Privacy Policy
Last updated 28 September 2026
1. Who we are
Researchely ("we", "us") is the data controller for the personal data described in this policy. This policy explains how we handle personal data in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR.
2. What data we collect
We collect only what we need to provide the service: the business email address you enter when requesting an introduction, the research brief inputs (case data) you provide, and the identity of the agency you asked to be introduced to. We do not require any special-category data.
3. AI Processing & Data Handling
Your research brief data is processed by third-party AI models (primarily OpenAI) to analyze your requirements and generate agency matches. This data is processed in real-time. Our configuration ensures your data is not used by these providers to train their models. Briefs associated with introduction requests are stored in our secure database for up to 12 months before being anonymized, unless a deletion request is received earlier.
4. Why we process it (lawful basis)
We process your email and brief data on the basis of your explicit consent (Art. 6(1)(a) GDPR), given via the checkbox in the introduction request. The purpose is strictly limited to generating matches, sharing your brief with your chosen agency, and facilitating that introduction. We do not sell your data or use it for unrelated marketing.
5. Data minimisation & retention
We keep the minimum data required to fulfil the introduction and retain it only for as long as necessary for that purpose (as detailed in Section 3), after which it is deleted or anonymised. Consent receipts are retained where required to demonstrate lawful processing.
6. Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Because we rely on consent, you can withdraw it at any time without affecting prior lawful processing. To exercise any right, contact privacy@researchely.example.
7. International transfers & processors
Where data is processed by service providers (for example, hosting, AI infrastructure, and email delivery), we use providers that offer appropriate safeguards such as Standard Contractual Clauses for any transfers outside the EEA/UK.
8. Contact
Questions or complaints? Contact privacy@researchely.example. You also have the right to lodge a complaint with your local data protection authority.