This Privacy Policy explains how UsersArabia ("we", "us") collects, uses and protects personal data when you use our website, platform and services (the "Services").
1. Data we collect
- Account data: name and email address used to sign in.
- Researcher data: study details, screener questions, and content you create on the platform.
- Participant data: profile details (such as where you live, your work and your household), a history of changes to them, application answers, availability, screening responses, and (for booked sessions) scheduling details.
- Response behaviour: when you answer screeners and surveys on our platform, we record how you answer rather than what you type: time spent on each question, whether text was pasted, the rhythm of typing (timing only) and switching away from the page. We use this to check response quality, and researchers see a quality score for your responses. We never record what you type keystroke by keystroke.
- Identity verification data (optional): if you choose to verify your identity, our verification provider checks a photo of your ID document and analyses your IP address and device during the check. We keep only the result, your document type, issuing country, nationality and year of birth, the country and type of connection you verified from (for example, whether it was a VPN), and a coded version of your document number that cannot be turned back into the number. We never receive or store your ID images.
- Session data: for premium in-app calls, recordings, transcripts and AI-generated insights where enabled by the researcher.
- Usage data: basic technical and usage information to operate and improve the Services.
2. How we use data
- To provide the Services: recruiting, screening, scheduling and paying participants.
- To match researchers with suitable participants.
- To process payments, credits and participant incentives.
- To communicate with you about your account, studies and updates.
- To keep our participant panel trustworthy: verifying identity, detecting duplicate or fraudulent accounts, and reviewing suspicious activity.
- To secure, maintain and improve the Services.
3. Identity verification and fraud prevention
Identity verification is optional for participants and never affects whether you can apply to a study. It is carried out by our verification provider, Didit, which checks your ID document and the connection you verify from. Verified participants get a badge that researchers can see, together with the nationality shown on the document. Researchers do not see your document or any of its other details.
We use the coded document number only to make sure one ID document is verified on one account. We also compare the answers you give in study screeners with your profile, your earlier answers and (if you verified) your ID, so we can spot answers given only to qualify for a study. If something suggests an account may be a duplicate or fraudulent, such as the same document being used on two accounts, a member of our team reviews it. We do not remove anyone from the platform based on an automated decision alone.
4. Legal bases
We process personal data to perform our contract with you, with your consent (for example, newsletter sign-ups, research participation and identity verification), to comply with legal obligations, and for our legitimate interests in operating the Services and preventing fraud.
5. Sharing
We share data with service providers who help us run the platform (for example, our hosting, database, email, video-calling and payment providers), and with researchers and participants strictly as needed to run a study. We do not sell your personal data.
6. Sub-processors
We use trusted third parties including our cloud database and authentication provider, our payment processor, our video-calling and transcription providers, our identity verification provider (Didit), and our email providers. Each processes data only on our instructions.
7. Data retention
We keep personal data for as long as needed to provide the Services and meet legal obligations, then delete or anonymise it. Identity verification results are kept while your account is open. ID images are held by our verification provider, not by us. You can request deletion of your account at any time.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to withdraw consent. To exercise these rights, contact us using the details below.
9. Security
We use appropriate technical and organisational measures, including access controls and row-level security, to protect personal data. No method of transmission or storage is completely secure.
10. International transfers
Some providers may process data outside your country. Where they do, we rely on appropriate safeguards for such transfers.
11. Changes
We may update this policy from time to time. Material changes will be notified via the site or email.
12. Contact
For privacy questions or requests, email hello@usersarabia.com.