Betterstood terms and privacy notices
Betterstood legal
Betterstood is operated by Eigensource S.L., VAT ES B55497267. This page covers our public website and homepage demo, SaaS Platform accounts, and respondent intake provided for Platform customers.
Current SaaS document versions: 2026-07-01. Respondent document versions: 2026-09-02. Your existing legal acceptances and interaction receipts remain subject to the document versions and notices recorded at the time.
The applicable campaign notice identifies the organization requesting an intake interaction. Its own privacy information and any scenario-specific notice apply alongside this page.
Who is responsible for your data
The data controller determines why and how personal data is processed. A processor processes data on the controller's instructions. Betterstood's role depends on the service you use.
| Service | Controller | Betterstood role |
|---|---|---|
| Public website, homepage demo, contact inquiries and public-site analytics | Eigensource S.L. | Controller for the interaction and its own service operations. |
| Platform accounts, authentication, organization membership, billing, support and security | Eigensource S.L. | Controller for account and operational data. |
| Customer campaign intake, respondent answers, conversations and business outputs | The Platform customer identified in the campaign notice | Processor acting on that customer's instructions under the applicable DPA. |
Purposes and legal bases
Platform account processing supports account creation, authentication, organization administration, product settings, billing, support and service operations. The applicable bases are contract or steps before a contract, legitimate interests for security and product operations, and consent where required.
For customer campaign respondent data, the customer controller defines the purpose and applicable legal basis. Terms acceptance and acknowledgement of privacy or AI information are distinct from consent for optional purposes. A customer must establish a separate legal basis for each optional purpose.
Our website and demo support responding to your requests, showing how Betterstood works, producing the result of a conversation, preventing abuse and measuring the public experience as described below. The demo email sequence and its exclusions are described below. Starting a demo or providing an email address does not create a marketing subscription.
OpenAI Ads conversion measurement, where enabled, runs automatically only for eligible ad-click visits as described in the advertising section below. You can turn it off through this page. Visiting the Site, starting the demo or accepting its terms is not recorded as a separate advertising consent. Umami remains a distinct measurement flow.
Data minimization
We process the information needed for the relevant service. Contact details, answers and conversation content are kept separate from public-site analytics. Security and delivery controls use limited technical metadata where possible.
Respondent scenarios are not intended to collect special-category data. Assistants must not probe health, religion, political opinions, union membership, biometric data, sexuality, criminal history or similar information. If volunteered, that information should not be pursued and should be minimized in outputs.
Website, contact forms and browser demo
Eigensource S.L. is the data controller for your interaction with our public website and homepage demo. The demo is a Betterstood demonstration with an AI assistant. It transcribes and analyzes the conversation to produce a structured result; it does not make official offers, approvals or binding decisions.
To make the phone form easier to complete, our server briefly uses your connection IP address to suggest a country calling code, under our legitimate interest in making the requested demo usable. This approximate suggestion may reflect a VPN or network location rather than your phone number's country; you can always change it. The lookup runs locally, sends no visitor IP to the data supplier, creates no cookie and does not request your device's location. This lookup does not retain your IP or inferred country, and the suggestion is not sent to analytics, CRM or the AI conversation. Existing network and security processing is described separately below.
For the browser demo, Betterstood processes the contact details you provide, your conversation transcript and technical events needed to run the demo and produce your result. You must provide a valid email address to start. When delivery is enabled, the demo includes an automatic transactional recap email after verified analysis; no separate recap question or permission is required. This does not subscribe you to marketing.
Before starting, you acknowledge the applicable privacy information. Where separately enabled, Nico may send one personal plain-text email at least 24 hours after a verified demo, during weekday working hours in Europe/Madrid. Explicit refusal of private-beta access or contact, privacy revocation, erasure and operational suppression exclude this follow-up. Your latest choices, including those in the final card, apply. It creates no beta enrollment or automatic subscription. Refusing optional follow-up does not cancel the transactional recap. The active scenario disclaimer remains applicable.
Website contact and launch-list forms use the details you submit to respond to the request you make. When a launch-list form is offered, its separate choice authorizes the requested notification. You can withdraw that choice by contacting privacy@betterstood.com.
Where enabled, business information supplied during the demo may be delivered to our CRM, the transactional recap is emailed after analysis, and the separate founder sequence follows the exclusions above. Replies go directly to Nico; this version does not automatically detect a reply to cancel a scheduled message. Contact us to cancel it. The demo uses temporary session state rather than a Platform transcript archive. Closing the popup does not recall information already delivered to a CRM or an email recipient.
IP country data attribution
IP address data powered by IPLocate.io. Betterstood uses an unmodified local copy of the IPLocate IP to Country database, licensed under the Creative Commons Attribution-ShareAlike 4.0 International License. The data supplier receives no visitor lookup requests from this feature. The dataset is refreshed with Site image publications; it is an approximate form suggestion, not proof of residence or telephone eligibility.
IPLocate IP to Country source and attribution
Creative Commons Attribution-ShareAlike 4.0 International License
Respondent privacy and AI interaction notice
When a respondent requests a phone call, browser call, text chat or form-first intake, Betterstood processes contact details, campaign context, submitted answers, conversation transcripts, recording metadata where recording is enabled, provider events and model output needed to produce structured summaries and handoff notes. The respondent is told when the interaction is with an AI assistant.
For a customer campaign, the Platform customer is the controller. Eigensource S.L. processes respondent data for that customer. The controller's name and applicable privacy information are provided in the campaign intake. Any custom controller privacy text or link remains additional to Betterstood's information; this page does not replace it.
Voice channels provide a short AI identity statement and the actual recording/transcription state. Text chat maintains an accessible AI assistant indication. Where an interaction notice is recorded, its displayed text is retained in the receipt; a spoken statement is separate conversation evidence.
Information may include extracted contact fields, answers, missing fields, summaries, qualification context and evidence from the same interaction. Where configured, processing also supports customer handoff, campaign measurement, appointment booking and customer-controlled delivery to verified destinations.
Voice and model services, hosting, email, security and notification providers may process data where the relevant service is enabled. The provider section below describes their roles. Betterstood does not use respondent data to approve credit, make regulated decisions, calculate official rates or issue binding offers.
Required notices and optional choices
Before a phone call, browser call or text chat, respondents accept the applicable terms and confirm they have read the relevant notices. AI information is an acknowledgement, not consent to an optional purpose.
Optional marketing, profiling or third-party purposes require their own applicable legal basis and separate unselected choices. Optional campaign choices do not add advertising or analytics tags to Betterstood pages. A customer's external pages remain subject to that customer's own privacy notice and consent controls.
Customer destinations and external copies
A customer may receive outputs or download an authorized data-minimized operational export for the campaign's original purpose. When appointment booking or a verified webhook destination is enabled, the connected service or customer destination receives the information needed for that operation.
The customer controller is responsible for its downloaded copies, CRM records, accepted webhook data and external appointments. Betterstood assists with data protection requests, but local deletion does not recall an email, cancel an external calendar event or erase a copy already accepted by another destination.
Public respondent terms
Respondents must accept the terms and confirm they have read the applicable notices before Betterstood contacts them or starts a browser call or chat. The service collects information for the named campaign and shares outputs with the Platform customer that configured the campaign. A respondent may withdraw optional consent or request access, deletion or correction by writing to privacy@betterstood.com.
Scenario outputs are informational intake materials only. They are not financial advice, loan approval, eligibility assessment, official rate calculation, vehicle availability confirmation or a binding commercial offer.
Betterstood supports opt-in callbacks and respondent-initiated sessions. Any official commercial follow-up, confirmation or decision belongs to the authorized organization responsible for the scenario.
SaaS and Platform customer terms
Platform customers and admins use Betterstood to configure campaigns, scenarios, fields, questions, follow-up policies and respondent flows. As deployers under the EU AI Act, they are responsible for the intended purpose of each scenario, for having a valid legal basis for each campaign, for accurate landing copy and for avoiding regulated decisions or sensitive-data probing unless a separate reviewed basis exists. Eigensource S.L. provides the Platform; customers own scenario content and what their agent asks.
Customers must keep account credentials confidential, respect cross-organization access boundaries and use Betterstood only for opt-in callbacks or respondent-initiated sessions. Cold outbound marketing is outside this MVP scope.
The applicable campaign notice, customer DPA, configured permissions and any agreed customer terms govern processing of customer respondent data. Optional processing is not authorized merely by accepting Platform terms.
SaaS billing, credits and subscriptions
Free has no paid Checkout flow. Pro and Growth are monthly self-serve subscriptions processed by Stripe for the active organization. Scale is manual, invoice-led, and provisioned by Betterstood operators.
Included credits and purchased credit packs roll over unless a written customer agreement says otherwise. Extra credit packs, auto-replenish where enabled, and subscription changes take effect only after payment confirmation and ledger processing.
Prices may exclude taxes. Billing addresses, tax IDs, card details, invoices, refunds, cancellations, and payment-method changes are handled through Stripe or agreed manual Scale terms. Cancelling stops future subscription renewals but does not turn Betterstood outputs into financial proposals, approvals, official quotes, or binding offers.
The public acquisition demo is separate from customer subscriptions. Prospects pay zero credits for that demo; its operation remains subject to Betterstood's availability, security and operational limits.
Platform account privacy notice
Eigensource S.L. is controller for SaaS account data, authentication, organization membership, support, billing or billing preparation, product operations, security logs and demo analytics. Account data may include name, email, organization, role, preferences, login metadata, support messages and usage events.
Stripe may process billing contact details, tax information, payment metadata, invoice history and subscription status for Pro and Growth self-serve billing. Betterstood stores only the Stripe customer/subscription references and billing state needed to operate the account.
Where enabled, account services also process the metadata needed to administer scoped API credentials, verified webhook destinations, connected appointment calendars and explicitly selected browser notifications. Secrets and notification routing details are protected and are not intended for plaintext logging.
Eigensource S.L. is the controller for self-hosted public-site analytics. The cookie notice below describes the measurements, data processed, Do Not Track control and retention. Signed-in Platform pages and customer respondent flows are excluded from that public-site tracker.
Data Processing Addendum
For customer campaign respondent data, the Platform customer is the controller and Eigensource S.L. acts as processor. The DPA covers processing instructions, confidentiality, subprocessors, security measures, breach notification, assistance with data-subject requests, deletion or return at termination and international transfer safeguards where applicable.
A customer must establish the applicable processing instructions and DPA before production campaign processing. This page describes the framework; it does not replace a customer's executed agreement or its own respondent privacy notice.
Contact privacy@betterstood.com for the applicable DPA and subprocessor information.
Providers, recipients and international processing
The providers involved depend on the service, its configuration and the customer's connected destinations. A provider being listed here does not mean every interaction is sent to it.
Betterstood uses voice and language-model providers for enabled conversations and structured analysis, hosting infrastructure to run the service, security providers to protect public starts, and payment, CRM, email or notification services for their corresponding functions.
Some providers may process data outside the European Union. Applicable DPAs, subprocessors and international transfer safeguards depend on the contracting service and configuration. Betterstood does not claim that every provider processes only in the EU or that one service's retention setting establishes another service's retention guarantees.
OpenAI Data Processing Addendum
Cloudflare Turnstile Privacy Addendum
Ask about the applicable providers and transfer safeguards
| Provider or destination | Function when enabled |
|---|---|
| Hetzner and hosting infrastructure | Service compute and infrastructure; the Platform also uses database infrastructure. |
| OpenAI | Live voice/conversation, language processing, structured analysis and Knowledge Base projections where enabled. |
| OpenAI Ads | Server-side Site demo conversion measurement runs automatically for eligible current-page OpenAI ad-click visits, with minimal event metadata and the required click reference. Browser opt-out, DNT and GPC block it. Organic and UTM-only visits are excluded. No browser advertising SDK or contact data is used. |
| Telnyx | PSTN telephony, phone transport and associated call metadata where enabled. |
| Orq and its configured downstream model providers | Configured model deployment and processing paths where enabled. |
| Cloudflare Turnstile | Bot protection on protected public interaction starts. |
| Stripe | Self-serve subscriptions, credit-pack payments, invoices, payment-method management and billing state. |
| Attio | Demo contact and business information delivered to Betterstood's CRM where enabled. |
| Resend or the configured transactional email service | Requested or applicable service email where enabled. |
| Google OAuth | Platform account authentication when Google login is configured. |
| Calendly, Google Calendar or Microsoft 365 | Customer-connected appointment availability and booking where enabled. |
| Customer-selected verified destinations | Configured data-minimized webhook delivery and customer-managed copies. |
| Browser-selected push routing services | Optional browser notifications after explicit per-device opt-in. |
Data retention and deletion
Retention depends on the service and data category. The Platform's default retention periods do not describe a persistent archive for the autonomous homepage demo.
For Platform interactions, raw data defaults to 90 days: transcripts, provider events, recording metadata, raw model output and debug payloads. Business outputs default to 12 months: lead cards, handoff notes, scores, missing fields, contact fields and campaign snapshots. Consent receipt evidence is retained separately for 10 years from collection. A documented legal or security hold may require retaining particular records.
After deletion or anonymization, anonymous aggregate metrics may remain. Minimal security, suppression, billing or late-replay prevention records may be retained under their separate operational and legal policies.
Homepage demo and website requests
The homepage demo keeps bounded temporary conversation state in memory rather than storing a Platform transcript archive. A fresh page load starts a new session, and a server restart does not restore the prior session. Business information already delivered to CRM or email is a separate copy.
When the invitation feature is enabled, a separate Site register retains the contact details already collected, invitation attribution, valid completion dates and notification records for the active campaign and manual beta follow-up. It does not archive the conversation transcript. Pending referral email content is retained for delivery; terminal jobs discard their content, and uncertain sends leave automatic retry for review before the provider idempotency window ends. Contact details can be erased through a privacy request; minimal suppression and duplicate-prevention records remain.
A separate Site email register retains only pending delivery details, language, one verified professional reference where suitable, latest exclusions, due dates and receipts. Unattempted founder jobs expire after seven days. Automatic retries stop within 23 hours of the first attempt; uncertain outcomes require review. Recipient and message content are discarded when the job ends, while minimal pseudonymous suppression, deduplication and delivery records remain. Email measurement mappings expire after 30 days. This register is not a transcript archive.
Closing a demo or losing its temporary session does not erase provider processing or a CRM/email copy. Requests concerning those copies are handled through privacy@betterstood.com and the applicable destination. We do not promise automatic recall of delivered messages or automatic erasure in an external CRM.
Where a launch list is offered, the entry is kept until the requested notification is sent or you withdraw that choice. Public-site analytics follows the 90-day event retention described in the cookie notice.
Advertising browser preferences last at most 180 days; the event click reference is kept only during pending dispatch and is removed on completion, opt-out, expiry, eviction or shutdown. Advertising duplicate-prevention identifiers expire within 24 hours. The advertising section above distinguishes these local limits from recipient retention.
Additional Platform retention windows
Incomplete form-first journeys normally expire after their 30-day continuation window, except where an accepted or uncertain provider operation requires reconciliation. Customer webhook payloads and delivery content remain no longer than 30 days and never beyond the source interaction's business-data retention.
Local Platform Turnstile replay records contain keyed digests and binding metadata, not raw provider tokens. They are removed in a bounded cleanup 24 hours after the four-minute intent expires. The homepage demo's challenge and session state are temporary process state.
Account data is kept while the account is active and as needed for legal or security records. Active browser notification routing secrets are removed on revocation; content-free technical receipts have a bounded retention window. External appointments, accepted webhook copies, delivered email and customer exports must also be addressed at their destinations.
Your rights and privacy requests
Contact privacy@betterstood.com to request access, correction or deletion, to object to processing or to withdraw optional consent. Applicable data protection rights also include restriction and portability where their conditions are met, and the right to complain to your local data protection authority.
For website, demo and Platform account processing where Eigensource S.L. is controller, we handle the request directly. We verify identity using only the information needed to identify the requester and the relevant records.
For customer campaign data, the customer is controller. Eigensource assists with lookup, export, correction and deletion on that controller's instructions rather than independently deciding a contested request. Include the campaign or organization name and the email or other interaction reference you used, where available.
A withdrawal stops future optional processing within the applicable scope. Deletion remains subject to required legal or security evidence. Copies already delivered to a customer, CRM, email recipient, webhook endpoint or calendar service must be handled with the responsible controller or destination.