Privacy Policy

Last Updated: May 24, 2026

At Echo, we prioritize the confidentiality and safety of your employee feedback data. This Privacy Policy details how we collect, store, secure, and leverage information when you use our exit survey platform and strategic HR dashboards.

1. Information We Collect

We collect information to deliver narrative-first retention insights and simplify corporate exit documentation:

User Credentials: Registration details, such as name, email address, password, and Google Authentication records.
Exit Survey Data: Response narrative remarks, rating allocations (such as the 100-Token priority scales), and sentiment calibration data.
Administrative Metadata: CSV files uploaded containing basic departure records (name, department, role, separation dates).
Billing Information: Stripe transaction identifiers generated via simulated sandbox mode or production payment flows.

2. How We Use Your Data

We leverage collected records to provide strategic human resources intelligence:

Synthesizing strategic exit insights and sorting metrics by organizational departments.
Grouping qualitative exit remarks into automated thematic clusters using AI models.
Sending automated secure email invites and follow-up notices to departing personnel.
Fulfilling account authorization checks and validating subscription tier permissions.

3. Data Sharing & Disclosures

Echo does not sell, rent, or trade your employee survey data. We disclose records only under the following contexts:

Service Providers: Sharing database and billing keys with hosting platforms (Firebase) and payment gateways (Stripe) to sustain service operations.
Compliance with Laws: Disclosing information if required under search warrants, court mandates, or regulatory directives.
Corporate Transitions: If Echo is merged, acquired, or restructured, asset and user data transfer will be subjected to the same privacy guidelines.

4. Data Protection & Security

We employ strict industry-standard precautions to prevent data loss, misuse, and unauthorized access:

Enforcing strict encryption protocols for exit details in transit and at rest.
Running security rules checking that only authorized administrators can query specific cohort results.
Periodically reviewing data processing tools and security measures.

5. Your Choices & Access Rights

Users and enterprise clients hold complete sovereignty over their data:

Exporting Records: You can download raw exit logs and department analytics in CSV format from your dashboard.
Data Deletion: You can delete any active exit record directly, which permanently removes the entry from the Firebase cluster.
Communication Prefs: Opting out of automated reminder schedules or strategic bulletin summaries anytime.

Questions about our privacy guidelines? Contact us at business@echoaihr.com