Privacy and data protection.

Peekator Ltd ("Peekator", "we", "us") provides a research platform that combines surveys, AI interviews and analysis tools. This Privacy Policy explains what information we collect when you use our website and platform, how we use it, and the choices you have. It applies to customers, respondents, and visitors.

We act as a data controller for information collected about our customers and website visitors, and as a data processor for respondent data that our customers collect through Peekator.

Account information

When you create an account we collect your name, email address, organisation, role, and authentication credentials. Billing information is collected by our payment processor and we do not store full card details.

Usage data

We collect information about how you interact with the platform, including pages viewed, features used, timestamps, device and browser information, and approximate location derived from IP address.

Research content

When you use Peekator to design surveys, run AI interviews, or analyse results, we process the questionnaires, prompts, files, and responses you submit on behalf of your respondents.

Cookies

We use a small number of strictly necessary cookies to keep you signed in and remember preferences, and analytics cookies to understand product usage. You can manage cookies through your browser at any time.

We use the information we collect to:

• Provide, maintain and improve the Peekator platform.
• Authenticate users and protect accounts.
• Process payments and manage subscriptions.
• Communicate product updates, security notices and support.
• Detect, investigate and prevent abuse or security incidents.
• Comply with legal obligations.

Our legal bases under the UK GDPR include performance of a contract, legitimate interests, consent (where required) and compliance with legal obligations.

How AI interviews work

AI interviews are dynamic conversations conducted between a respondent and Peekator's AI moderator, guided by a discussion outline configured by the research team. The moderator asks follow-up questions in real time based on each answer.

Recording

Text-based AI interviews capture written responses only. For voice or video interviews, participants are informed before the session begins and must provide explicit consent before any recording starts. Participants can end the session at any time.

Transcripts and processing

Voice recordings are converted into text transcripts using speech-to-text providers acting as sub-processors under contractual confidentiality obligations. Transcripts and any associated metadata are returned to the customer's project workspace and used to generate analysis, summaries and themes.

Storage

Interview content is stored encrypted at rest within our hosting infrastructure and is accessible only to the customer's authorised workspace members and to Peekator personnel strictly for support, security or legal purposes.

AI model training

Customer data, respondent answers, interview transcripts and uploaded files are never used to train foundation models, our own models, or those of our AI sub-processors. Prompts and responses sent to third-party model providers are processed under zero-retention or no-training agreements.

We retain personal data only for as long as necessary to provide the service and meet legal obligations. Account data is kept for the lifetime of the account and deleted within 90 days of account closure. Research content is retained according to the customer's project settings; customers can delete projects and responses at any time. Backups are rotated on a 30-day cycle.

We do not sell personal data. We share data only with sub-processors that help us operate the platform — including cloud hosting, email delivery, payment processing, analytics and AI model providers — under written data processing agreements. A current list of sub-processors is available on request.

We may disclose information if required by law, to enforce our terms, or to protect the rights, property or safety of Peekator, our users or others.

Peekator is based in the United Kingdom and primarily hosts data in the UK and the European Economic Area. Where data is transferred outside these regions, we rely on UK International Data Transfer Agreements, Standard Contractual Clauses, or adequacy decisions to ensure an equivalent level of protection.

We apply industry-standard technical and organisational measures to protect personal data, including encryption in transit (TLS 1.2+) and at rest, role-based access control, principle of least privilege, audit logging, regular vulnerability scanning, and staff security training. No method of transmission or storage is fully secure, but we work continuously to maintain a strong security posture.

Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at the address below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.