Privacy Policy

Last updated: 16 August 2026.

This notice explains how personal data are processed when you use Gausspeak during its experimental evaluation phase. The data controller is Florijan Veneruzzo, operator of Gausspeak. Privacy requests may be sent to florijan@cavamalusa.com.

Data we process

Depending on how you use the service, we may process your account email, profile details, workspace and project membership, assessment responses, canonical Q/M/D measurements, contextual signals, interpretations, interventions, re-measurement cycles, forecast records, research metadata, consent/inclusion status, technical logs, and information you choose to enter into projects or collaborative areas.

Purposes and legal bases

We process account and project data to provide, secure and operate the service and to respond to user requests. During the evaluation phase, data may also be processed to test reliability, improve the platform and conduct research-oriented analysis. Depending on the context, the legal basis may be performance of the service requested by you, legitimate interests in operating and improving Gausspeak, or consent where consent is specifically requested for research use. Consent for research use can be withdrawn for future processing.

Research data and pseudonymisation

Research exports are designed to use project pseudonyms instead of project names. Gausspeak keeps measurement, interpretation, forecast and intervention layers separate so that derived or AI-generated material is not silently treated as a measured observation. Pseudonymisation reduces identification risk but does not make data anonymous in every circumstance.

Service providers and transfers

Gausspeak relies on specialist infrastructure providers for hosting, database/authentication, email delivery and related technical operations. These providers process data only as needed to supply those services. Some processing may involve infrastructure outside your country; where required by applicable data-protection law, appropriate transfer safeguards are used.

Retention

Data are retained only for as long as reasonably necessary for the evaluation, operation, security and documented research purposes for which they were collected, subject to legal or evidentiary retention requirements. Frozen research snapshots may be retained to preserve reproducibility of an analysis, but inclusion in research datasets is governed by the recorded consent and inclusion status.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. Where processing is based on consent, you may withdraw that consent for the future. You may also lodge a complaint with the competent data protection authority. Requests can be sent to florijan@cavamalusa.com.

Automated and AI-assisted outputs

Gausspeak can generate model-based interpretations, trajectories and recommendations. These are decision-support outputs, not autonomous decisions about individuals. Gausspeak is not intended to make solely automated decisions that produce legal or similarly significant effects on a natural person.

Security and data minimisation

We apply access controls and technical safeguards appropriate to the evaluation environment. Users should not upload data that are unnecessary for the intended analysis, especially special-category or highly sensitive personal data, unless a lawful and documented basis for doing so has been established.

Changes

This notice may be updated as the evaluation develops, particularly if commercial billing, new authentication providers, additional research protocols or materially different processing activities are introduced. The current version will remain available on this page.