Who is responsible
Scrutinizr helps businesses find out why visitors and customers drop off, using a website tag (Pulse), surveys, interviews and reviews by independent experts. It also runs an expert network where professionals apply to review that work. The operator’s public details appear below.
The operator’s contact email has not yet been supplied for this preview.
The operator decides how account, billing and expert network information is used. When a business uses Scrutinizr to collect information about its own website visitors, customers or survey respondents, that business is responsible for it, and Scrutinizr processes it on the business’s instructions. That requires an agreed data-processing arrangement before live use.
Information we handle
Account holders. Name, email address, account identifier and session information from the sign-in service. We do not receive your Google password. Workspaces can contain tests, forms, findings, tasks, uploaded documents, datasets and questions sent to the AI assistant.
Visitors to a website that uses Pulse. When a business adds the Pulse tag to its site, the tag records page paths, campaign tags (UTM values), the referring website’s domain, clicks (including up to 40 characters of the clicked element’s text), repeated or unresponsive clicks, script errors, scroll depth, page performance and conversion goals. If a visitor leaves a form, the tag records which field they stopped at, never what they typed, and it ignores password and hidden fields. Visitors may also answer a short question the business has set up, and that answer is stored. Pulse stores a random session ID in the browser’s session storage, which clears when the tab closes, and sets no cookies. It does not run when the browser sends a Do Not Track or Global Privacy Control signal. Scrutinizr does not store visitor IP addresses, although hosting providers may keep them briefly in security logs.
Survey and interview respondents. Answers, including replies to AI follow-up questions, and an email address where a test requires verification. Respondents should share only what the question asks for.
Experts. The profile you create: name, headline, biography, skills, years of experience, location, availability and an optional website. It appears in the public directory only if you choose to be listed. When you apply for a review, a snapshot of your profile is shared with that business. To receive payments you onboard with Stripe, which collects your identity and bank details. We store only your Stripe account reference and payout status.
Payments. Stripe processes card and payout details. We store subscription status, plan, usage allowances, orders, and for expert places the amounts charged, held, paid or refunded.
How information is used
To provide the features you request: measuring where visitors struggle, collecting and analysing responses, matching experts to reviews, holding and releasing expert payments, preparing reports, and answering AI assistant questions. Account and usage information supports sign-in, access control and subscription administration.
We send transactional emails about your activity: verification codes, application updates, completed reviews, approvals, payments and refunds. We do not send marketing email from the product.
For the operator’s own processing, the intended lawful bases are providing contracted services, legal obligations for financial records, and legitimate interests in account security and service reliability. Any optional processing that requires consent needs a separate choice. These bases and the final operating arrangements must be confirmed before commercial use.
If you add Pulse or run a survey
You are responsible for telling your visitors and respondents about Scrutinizr in your own privacy notice, and for getting consent where the law requires it, for example under cookie and similar-technology rules. Do not use Pulse questions or surveys to collect special-category information, such as health data, or information about children, unless you have a lawful basis and appropriate safeguards.
Removing a site from your workspace deletes its Pulse events.
Demo data and browser storage
The demo workspace uses fictional records saved in this browser’s local storage. Resetting the demo or clearing site storage removes them. Signed-in use relies on session cookies from the sign-in service. The public site loads fonts from Google Fonts, so your browser may contact Google. A demo checkout does not collect a card or charge money.
Service providers
When configured, the service uses Neon for sign-in and the database, Stripe for subscriptions, checkout and expert payouts, Resend for email, a private object-storage service for documents, and OpenAI or Azure for AI features. An optional document service may extract text from uploaded files. Integrations you connect yourself, through Nango or webhooks, receive or send only what you set up.
The final provider list, processing locations, provider retention and any international-transfer arrangements must be verified for the live deployment.
Retention and deletion
Signed-in records remain in storage until deleted or otherwise handled by the operator. The current version has no automatic account-wide deletion schedule. Pulse events are deleted when the site is removed. Payment and refund records are kept as long as financial-record obligations require. An expert’s application stays with the research it relates to, so the business can show who reviewed its work.
The live retention policy must say how account closure, backups and required billing records are handled. Ask the operator to remove retained copies; workspace settings do not override your data-protection rights.
Security and human decisions
Server routes check that the signed-in account owns or may access each record. Provider secrets stay on the server, and private document downloads use short-lived links. Payment changes are recorded once, even if a request is retried.
AI suggestions and expert reviews help people decide; they are not automatic decisions. Scrutinizr does not use them to make solely automated decisions with legal or similarly significant effects on individuals.
Your rights and questions
Depending on the circumstances, you may have rights to access, correct, erase, restrict or transfer your information, and to object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it.
If a business collected your information through Scrutinizr, as a website visitor or respondent, contact that business first. Otherwise, contact the operator:
The operator’s contact email has not yet been supplied for this preview.
You can also raise a concern with the Information Commissioner’s Office.
Changes to this notice
Updates will appear on this page with a revised date. Changes to providers, data use or retention require an updated notice, and material changes should be communicated to affected customers before they take effect.