Privacy Policy
Last updated: March 2026
OpenScouter Ltd (“we”, “us”, “our”) is committed to protecting your personal information. This policy explains what data we collect, how we use it, your rights under applicable law, and how to contact us.
Who This Policy Covers
This policy applies to all users of the OpenScouter platform, including businesses that commission accessibility studies and testers who participate in those studies.
Data We Collect
Account Data
When you create an account, we collect your name, email address, and authentication credentials. Businesses also provide company name, billing address, and VAT number where applicable.
Profile Data
Testers voluntarily provide information about their disability, neurodivergent condition, and assistive technology use. This information is used to match testers to appropriate studies. Providing it is optional, but studies may require specific profiles.
Study Activity Data
We record notes, ratings, timestamps, and any attachments submitted during a study. This data forms the basis of the accessibility report delivered to the business.
Usage Data
We collect standard server logs including IP addresses, request paths, timestamps, and HTTP status codes. This data is used for security monitoring, debugging, and capacity planning.
Payment Data
Payout information for testers (bank account details or Stripe Connect identifiers) is processed by Stripe. We do not store full payment credentials on our servers.
Special Category Data
Disability and neurodivergent condition data is special category data under Article 9 of the UK GDPR and EU GDPR. We process this data on the basis of explicit consent, which you provide during onboarding.
You may withdraw consent at any time. If you do, we will remove your special category data from your profile. You may continue using the platform, but you will not be matched to studies that require a specific profile.
We treat this data with additional care. Access is restricted to systems and staff who need it to operate the matching process.
How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Operating the platform and delivering studies | Contract performance |
| Matching testers to studies | Explicit consent (special category data) |
| Processing payouts to testers | Contract performance |
| Sending transactional notifications | Legitimate interests |
| Security monitoring and fraud prevention | Legitimate interests |
| Improving the platform | Legitimate interests |
| Complying with legal obligations | Legal obligation |
We do not sell your data. We do not use your data for advertising.
Cookies
This documentation site does not set any cookies. It is a static site with no tracking, analytics, or session management.
The main OpenScouter application sets only strictly necessary cookies required for authentication. It does not use advertising cookies or third-party tracking cookies.
Third-Party Services
We use the following third-party services, each of which processes personal data as a sub-processor:
- Vercel. Hosting and infrastructure. Data is processed in EU and US regions. Privacy policy.
- Stripe. Payment and payout processing. Privacy policy.
- OpenAI. AI analysis of study notes to generate accessibility reports. Input data is not used to train OpenAI models under our enterprise agreement. Privacy policy.
- Anthropic. AI analysis and report generation via the Claude model family. Input data is not used for model training under our usage agreement. Privacy policy.
- Google (Gemini). AI analysis and report generation via the Gemini model family. Input data is not used for model training under our API terms. Privacy policy.
- Telegram. Optional notifications delivered via the Telegram messaging platform. Privacy policy.
Data Transfers
Some sub-processors operate outside the UK and EU. Where we transfer personal data internationally, we rely on standard contractual clauses (SCCs) approved by the European Commission or the UK ICO’s International Data Transfer Agreement (IDTA).
Your Rights
Under UK GDPR and EU GDPR, you have the right to:
- Access a copy of the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data (subject to legal retention obligations).
- Restrict processing while a complaint is under review.
- Port your data in a machine-readable format.
- Object to processing based on legitimate interests.
- Withdraw consent at any time for processing based on consent.
To exercise any of these rights, contact us at privacy@openscouter.com. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or the supervisory authority in your EU member state.
Contact
Data Controller: OpenScouter Ltd
Email: privacy@openscouter.com
Postal address: Available on request.
For sub-processor details and data processing agreements, see the Data Processing page.