Legal

Privacy Policy

Last Updated: March 17, 2025

Research37 LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is Research37 LLC. You can contact us at contact@research37.com for any privacy-related inquiries.

2. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract: To perform our contract with you (e.g., providing our services, account management).
  • Consent: Where you have given consent (e.g., non-essential cookies such as analytics). You may withdraw consent at any time.
  • Legitimate interests: To operate and improve our services, ensure security, and communicate with you about your account.
  • Legal obligation: Where required by law (e.g., tax, regulatory compliance).

3. Information We Collect

We collect information that you provide directly to us, including when you create an account, use our services, or contact us for support. This may include:

  • Account information (email, name, password)
  • Profile data if you sign in with Google (email, name, profile picture)
  • Survey data, responses, study data, and other content you create or upload
  • Communications and support requests
  • Usage data and analytics (when you have consented to cookies)

4. Cookies and Similar Technologies

We use cookies and similar technologies to provide and improve our services. You can manage your preferences when you first visit our site via our cookie consent banner.

Essential Cookies

These are necessary for the website to function and cannot be disabled. They include session cookies for authentication and security (e.g., Supabase auth tokens).

Analytics Cookies (Optional)

With your consent, we use Google Analytics (Google LLC) to understand how visitors use our site. Google Analytics uses cookies to collect information such as pages visited, time on site, and general traffic patterns. This helps us improve our services. Google may process this data in the United States. You can decline analytics cookies via our cookie banner, or manage preferences in your browser. For more information, see Google's Privacy Policy.

Managing Cookies

You can withdraw consent for non-essential cookies at any time by clearing your browser cookies or adjusting your browser settings. Note that declining analytics cookies will not affect the core functionality of our services.

5. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, process transactions, communicate with you, ensure security, and comply with legal obligations.

6. AI Model Training

We do not use your data to train our AI models. Your survey data, responses, account information, and any other data you provide (including across Survey37, Focus37, Pricing37, Diary37, and Community37) is not used to train, fine-tune, or improve our AI models or those of our service providers. Your data remains private and confidential and is used solely for the purpose of providing our service to you.

7. Third-Party Vendors and Safeguards

We engage third-party vendors to help deliver our services (e.g., hosting, authentication, analytics, AI). We require these vendors to process your data solely on our instructions, in compliance with applicable data protection laws, and with appropriate safeguards including data processing agreements and equivalent privacy and security standards. Where data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. Account data is retained while your account is active and for a reasonable period after deletion for backup and legal compliance. You may request deletion of your data at any time (see Your Rights below).

9. Your Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (subject to legal exceptions).
  • Restriction: Request that we limit processing in certain circumstances.
  • Data portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time (e.g., for cookies).
  • Lodge a complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.

To exercise any of these rights, please contact us at contact@research37.com. We will respond within the timeframe required by applicable law (typically 30 days).

10. Children

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and secure hosting. No method of transmission over the internet is 100% secure; we strive to use industry-standard practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have a complaint, please contact us at contact@research37.com.