Research decisions and processing support have different roles.
The survey owner determines the purpose, data needed, applicable legal basis, participant information, retention period and publication decisions. Nuvopoll processes research data under the documented instructions and the data processing agreement.
The agreement addresses confidentiality, security measures, subprocessors, breach notification, assistance with participant rights and audit processes, return or deletion of data and transfer arrangements. Read the complete agreement and its annexes; this page is a product summary.
The controller and processor have their own responsibilities. Platform tools support your decisions rather than replacing the legal assessment for your study. The EU-project guide connects these decisions to work with research partners.
Keep participant information and consent records clear.
Notice text is versioned. Records distinguish information being provided, consent for sensitive data and permission to retain an audio recording. A cryptographic digest preserves which notice text accompanied the participant’s approval.
In anonymous mode, an IP address or IP digest is not written to the response record. You still decide whether the questions request names, email addresses or other identifying information. Neither participant nor interviewer location is collected by the fieldwork system.
Monitor retention. You initiate destruction.
Set a retention period. Nuvopoll shows remaining days and sends notifications as the period approaches or expires. Research data is not automatically deleted simply because that period has ended.
Manual destruction requires your two-stage confirmation and is recorded. Deleting the study removes responses and retained participant audio while consent records are kept separately. In studies that collect identifying information, participant requests can help you find, export or delete the relevant records.
Manage fieldwork roles and report access separately.
Assign interviewer, supervisor or field manager roles for fieldwork. Share a live report with a collaborator as viewer or editor. Report collaboration does not give that person permission to edit the research study.
Data export, study deletion and settings changes are recorded with the actor and time. Platform-admin maintenance and support actions also appear under the acting administrator’s identity. Review report content and researcher audio before sharing it.
Understand what each AI operation receives.
- Survey drafting and translation use the idea, question text and relevant design information.
- Variable-name suggestions use template question information when you leave a code blank.
- Voice transcription sends participant audio to Google Cloud Speech-to-Text; the resulting text becomes response data.
- SPSS export is a server operation and does not send the response dataset to Gemini.
If the participant has not agreed to retaining the recording, the audio is deleted after transcription; the text remains. Researcher audio commentary in a live report is a separate recording and a separate publication decision.
Storage location and AI processing location are not the same.
The current product information places the research database in EU regions covering Belgium and the Netherlands, with files and server operations in Belgium and backups in EU multiregion storage. Data is encrypted at rest and transmitted through encrypted connections; backups are made daily.
Gemini inputs and generated outputs may be processed or temporarily retained outside the EU. Speech-transcription processing follows that service’s regional settings. Review each operation and the transfer provisions that apply to your research; this page does not promise that all AI processing takes place within the EU.
Keep current limits visible.
- No ISO 27001 or SOC 2 certification is currently claimed.
- No self-hosted installation or storage of the research database on Turkish servers is offered.
- Email-and-password accounts do not currently have platform two-step authentication; Google sign-in can use Google account protection.
- Anonymous participation limits rely on browser controls and can be bypassed by clearing browser data; device fingerprinting is not used.
- Participants cannot currently download their own consent record or edit a submitted answer. Access, export and deletion are supported through the applicable request workflow.
These are product capabilities and limits, not a certificate that your research complies with every applicable law. Plan notices, permissions and publication around the actual data flow.