Privacy Policy

Resonate Labs B.V., trading as Reson8 (“we”, “us”, “our”), is committed to protecting the privacy of everyone who visits our websites or uses our services. This Privacy Policy explains what personal data we collect, why we collect it, and how we use it.

This Privacy Policy applies to:
• our website at reson8.dev (the “Website”);
• our customer dashboard at console.reson8.dev (the “Console”);
• our developer documentation at docs.reson8.dev (the “Documentation”); and
• our speech recognition API and related services (the “Services”),
together the “Platform”.

This Privacy Policy covers the personal data we process as a controller, such as data about visitors, account holders and customer contacts. It does not cover the audio files, transcripts and other content that customers submit to our Services (“Customer Content”). We process Customer Content on behalf of our customers as a processor, and that processing is governed by our General Terms & Conditions and our Data Processing Agreement.

The controller responsible for the processing of your personal data is:

Resonate Labs B.V.
Keizersgracht 264, 1016 EV
Amsterdam, the Netherlands
KvK: 98891340
Email: privacy@reson8.dev

3.1 Contact and Lead Forms

When you fill out a form on our Website (for example, to request access to our services or to book a call), we collect:

• Your full name
• Your email address
• Your company name

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — to respond to your inquiry and assess potential business relationships.

3.2 Booking a Call

When you schedule a call or meeting through our Google Calendar scheduling integration, we collect:

• Your full name
• Your email address
• Any additional information you provide when booking

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — to schedule and conduct the meeting you requested.

3.3 Website Analytics

We use Google Analytics to understand how visitors find and interact with our Website, which helps us measure traffic and site performance. We also use Microsoft Clarity to analyze user behavior through visual tools like heatmaps and session recordings to optimize our site's user experience. Both tools collect data such as your IP address, device type, browser information, and on-site behavior.

Legal basis: Consent (Article 6(1)(a) GDPR) — We will only activate these analytics tools and collect this data if you explicitly grant permission via our cookie consent banner. You can withdraw your consent at any time.

3.4 Advertising and Conversion Measurement

We advertise our services on Google (Google Ads), LinkedIn (LinkedIn Ads) and X (X Ads). To measure whether our advertisements lead to visits and sign-ups, and to show relevant advertisements to people who have visited our Website, we use the Google Ads tag, the LinkedIn Insight Tag and the X Pixel on our Website.

These tools collect data such as your IP address, device and browser information, cookie identifiers, the pages you visit on our Website, the advertisement you clicked on, and whether you completed an action such as signing up for a free trial. The advertising platforms may combine this data with data they hold about you and use it for their own purposes, including building advertising audiences. For these purposes the platforms act as independent controllers. More information:
• Google Ireland Limited – Google Privacy Policy and Google Ads Settings
• LinkedIn Ireland Unlimited Company – LinkedIn Privacy Policy and LinkedIn ad settings
• X Internet Unlimited Company (XIUC) – X Privacy Policy and X ad preferences

Data collected by these tools may be transferred to the United States under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Legal basis: Consent (Article 6(1)(a) GDPR) — these tools are only activated after you accept marketing cookies via our cookie consent banner. You can withdraw your consent at any time via the cookie settings on our Website.

3.5 Cookies

Our Platform uses cookies to function properly, to analyze visitor traffic, and to measure and personalize advertising. A full list of cookies and their lifetimes is available in the cookie settings on our Website.

• Strictly Necessary Cookies: Essential for the Platform to run safely and correctly, for example to keep you logged in to the Console. These do not require your consent.
• Analytics and Performance Cookies: Placed by our third-party partners (Google Analytics and Microsoft Clarity) to track user behavior and site performance. These are only placed after you give active consent.
• Marketing and Advertising Cookies: Placed by our advertising partners (Google Ads, LinkedIn and X) to measure the effectiveness of our advertisements and to show you relevant advertisements on their platforms. These are only placed after you give active consent.

You can manage, change, or withdraw your cookie preferences at any time via the cookie settings on our Website.

3.6 Email Communications

If you contact us via email (for example, at support@reson8.dev or privacy@reson8.dev), we process your name, email address, and the contents of your message in order to respond to your inquiry.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — to respond to your communication.

3.7 Account, Usage and Billing Data

When you create an account in the Console or use our Services, we collect:

• Account data: your name, email address, company name, and login credentials
• Usage data: how you use the Console and the Services, such as API requests, usage volumes, the features you use, and technical data such as IP addresses and timestamps
• Billing data: your billing address, VAT number, and details of your subscription, usage-based charges and invoices

We also use your email address to send you service messages about your account (such as onboarding information, usage notifications and invoices) and, where permitted, onboarding tips and information about new features. You can unsubscribe from onboarding and feature emails at any time via the link in each email.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR) to create your account, provide the Services and bill you; legitimate interest (Article 6(1)(f) GDPR) to keep the Platform secure, prevent abuse, understand how our Services are used so we can improve them, and inform existing customers about our services; and legal obligation (Article 6(1)(c) GDPR) to keep financial records as required by Dutch tax law.

3.8 Newsletter

If you subscribe to our newsletter, we collect your email address and, optionally, your name. We use this to send you updates about Reson8, our products and speech recognition topics. We track whether our emails are opened and which links are clicked, so we can measure interest and improve our content.

Legal basis: Consent (Article 6(1)(a) GDPR) — you can unsubscribe at any time via the link in each email. Existing customers receive the newsletter on the basis of legitimate interest (Article 6(1)(f) GDPR) and can unsubscribe in the same way.

We use the personal data we collect for the following purposes:

• Providing our Services: To create and manage your account, give you access to the Console, the Services and the Documentation, and provide support.
• Billing: To manage subscriptions, calculate usage-based charges, and issue invoices.
• Communication: To send service messages about your account, onboarding emails, and our newsletter.
• Responding to inquiries: To follow up on form submissions, schedule calls, and provide information about our services.
• Customer relationship management: We store your contact details and information about your use of our Services in our CRM system to manage our relationship with you.
• Platform improvement: To understand how visitors and users interact with our Platform and improve the user experience.
• Security: To protect the Platform against unauthorised access, fraud and abuse.
• Advertising: To measure the results of our advertising campaigns and to show relevant advertisements to people who have visited our Website.
• Legal compliance: To comply with applicable legal obligations.

We share your personal data with the following categories of service providers, who process data on our behalf:

• CRM (Attio): For storing and managing leads, customer contact details and product usage information.
• Billing (Solvimon): For managing subscriptions, usage-based billing and invoicing.
• Email (Loops): For sending onboarding emails, newsletters and other email communications. Data may be transferred to the US under Standard Contractual Clauses.
• Scheduling and Calendar (Google Ireland Limited): For scheduling, managing, and conducting calls and meetings via Google Calendar. Data may be transferred to the US under the EU-U.S. Data Privacy Framework.
• Website hosting (Webflow): For hosting and serving the Website.
• Analytics (Google Ireland Limited): For analyzing website traffic and user acquisition metrics. Data may be transferred to the US under the EU-U.S. Data Privacy Framework.
• Behavior Tracking (Microsoft Corporation): For capturing session recordings and heatmaps to improve user experience. Data processing complies with Microsoft's privacy and data protection terms.

A full list of the subprocessors involved in providing our Services is available at trust.reson8.dev/subprocessors.

In addition, if you consent to marketing cookies, data is shared with our advertising partners Google Ireland Limited (Google Ads), LinkedIn Ireland Unlimited Company (LinkedIn Ads) and X Internet Unlimited Company (X Ads). These partners do not act on our behalf but as independent controllers for their own processing, as described in section 3.4.

We only share your data with processors who provide adequate safeguards for the protection of your personal data. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate transfer mechanisms are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

• Lead form submissions: Retained in our CRM for as long as reasonably necessary for the purpose of the potential business relationship, and no longer than two (2) years after last contact, unless a customer relationship is established.
• Booking data: Retained for as long as necessary to conduct and follow up on the meeting.
• Email correspondence: Retained for as long as necessary for the purpose of the communication, and no longer than two (2) years after last contact.
• Account and usage data: Retained for as long as your account is active, and no longer than two (2) years after your account is closed, unless a longer period is required by law.
• Billing and invoice data: Retained for seven (7) years, as required by Dutch tax law.
• Newsletter data: Retained until you unsubscribe, after which your email address is removed from our mailing list.
• Advertising and analytics data: Cookie lifetimes are listed in our cookie settings. Data held by our advertising and analytics partners is retained according to their own retention policies.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restriction: You may ask us to restrict the processing of your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interest.
• Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at: privacy@reson8.dev

We will respond to your request within one (1) month of receipt.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. Our own infrastructure is hosted within the European Union. Where third-party tools described in this policy transfer data outside the EEA, appropriate safeguards are in place as described in section 5.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30
2594 AV Den Haag
www.autoriteitpersoonsgegevens.nl

We may update this Privacy Policy from time to time. The latest version will always be available on our Website with the "Last updated" date shown at the top.

For any questions about this Privacy Policy or our data practices, please contact:

Resonate Labs B.V.
Keizersgracht 264, 1016 EV, Amsterdam, the Netherlands
Email: privacy@reson8.dev

© Resonate Labs B.V. (trading as Reson8). All rights reserved.