway.
• Mistral, from Mistral AI, a French company. Conversation text and speech then both stay in the European Union.

If the organisation does not choose, ScoreStory's choice applies. At the moment that is Claude. If you want to know which model your survey uses, ask the organisation that invited you.

If your data goes to Anthropic, it leaves the EU. That transfer is covered by the European Commission's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Where your data is kept

Everything we store is kept on servers in the Netherlands, at Leaseweb. We manage those servers ourselves. There is no external database service in between with access to your data.

We also keep the software's error reports on our own server. Email addresses, identification numbers and long strings of digits are made unreadable before they are stored.

Which third parties we use

These are all the suppliers we use. We have a data processing agreement with each of them that sets out what they may do with data.

If a party is added or changes, we update this table, and you can tell from the date at the bottom.

Who sees your answers

Within the organisation that invited you: the people who have access to the results, and the people it shares part of the results with. What they see depends on the type of survey.

In a survey that is not anonymous, they see your conversation with your name next to it.

In an anonymous survey, they see what was said, but not by whom:

• We do not store a name or email address with the conversation, not even if you introduce yourself during it.
• The link between your invitation and your conversation is deleted. This does not happen straight away, but once every 72 hours, for everyone who finished in that period at the same time. Otherwise someone could see that a conversation came in just as you finished. Until then, the organisation only sees that you took part.
• If fewer than five participants fall under a filter, a small department for example, the organisation does not get to see those results.

Anonymous means the system does not trace your conversation back to you. It is not a guarantee that nobody can guess. If you are the only one taking part in a 72-hour period, or someone selects a very short period in the results, a conversation may still be traceable. And what you type yourself stays there: if you mention your own name or a colleague's, or enter your email address in a closing question, the organisation will read it.

How long we keep it

The organisation sets for each survey how long data is kept. The default is 365 days from the moment you start. Deletion happens in two steps:

1. First your personal data. Your name, email address and any participant number are erased. In the text of the conversation, names and contact details are replaced with [removed]. An AI model does that search; it finds almost everything, but we cannot rule out that a name is left in.
2. Then the whole conversation, with your score and the analysis.

An organisation can choose to keep conversations with no end date. Your personal data always has a retention period: it cannot be kept indefinitely.

What you can do

You have the right to see what is stored about you, to have it corrected or deleted, and to object. Because the organisation that invited you is responsible, you send your request to them first. If that does not work, email us at welcome@scorestory.eu; we will help the organisation handle the request.

In an anonymous survey, nobody can find your conversation, including us. That is why you get a deletion code at the end of the conversation. You can use it to have your answers erased later. Keep the code safe: we do not store it and cannot issue it again.

On the final screen, if the organisation has enabled it, you can download your own conversation as a PDF.

If you disagree with how your data is handled, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or with the data protection authority in the country where you live.

Cookies on this website

This section is about scorestory.eu, the site you are reading now. An interview in ScoreStory does not set tracking cookies.

As long as you make no choice in the cookie banner, or choose "Necessary only", we only load what the site needs to work. If you choose "Accept all", the services below set cookies. You can change your choice at any time via "Cookie preferences" at the bottom of every page.

We always keep two things, because otherwise the site does not work: your choice in the cookie banner (ss_consent, 6 months) and the language you choose yourself (ss_lang, 1 year). Your cookie choice is stored in your browser and in a cookie on scorestory.eu, so that app.scorestory.eu follows the same choice. Neither is shared with anyone else.

Last updated: 26 October 2026. If the parties, the retention periods or the way anonymity works change, we update this statement and this date.