1. Introduction
Welcome to Kosmo Research ("Company", "we", "our", "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our services or join our research panel.
Website: kosmoresearch.com
Email: [email protected]
Location: Greece, European Union
2. Information We Collect
Research Panel Signups (LinkedIn and Other Channels)
When you sign up to join the Kosmo Research panel through advertisements on LinkedIn or other platforms, we collect:
- Email address
- Country of residence
- Year of birth
- LinkedIn profile URL
- Industry and professional role
- Languages spoken
- Phone number (optional, for WhatsApp study delivery)
- Other professional information you choose to provide
- Details needed to send your study rewards (for example, your PayPal email address or Grab phone number)
- A record of your consent choices, including the optional AI data collection opt-in
This data is collected with your consent at the time of signup. We use it to verify your identity and professional background (including by reviewing your LinkedIn profile, at signup and from time to time while you are a member), match you with relevant paid research studies, including studies that ask you to review or rate AI outputs, invite you to participate in studies that fit your professional background, and communicate with you about your panel membership. If you separately opt in, we may also use it to invite you to AI data collection projects (see Section 5). You can withdraw your consent and request data deletion at any time by emailing us at [email protected].
Consulting Clients
- Name and email address
- Company information
- Project details and research objectives
- Payment information (processed securely by PayPal or Fiverr)
AI Evaluation and Recruitment Clients
- Name, email address, and company information
- Project details and screening criteria
- Model outputs or other materials you send us for evaluation ("Client Materials")
Client Materials are handled under our Terms of Service, including confidentiality and deletion commitments. We ask clients not to include personal data in Client Materials unless agreed in advance. Where they do, we process it only to deliver the project and on the client's instructions.
AI Interviewer (Researchers)
- Email address
- Account information
- Interview campaigns and questions you create
- Payment information
AI Interviewer (Participants)
- WhatsApp phone number (for WhatsApp interviews)
- Text responses
- Voice message recordings and transcripts
- Images or files you upload, where a study asks for them
- AI-generated summaries of responses
Website Visitors
- Basic usage data (pages visited)
- Device and browser information
- IP address
3. Legal Basis for Processing (GDPR)
We process your data based on:
- Contract: To deliver services you purchased
- Consent: For panel members, research participants, marketing communications, and the optional AI data collection opt-in (collected separately)
- Legitimate interest: To improve our services, prevent fraud, and ensure security
Kosmo Research is the data controller for panel members, for the studies it runs itself, and for its clients' and researchers' account data. When a researcher runs an interview campaign on our AI Interviewer, the researcher is the controller of that campaign's participant data and Kosmo Research acts as processor on the researcher's instructions; participants should direct requests about that data to the researcher, and we will forward any request we receive.
4. How We Use Your Information
We use your information to:
- Verify panel members' identity and professional background, at signup and from time to time while they are members, including by reviewing their LinkedIn profile
- Match panel members to relevant paid research studies, including AI evaluation studies
- Invite panel members to participate in studies that fit their background
- Invite panel members who have opted in to AI data collection projects
- Send study rewards to participants
- Provide and improve our services
- Process payments
- Send project updates and support messages
- Transcribe voice messages and generate research insights
- Comply with legal obligations
We do not sell your data to third parties. We do not make decisions about you based solely on automated processing.
5. AI Processing
Our AI interviewer, delivered via WhatsApp and web, uses:
- OpenAI GPT-4: For AI conversations and analysis
- OpenAI Whisper: For voice message transcription
Voice messages are automatically transcribed. Responses are processed to generate research summaries for the researcher or client running the study.
Kosmo does not use your interview responses, recordings, or profile data to train AI models.
AI evaluation studies: Some paid studies ask you to review, rate, or give feedback on AI outputs and behaviour. These are research studies like any other and are covered by your panel consent. Every invitation explains who is running the study and what you will be asked to do, and you can decline any study.
Optional AI data collection projects: Some of our research partners build AI systems. Panel members who have separately opted in may be invited to complete tasks or provide content, such as text, voice recordings, or images, that the project organiser may use to develop or train AI systems. Every invitation explains who is running the project, what you will be asked to provide, and how it will be used, and you can decline any project or switch the opt-in off at any time. When a project runs on our platform, we share your project responses with the partner running it, as described in the invitation. When a project runs on a partner's platform, the partner collects your project data under their own terms. Full details are in our Panel Member Terms.
6. Data Sharing
We share data only with:
- OpenAI (USA): AI processing and transcription
- Supabase (EU): Platform database
- Google Workspace (EU/USA): Email and file storage
- Railway (EU/USA): Application hosting
- Cloudflare: Website hosting and security
- Meta (WhatsApp): Message delivery for WhatsApp interviews and communications
- PayPal and Fiverr: Client payments
- PayPal, Grab, and Tremendous: Participant rewards, sharing only the details needed to send your reward
- Research partners: Limited information for study matching and to confirm participation, such as screening answers or an anonymous participant ID
- Research clients and project partners: Your study responses, only with your explicit consent at the time of each study invitation, and only for the specific study or project you agree to take part in
- A successor, if Kosmo Research is sold or transferred: We will notify you before and after any such transfer, and your data stays subject to this policy
- Legal authorities: If required by law
We do not share your email address, phone number, or LinkedIn profile with clients or partners unless you agree to this for a specific study.
Our service providers are bound by data protection agreements or equivalent terms.
7. International Data Transfers
Our platform database is stored in the EU (Supabase). Some data is processed or stored outside the EU, including in the United States (OpenAI, Google, Meta, Tremendous). Our website is served through Cloudflare's global network, and reward payments in Southeast Asia may be processed by Grab. We use appropriate safeguards, such as Standard Contractual Clauses (SCCs), to protect your data during international transfers.
If you are outside the EU, your panel data is transferred to and stored in the EU when you sign up. Where your country's law requires it, we rely on your consent at signup and on the contractual safeguards above.
8. Data Storage and Security
- Platform data stored on EU servers (Supabase)
- Panel administration data held in Google Workspace
- All data encrypted in transit (HTTPS/TLS)
- All data encrypted at rest
- Access limited to authorised personnel only
- Regular security reviews
9. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Export your data in a readable format
- Restriction: Limit how we process your data
- Objection: Object to certain processing
- Withdraw consent: At any time, including switching off the AI data collection opt-in
Panel members may have additional rights under the laws of their country, as listed in our Panel Member Terms and in Section 10 below.
To exercise these rights, email [email protected]. We respond within 72 hours to requests to access, correct, restrict or withdraw consent, and within 30 days to other requests.
10. Members Outside the EU
Members in Indonesia have rights under Law No. 27 of 2022 on Personal Data Protection, including the right to compensation for unlawful processing and the right to object to decisions made solely by automated processing. Members in other countries may have similar rights under their local law.
Our data protection officer for these purposes can be reached at [email protected].
11. Data Retention
- Panel member data: Up to 24 months after your last interaction with the panel, or until you request deletion or withdraw consent
- Consent records: Kept for as long as needed to show when and how you gave or withdrew consent
- Consulting project data: Deleted 12 months after project completion (unless otherwise agreed)
- AI Interviewer campaigns: Retained until you delete them or close your account
- Participant data: Retained until the researcher deletes the campaign or the participant requests deletion
- Invoices and financial records: 7 years (legal requirement)
- WhatsApp phone numbers collected for a campaign: Deleted when the campaign is deleted (phone numbers in a panel profile follow panel member retention)
12. Participant Data (AI Interviewer)
For research participants:
- Consent collected before the interview starts
- Participants informed they are interacting with AI
- WhatsApp phone numbers collected only for interview delivery
- Voice messages transcribed automatically
- Participants can request data deletion at any time
- Data shared only with the researcher or client running that study, as explained when you agree to take part
Researchers are responsible for:
- Informing participants about the research purpose
- Ensuring appropriate consent for their specific research
- Handling participant data ethically
13. Cookies
We use minimal essential cookies only for site functionality. We do not use advertising, tracking, or analytics cookies.
14. Children
Our services are not intended for anyone under 18 years of age. All panel members must be 18 or older. We do not knowingly collect data from children.
15. Data Breaches
In the event of a data breach affecting your personal information, we will:
- Notify the relevant supervisory authority within 72 hours where required
- Notify affected users within 72 hours where the law requires, and otherwise without undue delay where the breach is likely to put their rights at risk
- Take immediate steps to mitigate the breach
16. Changes to This Policy
We may update this policy. Changes will be posted on this page with an updated date. For significant changes, such as new uses of your data, we will notify you by email and ask for your consent where required.
17. Contact and Complaints
Questions or requests? Email [email protected]
If you are unsatisfied with our response, you have the right to lodge a complaint with a supervisory authority:
- Greece: Hellenic Data Protection Authority (dpa.gr)
- Your local data protection authority
Kosmo Research Panel Member Terms & Privacy Notice
Version 1.1, effective 17 October 2026
Who we are. Kosmo Research is a sole trader business based in Larissa, Greece, in the European Union. We are the data controller for your panel data. Contact us at [email protected]. Our data protection officer can be reached at the same address.
What this document is. These terms explain what joining the Kosmo research panel means, what information we hold about you, how we use it, and your rights. They work together with our Privacy Policy above. Where the two differ, this document applies to panel members.
1. What joining means
The panel is a group of verified professionals who are invited, from time to time, to take part in paid research studies run by Kosmo Research for its clients. Joining is free and voluntary.
Joining the panel means:
- We keep your profile on file so we can match you with studies that fit your background.
- We may contact you with study invitations and panel updates.
- You decide, for each study, whether to take part. Declining an invitation never affects your membership.
- You can leave the panel at any time (Section 15).
Joining does not guarantee that you will be invited to a study or earn a reward.
2. Who can join
- You must be 18 or older.
- You must provide accurate information about yourself and keep it up to date.
- You must have a professional profile we can use to verify your background.
- One membership per person. We remove duplicate or false profiles.
We verify profiles at signup and from time to time while you are a member, including by reviewing your professional profile. We may decline or remove a membership that fails verification.
3. What we collect
At signup: your email address, country, year of birth, professional profile link, languages, employment status, industry and role, interests you select, and your phone number if you choose to give it. Later: the details needed to pay your rewards (for example a PayPal email or Grab phone number), your answers to screening questions, a record of which studies you took part in, and a record of your consent choices.
We do not ask for government ID numbers, bank account numbers or passwords.
4. How we use your information
We use your information to:
- Verify your identity and professional background
- Match you with studies that fit your background and invite you to them
- Send you study rewards
- Communicate with you about your membership
- Keep records of your consent and participation
- Meet our legal obligations
Our legal basis is your consent, given at signup. We do not sell your data, and we do not make decisions about you based solely on automated processing.
5. How studies work
Each invitation tells you what the study is about, what you will be asked to do, how long it takes, the reward, and who the research is for (or that the client is anonymous). Studies may be surveys, interviews, diary studies, concept or prototype tests, usability tests, or tasks that ask you to review and rate AI outputs (AI evaluation). All of these are research studies covered by your panel consent.
Some interviews are conducted by an AI interviewer on WhatsApp or the web. You will always be told before an interview starts that you are talking to an AI. Voice messages are transcribed and your answers are summarised to produce research findings.
A study that asks about sensitive topics, such as your health, income or religion, will ask for your separate agreement before those questions.
Some studies run on a client's or partner's own platform. The invitation will say so. In that case the client or partner collects your answers under its own terms, and we pass on nothing beyond a participant ID unless you agree otherwise.
6. Optional: AI data collection projects
Separately from research studies, some of our partners build AI systems and pay for contributions such as text, voice recordings or images that they may use to develop or train those systems.
We only invite you to these projects if you have opted in, either on the signup form or later. Opting in is not required to join the panel. Each invitation explains who is running the project, what you would provide, how it will be used, and who keeps it. You can decline any project, and you can switch the opt-in off at any time by emailing [email protected].
7. Rewards
You are rewarded only for studies you are invited to and complete. The reward and payment method are stated in each invitation. Payment methods include PayPal, Grab vouchers, Tremendous gift cards or an equivalent local option depending on your country. Rewards are normally sent within 14 days of a study closing. We may withhold a reward for responses that are incomplete, duplicated, or clearly not given in good faith.
8. How we contact you
We contact you by email, and by WhatsApp, SMS or phone only if you gave us a number. We contact you only about studies, rewards and your membership. We do not send marketing for other companies.
9. Confidentiality
Some studies show you unreleased products, prototypes, AI outputs or other confidential client material. By taking part in such a study you agree to keep that material confidential, not to copy or share it, and to use it only for the study. We will tell you before the study starts when this applies, and a client may ask you to accept a short confidentiality agreement for a specific project.
10. Who we share your data with
We share your data only with:
- Service providers that store or process it for us: Supabase (EU), Google Workspace (EU/USA), Railway (EU/USA), Cloudflare, Meta (WhatsApp), OpenAI (USA) for interview transcription and summaries, and PayPal, Grab and Tremendous for rewards. Each is bound by a data processing agreement.
- Research clients and partners: only your study responses, only for the study you agreed to, and only as explained in the invitation. Your email address, phone number and profile link are not shared with clients unless you agree to it for a specific study.
- A successor, if Kosmo Research is sold or transferred. We will notify you before and after any such transfer, and your data stays subject to these terms.
- Authorities, where the law requires it.
11. Where your data is stored
Your panel data is transferred to and stored in the European Union when you sign up, and some processing takes place in the United States through the providers listed above, protected by Standard Contractual Clauses. If you live outside the EU, you agree to this transfer when you join the panel.
12. How long we keep your data
- Panel profile: up to 24 months after your last interaction with the panel, or until you ask us to delete it
- Consent records: for as long as needed to show when and how you gave or withdrew consent, including after you leave
- Study responses: deleted on the schedule agreed for each study once the project closes
- Voice recordings: kept only as long as the study needs them and deleted when the study closes, unless the invitation says otherwise
- Reward and payment records: 7 years, as required by tax law
When you leave the panel we delete your profile within 30 days, except for records we must keep by law.
13. Your rights
Wherever you live, you can ask us to:
- Give you a copy of the data we hold about you
- Correct or complete it
- Delete it
- Restrict or object to how we use it
- Send it to you in a readable format
- Withdraw any consent you have given, including the AI data collection opt-in
Email [email protected]. We respond within 72 hours to requests to access, correct, restrict or withdraw consent, and within 30 days to other requests. There is no charge.
European Union and United Kingdom
These rights are set out in the GDPR and UK GDPR. You may complain to the Hellenic Data Protection Authority (dpa.gr) or your own national authority.
Indonesia
You have the rights above under Law No. 27 of 2022 on Personal Data Protection, as well as the right to compensation for unlawful processing and the right to object to decisions made solely by automated processing. Our data protection officer can be reached at [email protected].
Malaysia, Singapore, Thailand, Vietnam, the Philippines, Japan, South Korea, Taiwan
You have equivalent rights under your national data protection law and may complain to your national authority.
United States (California)
You have the right to know, access and delete your data. We do not sell personal data.
14. Security
Your data is encrypted in transit and at rest and stored on systems with restricted access. If a data breach puts your rights at risk, we will tell you within 72 hours where the law requires, and otherwise without undue delay.
15. Leaving the panel
Email [email protected] with "leave the panel" and we will remove you. You will receive no further invitations and your profile is deleted within 30 days. Rewards already earned are still paid.
16. Changes to these terms
We may update these terms. The version number and effective date at the top change whenever we do, and we will email you about any change that affects how we use your data. Where the law requires fresh consent for a new use, we will ask for it rather than assume it. These terms are governed by the laws of Greece, without affecting any protection you have under the law of the country where you live.
17. Version history
- v1.0, 21 April 2026: first publication.
- v1.1, 17 October 2026: added AI evaluation as a study type, the optional AI data collection opt-in, confidentiality for client material, a data protection officer contact, rights and response times for members in Indonesia, the business-transfer notice, and the current list of service providers.
18. Contact
Kosmo Research, Larissa, Greece. [email protected]