Privacy Policy
Effective: July 15, 2026
Last Updated: July 15, 2026
1. Introduction
At Unveil UXR, Corp. ("Unveil," "we," "our," or "us"), we recognize that protecting Personal Information is fundamental to the trust our Customers place in us. Privacy and security are core principles that guide the design, development, and operation of our products and services.
Unveil provides software that enables organizations to automate user research workflows, recruit and manage research participants, and coordinate research operations (the "Services"). In providing the Services, we process Personal Information as described in this Privacy Policy.
Unlike many consumer applications, most of the Personal Information processed through the Services is processed on behalf of our Customers. Our Customers determine what information is collected, why it is collected, and how it is used. We process that information only to provide the Services in accordance with our agreements, our Customers' instructions, and applicable law.
This Privacy Policy explains how we collect, use, disclose, retain, protect, and otherwise process Personal Information, including when we act as a Controller or a Processor and the privacy rights available under applicable law.
This Privacy Policy applies to our Website, our Services, and any interactions you have with Unveil relating to the Services, unless a separate privacy notice expressly applies.
2. Scope
This Privacy Policy applies to Personal Information we process in connection with:
-
visitors to our Website;
-
individuals who contact us or request information about our Services;
-
representatives of current and prospective Customers;
-
authorized users of Customer accounts; and
-
Personal Information processed through the Services on behalf of our Customers.
This Privacy Policy does not apply to:
-
third-party Websites, products, or services that are not owned or controlled by Unveil;
-
Personal Information processed by our Customers outside the Services; or
-
processing activities governed by a separate privacy notice or contractual agreement that expressly supersedes this Privacy Policy.
Where our Website or Services contain links to third-party Websites or services, those third parties are responsible for their own privacy practices. We encourage you to review their privacy policies before providing any Personal Information.
3. Our Role
Depending on the circumstances, Unveil acts either as a Controller (or Business under certain U.S. privacy laws) or as a Processor (or Service Provider under certain U.S. privacy laws).
Where required under Article 27 of the GDPR, Unveil has appointed an EU GDPR Representative to act on its behalf within the European Union in relation to the GDPR. Contact details for our EU GDPR Representative are provided in the "Contact Us" section below.
If We Are the Controller
Unveil acts as the Controller for Personal Information we collect for our own business purposes. This includes information relating to:
-
visitors to our Website;
-
prospective Customers;
-
Customer account administrators and authorized users;
-
business contacts;
-
communications with us; and
-
administration of our Services.
Examples include responding to inquiries, scheduling demonstrations, creating Customer accounts, authenticating users, providing Customer support, maintaining the security of the Services, and communicating with Customers.
If We Are the Processor
Most of the Personal Information processed through the Services is processed on behalf of our Customers.
In these circumstances, Unveil acts as a Processor (or Service Provider), and our Customers remain the Controller (or Business).
Our Customers determine what Personal Information is uploaded to the Services, the purposes for which it is processed, who may access it, how long it is retained, and whether it should be modified or deleted.
Unveil processes Customer Content only to provide and support the Services, maintain the security and availability of the platform, and comply with our contractual obligations, our Customers' documented instructions, and applicable law.
Unless otherwise required by law, Unveil does not determine the purposes for which Customer Content is processed.
Customer Responsibilities
Customers are responsible for ensuring they have the necessary rights and legal basis to provide Personal Information to Unveil through the Services.
4. Information We Collect
The categories of Personal Information we collect depend on how you interact with Unveil and the Services.
Information You Provide Directly
When you contact us, request a demonstration, or otherwise interact with our Website, we may collect the following categories of Personal Information:
Identifiers
-
Name
-
Business email address
-
Telephone number
Communications
-
Information you choose to include in emails, contact forms, or other correspondence with us
Scheduling Information
-
Information provided when booking meetings or demonstrations through Calendly
Customer Accounts
When an organization creates an account, requests access to, or subscribes to the Services, we collect the information necessary to create, administer, and secure Customer accounts.
This may include:
Identifiers
-
Name
-
Business email address
Professional Information
-
Company
-
Job title or role
-
Account permissions
Authentication Information
-
Information necessary to authenticate users and secure access to the Services through our identity management provider
Account Communications
-
Customer support requests
-
Service-related communications
-
Administrative information relating to Customer accounts
Information Processed on Behalf of Our Customers
Customers may upload, import, synchronize, or otherwise make available information through the Services ("Customer Content").
Depending on how a Customer uses the Services, Customer Content may include:
Participant Information: Names, business contact information, company information, and other professional information.
Business Information: CRM or account information, product usage information, and customer-defined attributes and metadata.
Research Information: Research operations information, study participation history, and other information relating to research activities.
Customers may import information into the Services, including through CSV files.
Customers may store hyperlinks to external resources, such as Google Docs or Notion. Unveil stores these hyperlinks as text only and does not retrieve, access, or process the contents of linked resources.
Technical Information
When you access our Website or use the Services, we automatically collect limited technical information necessary to operate, secure, and maintain the Services, including IP address, browser type, operating system, device information, and authentication logs.
We currently do not use analytics or advertising technologies that track individuals across websites for marketing or profiling purposes.
Our Website uses only cookies and similar technologies that are necessary to operate, secure, and maintain the Website and Services.
5. How We Use Personal Information
How we process Personal Information depends on our relationship with you and whether we act as a Controller or a Processor.
If We Are the Controller
Where Unveil acts as the Controller, we process Personal Information to:
-
provide and administer our Website and Services;
-
respond to inquiries, requests, and communications;
-
schedule product demonstrations and meetings;
-
create and manage Customer accounts;
-
authenticate users and secure access to the Services;
-
provide Customer support;
-
communicate regarding product updates, security notifications, and other service-related matters;
-
maintain the security, integrity, and availability of the Services;
-
investigate suspected fraud, misuse, or unauthorized access;
-
comply with legal obligations;
-
enforce our agreements.
Where permitted by applicable law, we may also use Personal Information to evaluate, improve, and develop the Services.
We do not currently use Personal Information collected through our Website for behavioral advertising or cross-context behavioral advertising.
When Unveil Acts as a Processor
Where we process Customer Content on behalf of a Customer, we process Personal Information solely for the purpose of providing the Services in accordance with the applicable Customer agreement, documented Customer instructions, and applicable law.
This includes storing Customer Content, enabling participant recruitment workflows, supporting research operations, maintaining system security, troubleshooting technical issues, and providing Customer support.
Except where required by law, Unveil does not independently determine the purposes for which Customer Content is processed.
Artificial Intelligence Features
Certain features of the Services use artificial intelligence ("AI") to provide and enhance functionality within the Services. AI may process Personal Information only as necessary to provide the applicable functionality of the Services in accordance with our contractual obligations, this Privacy Policy, and applicable law.
Additional information about our use of AI is available in our AI Transparency Policy.
6. How We Share Personal Information
Unveil does not sell Personal Information or Customer Content and does not disclose Personal Information for cross-context behavioral advertising.
We disclose Personal Information only as necessary to provide the Services, operate our business, comply with legal obligations, or protect our rights and legitimate interests.
Service Providers
We engage third-party service providers that assist us in operating our Website and providing the Services.
These providers may perform services relating to cloud hosting, authentication, communications, scheduling, Customer support, security, monitoring, compliance, and other operational business functions.
These providers process Personal Information only as necessary to provide services to Unveil and under appropriate contractual obligations.
A current list of our subprocessors is available through our Trust Center.
Customer-Directed Integrations
Customers may choose to integrate the Services with third-party applications or services.
Where a Customer enables an integration, Personal Information may be shared between the Services and the integrated application in accordance with the Customer's instructions.
Customers are responsible for determining whether to enable such integrations and for evaluating the privacy practices of third-party providers.
Legal and Regulatory Requirements
We may disclose Personal Information where we believe such disclosure is necessary to:
-
comply with applicable law, regulation, legal process, or lawful governmental request;
-
protect the rights, property, or safety of Unveil, our Customers, or others;
-
investigate or prevent fraud, abuse, or security incidents;
-
enforce our agreements; or
-
establish, exercise, or defend legal claims.
Corporate Transactions
If Unveil is involved in a merger, acquisition, financing, corporate reorganization, sale of assets, or similar transaction, Personal Information may be transferred as part of that transaction, subject to appropriate confidentiality obligations and applicable law.
Where required by law, we will provide appropriate notice of such a transfer.
Aggregated and De-identified Information
We may generate aggregated, anonymized, or de-identified information that cannot reasonably identify an individual and use such information for lawful business purposes, including improving the Services and developing new features.
7. International Data Transfers
Unveil is headquartered in the United States, and the Services are hosted in the United States. As a result, Personal Information may be transferred to and processed in the United States. Where required by applicable law, we implement appropriate safeguards for such transfers.
8. Data Retention
We retain Personal Information only for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce our agreements, and protect our legal rights.
Where Unveil processes Customer Content on behalf of a Customer, we retain such information in accordance with our contractual obligations and the Customer's documented instructions, unless a longer retention period is required or permitted by applicable law.
When Personal Information is no longer required, we will securely delete or anonymize it where reasonably practicable. If immediate deletion is not feasible, such as where information is stored in secure backup archives, we will securely isolate the information from further processing until deletion becomes practicable.
9. Security
Protecting Personal Information is fundamental to the way we design and operate our Services. We maintain administrative, technical, and organizational safeguards designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Our security measures include access controls, encryption, authentication, monitoring, vulnerability management, secure software development practices, and incident response procedures.
No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect Personal Information using commercially reasonable safeguards, we cannot guarantee absolute security.
Additional information about our security practices is available through our Trust Center.
10. Cookies and Similar Technologies
We use essential cookies and similar technologies necessary for the operation, security, and functionality of our Website and Services.
These technologies help us maintain secure sessions, authenticate users, remember necessary preferences, and protect the security and integrity of the Website and Services.
We do not currently use cookies for behavioral advertising, cross-context behavioral advertising, or Website analytics.
If we introduce additional categories of cookies in the future, we will update this Privacy Policy and, where required by applicable law, obtain any necessary consent before using non-essential cookies.
11. Your Privacy Rights
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to, or request a copy of your Personal Information, withdraw consent where applicable, and lodge a complaint with a supervisory authority.
Exercising Your Rights
If you wish to exercise your privacy rights relating to Personal Information for which Unveil acts as the Controller, you may contact us using the contact information provided below.
To help protect your privacy and the security of Personal Information, we may request information necessary to verify your identity before responding to your request.
We will respond to verified requests within the timeframes required by applicable law.
Customer Content
Where Unveil processes Personal Information on behalf of a Customer through the Services, Unveil generally acts as a Processor (or Service Provider).
If your request relates to Personal Information processed by Unveil on behalf of one of our Customers, please contact that Customer directly. Where appropriate and consistent with our contractual obligations, Unveil will assist our Customers in responding to such requests where required by applicable law.
California Residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").
Unveil does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising as those terms are defined under the CCPA.
European Economic Area and United Kingdom
Individuals located in the European Economic Area ("EEA") or the United Kingdom ("UK") may also have the right to lodge a complaint with their local data protection authority.
12. Children's Privacy
Our Website and Services are intended for business users and are not directed to children.
We do not knowingly collect Personal Information directly from children. If we become aware that we have inadvertently collected Personal Information from a child in violation of applicable law, we will take reasonable steps to delete such information.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, our privacy practices, or applicable law.
If we make material changes, we will update the "Last Updated" date at the beginning of this Privacy Policy and provide additional notice where required by applicable law.
We encourage you to review this Privacy Policy periodically to remain informed about how we protect Personal Information.
14. Contact Us
If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, you may contact us at:
Unveil UXR, Corp.
1111B S Governors Ave STE 34946
Dover, DE 19904
United States
Email: privacy@joinunveil.com
Individuals in the European Economic Area may contact our EU GDPR Representative regarding matters relating to the processing of their personal data under the GDPR.
Our EU GDPR Representative is:
Rickert Rechtsanwaltsgesellschaft mbH
– Unveil UXR, Corp. –
Colmantstraße 15
53115 Bonn
Germany