Privacy Policy

Last updated: 21 May 2026

Get User Insights is a trading name of On-Off Group UK Ltd ("we", "us", "our"). We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR). This policy explains what data we collect, how we use it, who we share it with, and your rights under GDPR and applicable data protection law.

1. Who we are

On-Off Group UK Ltd (trading as Get User Insights) operates the platform at getuserinsights.com. On-Off Group UK Ltd is the data controller for information collected from our clients, website visitors, and registered testers.

For questions about this policy or to exercise your rights, contact us at info@getuserinsights.com.

2. Data we collect and why

Account holders (clients)

• Name, email, company — to create and manage your account (contract performance)
• Billing information — processed by Stripe; we store only a Stripe customer ID (contract performance)
• Usage data — pages visited, features used, to improve the platform (legitimate interests)

Testers

• Profile data — name, email, demographics (age, country, employment, tech experience) — to match you to relevant tests (contract performance)
• Screen recordings and audio — captured during test sessions with your explicit consent, used for usability analysis
• Transcripts — generated from your recordings by automated speech recognition, used for AI-assisted analysis

Research session participants (Insights feature)

When clients upload interview recordings or transcripts via our Insights feature, they are the data controller for that content and we act as a data processor on their behalf. Participants should refer to the privacy policy of the organisation that conducted the research.

Website visitors

• Analytics cookies — only with your consent (see section 6)
• Feedback widget responses — if you respond to a Pulse widget on a client's site, responses are stored on behalf of that client

3. Sub-processors

We use the following third-party services that may process personal data on our behalf. All are subject to data processing agreements and appropriate international transfer safeguards.

Processor	Purpose	Transfer basis
Google LLC Gemini AI, Google Analytics	AI analysis of transcripts; website analytics (analytics only with consent)	EU–US Data Privacy Framework
Stripe, Inc.	Payment processing and subscription management	EU–US Data Privacy Framework + SCCs
Resend	Transactional email delivery	Standard Contractual Clauses
Cloudflare, Inc.	CDN, DDoS protection, CAPTCHA (Turnstile)	EU–US Data Privacy Framework

4. Data retention

• Test recordings, transcripts, and reports — deleted 6 months after test completion
• Insights session recordings and transcripts — deleted 6 months after upload, unless the client deletes them sooner
• Account data — retained for the life of your account and deleted within 30 days of account closure
• Financial records — retained for 7 years as required by applicable tax law
• Analytics data — retained for 14 months in Google Analytics (Google's default)

5. Your rights under GDPR

If you are located in the European Economic Area (EEA) or UK, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten"). You can also delete your account directly from your account settings
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to limit how we use your data while a dispute is resolved
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent (e.g. analytics cookies), you may withdraw it at any time without affecting prior processing

To exercise any right, email info@getuserinsights.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

6. Cookies

We use two categories of cookies:

• Strictly necessary — session cookies required for login and security (no consent needed)
• Analytics — Google Analytics, to understand how visitors use the site. These are only set after you give consent via the banner on your first visit. You can change your preference at any time by clearing your browser's local storage or contacting us.

7. Security

All data is transmitted over TLS (HTTPS). Passwords are hashed and never stored in plain text. Access to production data is restricted to authorised personnel. We conduct regular security reviews.

8. Children

Our platform is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have done so inadvertently, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. For material changes we will notify account holders by email.

10. Contact

On-Off Group UK Ltd (trading as Get User Insights)
Two Hoots, Church Road, Kirkbride, CA7 5HY, United Kingdom
info@getuserinsights.com