Privacy Policy
This policy explains what personal data the userexplorer.com service processes, why, for how long and what rights you have. It covers our customers and visitors of our website, and the data our customers record about their own users, where we act as a processor.
Last updated October 11, 2026
Who is responsible for your data
The controller of personal data of our customers and website visitors is the administrator of the userexplorer.com service. You can reach us about any privacy matter at [email protected].
When our customers install the UserExplorer recording snippet on their own websites or apps, each customer is the controller of the data recorded about its users, and we process that data on the customer's behalf as a processor under our Data Processing Agreement.
Data we process about our customers
We process the following data about people who create an account or buy a plan:
- Account data, such as name, email address, password stored as a secure hash, team membership and roles.
- Billing data, such as plan, billing period, invoices and payment status. Card details are entered directly with our payment operator and are not stored by us.
- Usage data, such as sign-in times, projects created, features used, plan limits consumed and support messages you send us.
- Technical data needed to run the service securely, such as IP address, browser type and security logs.
We use this data to provide the service, take payments, send service emails such as sign-in codes and receipts, prevent abuse, and meet legal and accounting duties. The legal bases are performance of a contract, our legitimate interest in running and securing the service, and legal obligations.
Data our customers record about their users
Customers decide what UserExplorer records on their sites. Depending on their setup this can include page views, clicks, scrolls, device and browser data, events their product sends, survey answers, AI interview replies and user identifiers they choose to send.
Inputs and sensitive text are masked by default, so typed values do not leave the visitor's browser. Customers may not use the service to record special category data such as health, religion or political opinions. Recording can be set to start only after the consent signal from the customer's own consent banner, and the customer is responsible for informing its users and obtaining consent where required.
If you are a visitor of a customer's website and want to exercise your rights, please contact that website first. We will help the customer respond.
Who receives the data
We share personal data only with service providers that help us run UserExplorer, bound by data processing terms. We do not name individual providers in this policy, the categories are:
- Hosting provider, in the EU or the US depending on the region chosen for a project.
- Payment operator that processes subscriptions and card payments.
- Email delivery provider for service emails such as sign-in codes and receipts.
- AI model provider that processes session data for paid AI features, only when a customer uses those features.
We may also disclose data where the law requires it. We never sell personal data and we do not share it for advertising.
International transfers
Customers on Scale and Enterprise plans choose EU or US hosting for their projects. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep data
- Account data is kept while the account is active and deleted or anonymised after the account is closed, except where we must keep it longer.
- Billing records and invoices are kept for the period required by tax and accounting law.
- Recorded session data is kept for the retention period of the customer's plan and project settings, and deleted when the customer deletes it or closes the account.
- Security logs are kept for a limited time needed to detect and investigate abuse.
Your rights under GDPR
You have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with a data protection supervisory authority.
To use your rights, write to [email protected] from the email address linked to your account. We reply by email.
Cookies on our website
The userexplorer.com website uses only essential cookies: a session cookie that keeps you signed in and a security token that protects forms (CSRF). We do not use tracking or advertising cookies, so no cookie banner is needed. Details are in our Cookie Policy.
Security
We protect data with encryption in transit, access controls, role based permissions, masking by default and regular review of access. More detail is on our privacy and security page.
Changes to this policy
We may update this policy when the service or the law changes. The date at the top shows the latest version. Material changes are announced to customers by email.