Controller and contact
RAIVA Technologies GmbH, c/o IAT Intertax Asset Treuhand GmbH, An der Dammheide 10, 60486 Frankfurt am Main, Germany.
Privacy enquiries and data-subject requests: privacy@raiva.io.
Website access
When the website is accessed, the hosting service may process technical request data such as IP address, time, requested resource, referrer and browser information to deliver and secure the site.
The exact hosting provider, retention period and legal basis must be confirmed for the production environment.
Cookies, consent and page-view statistics
Draft — privacy review pending
Necessary consent storage remains active. Comfort storage for language, accessibility and speech speed starts only after consent and is removed on withdrawal. Settings remain usable without storage.
With Statistics consent, PostHog measures page views, visible headings and sections, reading depth, interactions and confirmed form outcomes. A random browser identifier recognises this browser until the current 90-day consent expires; a visit ends after 30 minutes of inactivity. Vercel receives page views only. No form values, search terms, filenames, media, transcripts, URL parameters or fragments are sent. No replay, automatic capture or person profiles.
Probo records the action, categories, timestamp and published notice version. Choices are valid for 90 days; Cookie settings in the footer allows changes and withdrawal at any time. The retention period for Probo consent evidence, processor disclosures and transfer safeguards still require review. Ninety days is not the evidence retention period.
Contact and demo enquiries
If you contact RAIVA, the information you provide is processed to answer your enquiry, prepare requested pre-contractual steps or manage an existing business relationship.
Contact-form entries and optional voice recordings are forwarded to RAIVA’s configured Slack workspace for internal handling. The processor, retention period, transfer region and legal basis must be reviewed and documented before production use.
Do not send confidential documents through the contact form unless an approved secure channel has been agreed.
Applications and optional video
When you submit an application, RAIVA processes the details you enter and, if provided, the selected or browser-recorded video to assess your application and communicate with you about the recruitment process.
After validation, the application details and optional video are shared with RAIVA’s recruiting team in the restricted Slack channel #career and stored in a private, non-public object store. A retention review is scheduled after 30 days; the final retention period, processor terms, legal basis and deletion process require legal approval before production use.
Voice agent: use, data and workflow
The voice agent answers questions about RAIVA and helps with contact and support enquiries. You speak to an AI, not a human. Recording starts only after you actively select consent, choose “Start conversation” and allow microphone access. Without consent, you can still use the website and text contact form.
Processing covers your voice and conversation content, the agent’s replies, a transcript of both sides, an automatically generated summary, language, timestamps and technical session identifiers. Names, email addresses or other details you volunteer may become part of the recording and transcript. The website also records the consent time and version. Technical connection data and a temporary hashed IP-related counter are processed for operation and abuse prevention.
Voice agent: providers, hosting and storage
ElevenLabs handles speech processing and recording; Gemini 2.5 Flash is configured for this agent’s replies. After the conversation, the recording, transcript and summary are transferred to RAIVA’s Slack workspace: support topics go to support and other enquiries to the contact team. This also happens if you do not submit a separate enquiry. RAIVA does not publish conversation content on the website.
Vercel hosts the website and API. Session data is stored in Turso (Ireland region); files are temporarily placed in private Vercel Blob storage (Frankfurt) for delivery. Temporary archive files are removed after successful delivery to Slack. European storage regions do not mean that all processing by ElevenLabs, its model providers or Slack occurs exclusively within the European Economic Area.
Voice agent: legal bases and retention
Recording, AI processing and internal sharing rely on your consent under Article 6(1)(a) GDPR. Technical security and abuse prevention serve our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). A separately submitted enquiry is processed to respond and, where applicable, take pre-contractual or contractual steps (Article 6(1)(b) or (f) GDPR).
Automatic deletion of audio, transcripts, summaries and associated session data from ElevenLabs, Slack and private temporary storage is configured for 30 days after the session starts. Technically failed deletions are retried. A prepared enquiry is sent separately only after you review it and click “Send enquiry”. That enquiry is not covered by the conversation’s 30-day deletion; it is retained as long as handling it and any applicable statutory retention obligations require.
Voice agent: withdrawal and your rights
Choosing “End conversation” or closing the dialog stops recording; it does not automatically delete existing recordings. You may withdraw consent for the future and request deletion of consent-based conversation data at any time via privacy@raiva.io. Please include the conversation date and approximate time where possible so we can locate it. Withdrawal does not affect the lawfulness of prior processing.
Subject to the GDPR, you have rights of access, rectification, erasure, restriction and portability, and may object to processing based on legitimate interests. You may complain, in particular, to the Hessian Commissioner for Data Protection and Freedom of Information (datenschutz.hessen.de). Please do not share health information, passwords, payment data or confidential third-party information. The agent makes no automated decisions about you with legal or similarly significant effects.
Voice agent: responsibility and review status
The controller is RAIVA Technologies GmbH, c/o IAT Intertax Asset Treuhand GmbH, An der Dammheide 10, 60486 Frankfurt am Main, Germany; contact: privacy@raiva.io. Updated 16 September 2026. This section describes the configured processing. The applicable processing agreements, subprocessors, international transfer safeguards and providers’ settings for further data use still require final documentation and legal review; exclusively European processing or a general exclusion of provider training is not promised here.
Recipients, retention and transfers
Data is disclosed only where necessary for hosting, communication, legal obligations or the requested service, and subject to the applicable contractual safeguards.
Retention follows the purpose, contractual commitments and statutory duties. Production processors and any international transfers must be listed here after final technical and legal review.
Your rights
Depending on the applicable law, you may request access, correction, deletion, restriction, portability or object to processing, and may withdraw consent for the future.
You may also lodge a complaint with a competent data-protection authority. Rights can be limited by statutory exceptions; contact privacy@raiva.io for an individual request.