Privacy Policy
1. Introduction
Cursory Technologies ("Cursory," "we," "us," or "our") is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us.
This Privacy Policy explains how we collect, use, process, store, disclose, and protect personal information when individuals interact with our websites, applications, products, platforms, and services.
Our services include, but are not limited to:
- Brisk® Quant: AI-powered quantitative research, questionnaire creation, survey programming, data validation, data quality management, tabulation, and reporting.
- Brisk® Qual: Qualitative research, participant recruitment, interviews, focus groups, and related research activities.
- Brisk® Sample Marketplace: Online research participant sourcing, panel integrations, sample management, and related services.
- Brisk® Social Intelligence: Social listening, online news monitoring, sentiment analysis, brand monitoring, and market intelligence.
- Brisk® AI Automation: AI-powered research workflows, content processing, translation, and analytics.
- Managed Research Services: Research operations, consulting, survey programming, sampling, data processing, and analytics.
This policy applies to visitors, registered users, clients, prospective clients, research participants, and other individuals whose personal information we process.
For services provided on behalf of business clients, Cursory may act as a data processor or service provider, while the client acts as the data controller or business responsible for determining the purposes and means of processing.
2. Information We Collect
Depending on how individuals interact with our services, we may collect the following categories of information.
2.1 Personal and Contact Information
- Full name
- Business email address
- Telephone number
- Company name
- Job title and professional information
- Country and geographic location
- Account registration details
- Business correspondence and inquiries
2.2 Account and Platform Information
When users register for or access our platforms, we may collect:
- Account identifiers and usernames
- Authentication and access information
- Subscription and billing information
- Platform usage history
- Project and workflow information
- User preferences and settings
- Support requests and communications
Passwords and authentication credentials are handled using applicable security controls.
2.3 Research and Survey Information
When providing research services, we may process:
- Survey responses and questionnaire data
- Demographic and professional information
- Research participation and eligibility information
- Survey completion status
- Participant identifiers
- Research-related audio, video, or text responses
- Qualitative interview and focus group materials
- Other information supplied by clients or participants
The specific information processed depends on the research project, its objectives, and the instructions provided by the relevant client.
Some research projects may involve sensitive personal information. Such information is processed only where an appropriate legal basis and applicable safeguards are in place.
2.4 Technical and Usage Information
We may automatically collect certain technical information, including:
- IP address
- Browser type and version
- Device type and operating system
- Website pages visited
- Access timestamps
- Referral information
- Application activity and error logs
- Cookie identifiers and similar technical identifiers
We use this information for platform operation, security, troubleshooting, analytics, and service improvement.
2.5 Social Media and Publicly Available Information
Our social intelligence services may process information obtained from publicly accessible online sources and authorized third-party data providers, including:
- Public social media posts
- Public comments and discussions
- Publicly available profile information
- Online news articles
- Public reviews and ratings
- Brand mentions and related online conversations
We process this information subject to applicable privacy laws, contractual restrictions, and relevant platform terms.
We do not represent that all publicly accessible information may be used without restriction.
3. How We Use Personal Information
We use personal information for legitimate business and operational purposes, including:
1. Providing and maintaining our products and services.
2. Creating and managing user accounts.
3. Delivering quantitative and qualitative research services.
4. Processing research questionnaires, survey responses, and research data.
5. Supporting participant recruitment and sample management.
6. Providing AI-powered automation and analytics.
7. Delivering technical support and customer service.
8. Managing client relationships, subscriptions, and billing.
9. Improving platform performance, reliability, and security.
10. Detecting fraud, bots, unauthorized activity, and research-quality issues.
11. Sending service-related communications.
12. Conducting marketing activities where permitted by applicable law.
13. Meeting contractual, regulatory, and legal obligations.
14. Establishing, exercising, or defending legal claims.
We do not use personal information for purposes incompatible with the original purpose of collection unless permitted by law or supported by an appropriate legal basis.
4. Legal Basis for Processing
Where the European Union General Data Protection Regulation (GDPR), UK GDPR, or similar privacy legislation applies, we process personal information based on one or more lawful grounds, including:
- Contractual necessity: Processing required to provide contracted services.
- Legitimate interests: Processing necessary for legitimate business purposes, subject to applicable balancing requirements.
- Consent: Processing based on freely given, specific, informed, and unambiguous consent where required.
- Legal obligations: Processing necessary to comply with applicable laws and regulations.
- Other applicable legal grounds: Where permitted under relevant privacy legislation.
Where Cursory processes personal information on behalf of a client, the client is generally responsible for establishing the applicable legal basis and providing required privacy notices.
5. Artificial Intelligence and Automated Processing
Cursory uses artificial intelligence, machine learning, and proprietary automation technologies within the Brisk® platform to support market research workflows.
These technologies may be used for:
- Questionnaire creation and transformation
- Survey programming and logic generation
- Data validation
- Data quality assessment
- Automated translation
- Data tabulation and analytics
- Research content classification
- Sentiment analysis
- Research reporting and summarization
- Workflow optimization
5.1 AI Data Processing
Information submitted to AI-enabled features may be processed by Cursory's systems and authorized technology providers as necessary to deliver the requested functionality.
We apply contractual, organizational, and technical safeguards appropriate to the nature of the information being processed.
5.2 Confidentiality of Client Information
Client research materials, questionnaires, datasets, and other confidential information are treated as confidential in accordance with applicable agreements.
We do not sell confidential client research materials or make them publicly available.
5.3 AI Model Training
The use of client information for AI model training, fine-tuning, or product improvement is governed by applicable client agreements, provider configurations, and disclosed processing practices.
Where required, we obtain appropriate authorization before using personal information for purposes beyond delivering the contracted services.
5.4 Automated Decision-Making
Certain features may automatically assess research data quality, identify suspicious responses, or generate recommendations.
Where applicable law grants individuals rights relating to decisions based solely on automated processing that produce legal or similarly significant effects, we provide or support the required safeguards.
6. Survey Participants and Research Data
Cursory may process personal information collected through surveys, interviews, focus groups, and other research activities.
Where Cursory acts as a processor on behalf of a research client:
- The client determines the purposes of the research and the information required.
- Cursory processes information according to documented client instructions.
- Appropriate technical and organizational safeguards are applied.
- Data access is restricted to authorized personnel and service providers.
- Data retention and deletion are governed by applicable agreements and legal requirements.
Research participants may be directed to the privacy notice of the relevant research sponsor or panel provider for additional information about the research activity.
Where Cursory independently determines the purposes and means of processing, it assumes the corresponding responsibilities under applicable privacy law.
7. Sample Marketplace and Panel Management
Our sample marketplace facilitates research participant sourcing and survey participation through Cursory and authorized panel partners.
Depending on the arrangement, we may process:
- Participant identifiers
- Eligibility and screening information
- Survey participation status
- Completion and termination records
- Fraud prevention signals
- Device and network information
- Quality assessment information
We may use automated technologies to identify duplicate participation, suspicious behavior, bots, and other indicators of poor-quality or fraudulent responses.
We may share limited information with authorized panel providers and research clients as necessary to manage research participation, validate completions, prevent fraud, and fulfill contractual obligations.
8. Cookies and Tracking Technologies
Our website and applications may use cookies and similar technologies to support:
- Essential website functionality
- Authentication and session management
- Security and fraud prevention
- Website performance measurement
- User preferences
- Analytics
- Marketing activities, where applicable
Where required by law, we request consent before placing or accessing non-essential cookies.
Users may manage cookies through their browser settings and any cookie preference tools made available on our website.
Disabling certain cookies may affect website or platform functionality.
9. Information Sharing and Disclosure
We may share personal information with authorized parties where necessary and legally permitted.
These parties may include:
9.1 Technology and Infrastructure Providers
Providers supporting cloud hosting, databases, security, application infrastructure, and platform operations.
9.2 AI and Automation Service Providers
Authorized technology providers supporting AI-enabled features, automated processing, translation, and analytics.
9.3 Research and Panel Partners
Research agencies, panel providers, sample suppliers, and other partners involved in delivering research services.
9.4 Business Service Providers
Providers supporting customer relationship management, billing, communications, analytics, and customer support.
9.5 Legal and Regulatory Authorities
Government agencies, courts, regulators, or other authorized entities where disclosure is legally required.
9.6 Corporate Transactions
Where permitted by law, information may be disclosed in connection with a merger, acquisition, restructuring, financing, or sale of business assets, subject to appropriate safeguards.
We do not sell personal information in exchange for monetary consideration as part of our ordinary business operations.
Certain disclosures may nevertheless be classified as a "sale," "sharing," or targeted advertising under applicable privacy laws, depending on the technologies and processing activities involved. Where applicable, we provide required notices and choices.
10. International Data Transfers
Cursory operates internationally and may process information through authorized infrastructure, employees, affiliates, and service providers located in different countries.
Where personal information is transferred across borders, we implement applicable safeguards, which may include:
- Adequacy decisions recognized by relevant authorities
- Standard Contractual Clauses
- UK International Data Transfer Addenda or Agreements
- Contractual confidentiality and security obligations
- Appropriate technical and organizational controls
- Other legally recognized transfer mechanisms
The location of data storage and processing may depend on the services purchased, applicable client agreements, and infrastructure configurations.
11. Information Security
Cursory maintains an information security management framework designed to protect the confidentiality, integrity, and availability of information.
Cursory Technologies has achieved ISO/IEC 27001:2022 certification for its applicable certified scope.
Our security practices may include:
- Role-based access controls
- Authentication and authorization mechanisms
- Encryption in transit and, where applicable, at rest
- Security monitoring and logging
- Vulnerability management
- Access reviews
- Backup and recovery procedures
- Incident response processes
- Employee confidentiality obligations
- Vendor and third-party risk management
No system or method of electronic transmission can guarantee absolute security. We continuously evaluate and improve our safeguards based on evolving risks and operational requirements.
12. Data Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this policy, including contractual, operational, security, and legal requirements.
Retention periods may depend on:
- The type and sensitivity of information
- Client contractual requirements
- The duration of the business relationship
- Research project requirements
- Applicable legal obligations
- Security and fraud prevention needs
- Dispute resolution and legal claims
Where Cursory acts as a processor, retention and deletion are governed by the relevant client agreement and documented instructions, subject to applicable law.
When information is no longer required, we take appropriate steps to delete, anonymize, or otherwise securely dispose of it.
13. Individual Privacy Rights
Depending on applicable privacy laws and the individual's location, individuals may have rights to:
- Request access to personal information.
- Request correction of inaccurate information.
- Request deletion of personal information.
- Restrict or object to certain processing activities.
- Request portability of personal information.
- Withdraw consent where processing is based on consent.
- Object to certain direct marketing activities.
- Exercise rights relating to qualifying automated decision-making.
- Opt out of certain sales, sharing, or targeted advertising activities where applicable.
- Lodge a complaint with a competent data protection authority.
These rights may be subject to legal limitations and exceptions.
Where Cursory processes information on behalf of a client, requests may need to be directed to the relevant client acting as the data controller.
We will assist clients in responding to valid requests where required by applicable law or contract.
We do not discriminate against individuals for exercising applicable privacy rights.
14. Marketing Communications
We may contact business customers, prospective clients, and registered users regarding:
- Product announcements
- Platform updates
- Webinars and events
- Research industry insights
- Service offerings
- Promotional communications
Where required, we obtain consent before sending marketing communications.
Recipients may opt out of promotional emails by using the unsubscribe instructions provided in those messages or by contacting us.
Service-related communications may continue where necessary to operate accounts and fulfill contractual obligations.
15. Children's Privacy
Our business services are primarily intended for professional users and organizations.
We do not knowingly collect personal information directly from children through our general business website without an appropriate legal basis.
Where research projects involve minors, processing must comply with applicable laws, including parental or guardian consent requirements where necessary.
If we become aware that children's personal information has been collected or processed unlawfully, we will take appropriate corrective action.
16. Third-Party Websites and Integrations
Our website and platforms may contain links to third-party websites, applications, or services.
Our products may also integrate with external research, survey, analytics, and business platforms.
These third parties may operate under their own privacy policies and terms.
Cursory is not responsible for the independent privacy practices of third-party services outside our control.
We encourage users to review the applicable privacy notices before providing information to third parties.
17. Data Breach and Incident Management
Cursory maintains procedures for identifying, investigating, containing, and responding to information security incidents.
Where a personal data breach occurs, we assess the nature and impact of the incident and take appropriate corrective measures.
We notify affected clients, regulators, and individuals where required by applicable laws and contractual obligations.
Where Cursory acts as a processor, it supports the relevant controller in meeting applicable breach notification obligations.
18. Data Protection by Design and Default
We aim to incorporate privacy and information security considerations into the design and operation of our products and services.
Our approach includes, where appropriate:
- Data minimization
- Purpose limitation
- Restricted access
- Confidentiality controls
- Secure development practices
- Privacy risk assessments
- Data quality and integrity controls
- Appropriate retention practices
- Vendor security assessments
- AI governance and risk management
We periodically review these measures to address emerging technologies, regulatory developments, and security risks.
19. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technologies, operational practices, or applicable legal requirements.
When changes are made, we will update the "Last Updated" date at the beginning of this policy.
Where legally required, we will provide additional notice or obtain consent before implementing material changes.
We encourage users to review this page periodically.
20. Contact Information
For questions, concerns, or requests relating to this Privacy Policy or the processing of personal information, please contact:
Cursory Technologies LLC
Registered business address:
8 The Green, Dover, Delaware 19901, United States
Website: https://cursory-tech.com
Privacy inquiries: privacy@cursory-tech.co
Data protection requests: dpo@cursory-tech.com
Where applicable, requests may also be submitted through the relevant client or research sponsor responsible for the processing activity.
We will review and respond to privacy requests in accordance with applicable legal requirements.