When and how we collect data

From the first moment you interact with Useberry, we are collecting data. Sometimes you provide us with data, sometimes data about you is collected automatically.

Here’s when and how we do this:

 

Data we collect Data you give
You browse any page of our website ✔️
You create an account on Useberry ✔️ ✔️
You request a demo of Useberry ✔️ ✔️
We call you ✔️
You use Useberry ✔️ ✔️
We contact you for a user interview ✔️
You receive emails from us ✔️
You chat with us for customer support ✔️ ✔️
You report a bug ✔️
You opt-in to marketing messages ✔️

Types of data we collect

Contact details
Your full name, email address, company address, company website, job position, team size.

Financial information
Your credit/debit card details (only the last 4 digits, provider (Visa, etc.), expiration date), billing details (address, VAT number, country, address, city, postal code)

Data that identifies you
Login information, browser type and version, time zone setting, browser plug-in types, geolocation information about where you might be, operating system and version.

Data on how you use Useberry
Your URL clickstreams (the path you take through our site), products/services/features used, page response times, how long you stay on our pages, what you do on those pages, how often, and other actions…

What about really sensitive data?
We don’t collect any “sensitive data” about you (like racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about your sexual life or orientation, and offenses or alleged offenses).

What about children’s data?
Useberry is a business-to-business service directed to and intended for use only by those who are 18 years of age or over. We do not target Useberry at children, and we do not knowingly collect any personal data from any person under 18 years of age.

How and why we use your data

Data protection law means that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data:

Keeping Useberry running
Managing your requests (like inviting collaborators or team members), login and authentication, remembering your settings, processing payments, hosting, and back-end infrastructure.
(Legal basis: account, legitimate interests)

Improving Useberry
Testing features, interacting with feedback platforms and questionnaires, managing landing pages, traffic optimization and data analysis and research, including profiling and other techniques over your data, and in some cases using third parties to do this.
(Legal basis for this data usage: account, legitimate interests)

Customer support
Notifying you of any changes to our service, solving issues via live chat support, web call, or email including any bug fixing.
(Legal basis for this data usage: account)

Customer Interviews / Customer Stories / User Research
We will contact you to conduct an interview with you on how you use our services, for noticing usability issues, for product suggestions, for beta testing, and participating in user research with usability tests, questionnaires, and surveys.
(Legal basis for this data usage: account, legitimate interests)

Marketing purposes (with your consent)
Sending you emails and messages about new features, products and services, and content.
(Legal basis for this data usage: consent)

Here is what each of these “legal bases” means:
Consent: You have given clear consent for you to process your personal data for a specific purpose.
Account: Processing your data is necessary for the account you have on Useberry.
Legitimate interests: Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are:

  • gaining insights from your behavior on our website or in our app
  • delivering, developing, and improving the Useberry service
  • enabling us to enhance, customize or modify our services and communications
  • determining whether marketing campaigns are effective
  • enhancing data security

In each case, these legitimate interests are only valid if they are not outweighed by your rights and interests.

Your privacy choices and rights

Your choices:

You can choose not to provide us with personal data
If you choose to do this, you can continue to use the website and browse its pages, but we will not be able to process transactions without personal data.

You can turn off cookies in your browser by changing its settings
You can block cookies by activating a setting on your browser allowing you to refuse cookies. You can also delete cookies through your browser settings. If you turn off cookies, you can continue to use the website and browse its pages, but Useberry and certain services (like Intercom) will not work effectively.

Your rights:

You have the right to access the information we hold about you

You have the right to make us correct any inaccurate personal data about you

You can object to us using your data for profiling you or making automated decisions about you
We may use your data to determine whether we should let you know information that might be relevant to you (for example, tailoring emails to you based on your behavior). Otherwise, the only circumstances in which we will do this is to provide the Useberry service to you.

You have the right to be ‘forgotten’
You can do this by asking us to erase any personal data we hold about you if it is no longer necessary for us to hold the data for purposes of your use of Useberry.

How secure is the data we collect?

We have physical, electronic, and managerial procedures to safeguard and secure the information we collect.

And please remember:

  • You provide personal data at your own risk: unfortunately, no data transmission is guaranteed to be 100% secure
  • You are responsible for your username and password: keep them secret and safe!

Where do we store your data?

The personal data we collect is processed at our cloud infrastructure in London (England, Europe) and in any data processing facilities operated by the third parties identified below.

By submitting your data, you agree to storing or processing by us. If we transfer or store your information outside the EU in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this Privacy Policy.

For how long do we store your data?

We will archive and stop actively using any personal identifiable information about you within two years from the last time you used Useberry. We will delete your personal data from our archives no later than two years from the last time you used Useberry or as agreed with you in a separate contract.

Third parties who process your data

The following services help us keep Useberry running by storing or processing your data on our behalf:

Infrastructure:

Service provider Data collected or shared Purpose
Google Cloud Platform

(Privacy policy)

Contact details
Data from your tests
Data that identifies you
Data in how you use Useberry
This is a web hosting provider: we use it to store data you generate by using the service securely in the cloud.

Analytics:

Service provider Data collected or shared Purpose
Google Analytics

(Privacy policy)

Contact details
Data that identifies you
Data in how you use Useberry
Cookies
Google Analytics is a web analytics service: we use it to track your use of the service and prepare reports on user activity.

Integrations:

Service provider Data collected or shared Purpose
Google, Inc.

(Privacy policy)

Contact details
Data that identifies you
Data in how you use Useberry
Cookies
This enables users to authenticate via Google.

Communications:

Service provider Data collected or shared Purpose
Mailchimp/Mandrill

(Privacy policy)

Contact details
Data in how you use Useberry
We use this service for sending, storing, and tracking emails.
Intercom, Inc.

(Privacy policy)

Contact details
Data in how you use Useberry
Cookies
We use this service for customer communications, user interaction, and helpdesk assistance.
Hubspot, Inc.

(Privacy policy)

Contact details
Data in how you use Useberry
Cookies
We use this service for customer communications, hosting landing pages, and sending marketing emails to those who have opted in

Payments:

Service provider Data collected or shared Purpose
Stripe, Inc.

(Privacy policy)

Contact details
Financial information
Cookies
This service processes the payments for us.
Braintree, Inc.

(Privacy policy)

Contact details
Financial information
Cookies
This service processes the payments for us.

How we use cookies

We use cookies. Unless you adjust your browser settings to refuse cookies, we (and these third parties) will issue cookies when you interact with Useberry. These may be “session” cookies, meaning they delete themselves when you leave Useberry, or “persistent” cookies which do not delete themselves and help us recognize you when you return so we can provide a tailored service.

How can I block cookies?
You can block cookies by activating a setting on your browser allowing you to refuse the setting of cookies. You can also delete cookies through your browser settings. If you use your browser settings to disable, reject, or block cookies (including essential cookies), certain parts of our website will not function fully. In some cases, our website may not be accessible at all. Please note that where third parties use cookies we have no control over how those third parties use those cookies.

Last Updated: 15-10-2021

When and how we collect data

1.1 Participant metadata
Data is received automatically by Useberry when a user (“Participant”) participating in a Study with which Useberry’s service interoperates (“Participant metadata”):

  • Device Description
  • Operating system and its version
  • Screen Size
  • Device Manufacturer
  • Device language
  • The exact time of communication with the server
  • User’s IP address (retrieved when connecting to the server)

Useberry may process “User’s IP address” to fill in (if necessary) the country in the sessions’ data at the results page. The IP address is not stored in any Useberry databases. Also, the IP address is not associated in any way with the Participants.

All such data received automatically by Useberry do not contain data that are able to lead to the identification of the natural person. All such data are completely anonymous.

If the user who is offered to participate in a Study chooses not to participate, Useberry will not proceed to any further collection of user data but can at all times use and process already collected response metadata.

Data is received by Useberry when a user visits a Study with which Useberry interoperates.

When a user visits a Study, Useberry places and uses a cookie in order to receive information about the Participant pertaining to his possible eligibility for Study tendering. This persistent cookie has a long expiration date and it isn’t used for any other reason. The Study does not contain any other type of cookies (Google Analytics etc.).

By accepting this privacy policy document, you once more give Useberry your consent for the processing of data collected in the manner described above, according to the terms and conditions of this privacy policy.

1.2 Data collected through the Study process (“Content Data”)
Useberry collects and processes data (“Content Data”) which consists of the Participant’s actions on the Study presented by Useberry to the Participant deciding to participate in the Study. Whenever the Participant chooses to participate in an offered Study, all parameters of the Participant’s actions while in the Study environment, that is dom mutations, screen coordinates and time intervals of clicks, double clicks, taps, double taps, swipes, slides, voice/audio feedback, etc. are collected, stored and processed by Useberry according to the terms of this privacy policy. Those data collected through the Study process will be associated with the aforementioned Participant metadata/cookie collected data.

Useberry never collects, processes, or asks the Participant for:

  • Demographic data such as Participant’s gender, age group, interests.
  • Direct Personally Identifiable Data and/or Personal Identifiable Information (PII) such as Participant’s name, e-mail address, address, date of birth, phone number, ZIP code, social media accounts.
  • Sensitive data such as racial or ethnic origin, religious or political beliefs, or health status.
  • Special categories of data such as financial account numbers, Social Security numbers, pharmaceutical prescriptions, or medical records.

By accepting this privacy policy document, you once more give Useberry your consent for the processing of data collected in the manner described above, according to the terms and conditions of this privacy policy.

How and why we use your data

Useberry collects, processes, and analyzes data and provides its clients, the Researchers, with statistical charts, data, info, and tools/options for further analysis, related to the results of a Study. Correlation/association of all data and info received/deduced by Useberry during the Study process and all prior-to Study /after- Study processes, are also conducted in order for Useberry to be able to provide services to its clients.

Furthermore, all data collected and processed by Useberry, in any manner and form, including Participant metadata, all content data, and all further analyses of a Study are and remain at all times Useberry proprietary material, and are included in Useberry’s proprietary databases.

Please also note that:

We may disclose data collected by us if required to do so by law or in the good-faith belief that such action is necessary to comply with state and federal laws in response to a court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement activity or other legal processes. We also reserve the right to disclose data collected by us, as we believe, in good faith, is appropriate or necessary to take precautions against liability; to protect Useberry and others from fraudulent, abusive, or unlawful uses or activity; to investigate and defend ourselves against any claims or allegations; to assist government enforcement agencies; to protect the security or integrity of the Service and our other property; or to protect the rights, property, or safety of us, our users, or other persons or entities.

Finally, we use commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of the data. All data and responses are transferred above HTTPS/SSL secure channels to ensure the secure exchange of data between the users’ devices and Useberry servers. We cannot, however, ensure or warrant the security of any information you transmit to us, and you do so at your own risk. Once we receive your transmission of data, we make commercially reasonable efforts to ensure the security of our systems. Please be aware, however, that this is not a guarantee that such data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If we learn of a security systems breach, then we may attempt to notify you electronically so that you can take appropriate protective steps. We may post a notice through the Service if a security breach occurs.

Useberry does not share with any entity or third party whatsoever metadata and/or content data.

Where and for how long do we store your data?

The metadata and the content data we collect are processed at our cloud infrastructure in London (England, Europe).

By submitting your data, you agree to storing or processing by us. If we transfer or store your information outside the EU in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this Privacy Policy.

We will delete your metadata and content data from our storage one year from the last time when the Study was active.

Recipients Of Data

Useberry is the main recipient of data and Useberry may share, transfer or license, in whole or in part elements such data to our clients (“Researchers”). You hereby give your consent for the lawful processing of your data by our clients, with whom we share such data.

We require our clients to abide by the GDPR, in relation to their processing of your data.

Useberry is a Greece-based company and its entire infrastructure is hosted in Google Cloud Platform (GCP) located in London (England, Europe) and our storage in the EU (multiple regions in European Union), therefore you understand and consent to the processing of your personal data by us in the EU. We will protect your personal information in accordance with this Privacy Policy wherever it is processed.

Please also note that:

We may work with third-party service providers to provide maintenance services, data analysis, service hosting, and other services for us. These third parties may have access to or process data/information collected by us as part of providing their contracted services to us. Useberry complies with applicable Data Protection legislation and cooperates with reliable cloud hosting service providers. Useberry cooperates with such cloud hosting providers who are located within the EU (and therefore are obliged to comply with all EU Data Protection Laws and Regulations).

We use all the data you provide us only for the purposes for which it was provided to us in accordance with the present Privacy Policy and all the processing operations in which we engage shall be lawful and compliant with the provisions of the GDPR. In particular, taking into account the nature, scope, context, and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, we have implemented, by design and by default, appropriate technical and organizational measures to ensure and be able to demonstrate that processing is performed in accordance with the GDPR.

We require from all third parties with whom we share your data to agree and warrant that all the processing operations in which they engage shall be lawful and compliant with the provisions of the GDPR (even if not applicable directly by Law to their business) and any further Data Protection Legislation which may be applicable to their business. We also require that they provide, in particular, in terms of expert knowledge, reliability, and resources, sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will meet the requirements of the GDPR (even if not applicable directly by Law to their business) and ensure the protection of the rights of the data subject.

Compliance with data protection

Useberry is GDPR compliant. Useberry takes all necessary actions to protect the rights and safety of minors. By minors, we mean individuals under the age of majority in their residence. We make efforts to exclude minors from any collection of data and therefore we delete any information and data that has come to our attention that is related to minors without any notice. If it comes to your attention anything regarding this issue please contact us immediately.

Useberry processes Personal Data in accordance with the GDPR requirements directly applicable to Useberry’s provision of its services, which came into force on 25 May 2018. In particular, Useberry processes personal data only in accordance with GDPR data protection principles and GDPR data protection provisions. Useberry also implements appropriate technical and organizational measures and demonstrates compliance and ensures that both in the planning and implementation of processing activities, data protection principles, and appropriate safeguards are addressed and implemented (data protection by design and default).

Your privacy choices and rights

In your capacity as a data subject whose data is collected and processed by Useberry, we inform you that you have the rights provided to you under the GDPR and, in particular, you have (a) the right to withdraw your consent at any time and without detriment, without affecting the lawfulness of processing based on consent before its withdrawal, by notifying such withdrawal to us via email with the subject “Data processing consent withdrawal” at the following email address contact@useberry.com; (b) the right to request from Useberry to process with the erasure of metadata.

Changes and updates to this policy

Useberry reserves the right to modify the terms and conditions of the present policy or alter or end its services at any time at its sole discretion. You are responsible for ensuring that you will regularly review the present privacy policy. If you choose to continue participating in Studies after any modifications to the present terms are made, you will be considered to have fully and unconditionally accepted the aforementioned modifications to this policy. Changes to this privacy policy are effective when they are posted on this page.

Please contact us with any questions or comments about this Policy by email: contact@useberry.com

 

Last Updated: 15 October 2021