DocsOpen Henkan Research
Reference

Security and privacy

How participant and consultant data is collected, protected, kept and deleted, in plain words.

Up to date with v1.2.1Updated 20 October 20263 min read

Henkan Research collects interviews from real people. This page explains what is stored, who can see it and when it is deleted.

Roles#

RoleWho
Data controllerThe client who commissioned the study, named on the participant's consent screen.
ProcessorHenkan & Partners, a French consultancy, which runs Henkan Research for the client.

What participants agree to#

Before the interview, participants see a consent screen. They choose separately whether the interview may be recorded as audio and as video, whether excerpts may be used outside the project team, and they confirm they are 18 or older. The screen names the data controller and the retention period. See What participants see.

  • Nothing is recorded without consent. Written interviews are never recorded as audio or video.
  • The AI always says it is an AI and never asks for sensitive data such as health, finances, card numbers or passwords.
  • Participants can ask the data controller to delete their data at any time.

What is stored#

DataStoredVisible to
Participant contact details (name, email, phone, profile)When you add or import themMembers of the study's organisation
Transcripts, summaries, topic coverage, profile answersFor every interviewMembers of the study's organisation
Audio and video recordingsOnly with the participant's consentMembers of the study's organisation only (private storage)
Imported visuals (images and videos)When you import themMembers of the study's organisation, and each participant during their own interview, through temporary links (private storage). Client logos stay public on interview pages.
SynthesisWhen you generate itMembers of the study's organisation; anyone else through a report link you create
Invitation and reminder emailsWhen sentMembers of the study's organisation can see counts
On-site invitation statisticsAnonymous impressions, clicks and page addressesMembers of the study's organisation

Studies are protected per organisation: every request is checked so that only members of the study's organisation (its client team and the Henkan & Partners consultants placed in it) can read and change a study and its interviews; deleting a whole study is reserved to its owners, its creator and those consultants. See Organisations, sharing and roles. Participants never access the database directly; their interview page can only reach their own session, with a secret key.

Retention and deletion#

Each study has a Data retention (months) setting, 12 months by default, shown on the consent screen. A daily job deletes expired data:

  • For each participant, the clock starts at their last interview (or their invitation if they never answered). After the retention period, their contact details, interviews, transcripts, recordings, highlights and emails are deleted.
  • Anonymous interviews (public link, on-site) are deleted after the retention period from their own date.
  • When interviews of a study are deleted, its synthesis and stored AI analyses are deleted too, because they quote participants.

You can also delete a participant at any time from the Recruitment tab (Delete participant). Their interviews, recordings and emails are deleted with them.

On-site invitations#

  • The snippet only runs on domains you list in the campaign.
  • No personal data is collected before the visitor accepts and consents on the interview page. Impressions and clicks are anonymous.
  • Visitors whose browser sends Do Not Track or Global Privacy Control never see the invitation, and you can wait for cookie consent with data-consent="false".
  • To limit abuse, counters use a hashed, daily-salted IP address that is never stored in clear and is deleted within 7 days.

A report link is long and random, read-only, not indexed by search engines and can be revoked at any time. It only shows a validated synthesis, without links to transcripts or internal identifiers. See Share the client report.

Consultant data#

For each consultant, Henkan Research keeps the sign-in email and the studies created. For client accounts, Henkan & Partners also records sign-in times, approximate location (country and city from the IP address), browser and device type, and which features are used, to manage access and support the client. This information is never sold. See the privacy policy.

AI processing#

Interviews, coach suggestions, syntheses and answers are produced by AI models through Henkan's AI provider. Transcripts are treated as data to analyse: instructions written by a participant inside an answer are never followed.