PRIVACY POLICY
Analytix Labs Ltd, trading as UserSearch · Effective 21 September 2026 · Applies to usersearch.com, usersearch.ai, usersearch.org and usersearch.io
Privacy at a glance
- Who we are. UserSearch is operated by Analytix Labs Ltd, a company registered in England and Wales.
- What we collect. Your account details, your subscription and billing record, the searches and cases you create, your API usage, anything you write to us, and standard technical information about your visit.
- Card details. We never see or store your full card number. Payments are handled by Stripe.
- Your searches. We record that a search ran, its Search type and its Credit cost, so that we can bill it — never the terms you search for. Most processing happens in memory, and nothing is retained unless you choose to save a result.
- Encryption. Results in the web application are encrypted with a key held in your browser rather than by us. Saved bookmarks are encrypted, and you can add a password of your own that we never see.
- Who we share it with. Five named suppliers, our professional advisers, and authorities where the law requires it. We do not sell your data and we run no advertising cookies.
- How long we keep it. Section 10 gives a period against each type of data.
- Your rights. You can see your data, correct it, delete it, take it elsewhere, object to how we use it, and complain to the Information Commissioner's Office.
- If you appear in results. Section 14 explains what we hold, what we can remove, and how to ask.
This summary is here to make the policy easier to read. The full text below is the version that applies.
1. Who we are
1.1 This website and the UserSearch services are operated by Analytix Labs Ltd, a company registered in England and Wales under company number 14275466, whose registered office is at Second Floor, Avalon House, 5–7 Cathedral Road, Cardiff CF11 9HA. Analytix Labs Ltd trades as UserSearch. In this policy, "UserSearch", "we", "us" and "our" mean Analytix Labs Ltd.
1.2 We are registered with the UK Information Commissioner's Office.
1.3 For anything to do with privacy, including exercising the rights in section 12, contact us at [email protected].
2. What this policy covers
2.1 This policy applies to:
a. usersearch.com and its subdomains;
b. usersearch.ai and its subdomains, including your UserSearch account and the UserSearch application;
c. usersearch.org and usersearch.io;
d. the UserSearch API, including OneQuery; and
e. any UserSearch tool you download from us, unless that tool carries its own notice.
2.2 It replaces every privacy policy previously published on those sites. Where an older version is still reachable, this one applies.
2.3 It does not cover other companies' websites that we link to. Read their policies before using them.
2.4 Read this policy alongside our Terms of Service, which set out what UserSearch may and may not be used for.
3. Our role
3.1 For the personal data of our customers and visitors — your account, your billing, your support requests, and how our websites are used — Analytix Labs Ltd is the data controller. We decide what is collected and why. Sections 5 to 13 describe that.
3.2 For the search service itself, we act as a data processor on behalf of the customer who runs the search. The customer decides what to search for and why. As controller, the customer is responsible for having a lawful basis for the search and for informing the people concerned where the law requires it.
3.3 Our Data Processing Agreement governs that relationship. It applies automatically when a customer accepts our Terms of Service.
3.4 We also process data about how the service is used — billing, account management, support, security, and product development — for our own purposes. We are the controller for that, and this policy describes it.
4. The two groups of people this policy is written for
4.1 Customers and visitors. People who visit our sites, open an account, subscribe, use the API or contact us. Sections 5 to 13 are about you.
4.2 People who appear in search results. UserSearch queries third-party data sources and publicly available sources. Results can contain personal data about people who are not our customers. Section 14 is about you, and the rights in section 12 are yours too.
5. What we collect about customers and visitors
5.1 Depending on how you use UserSearch, we collect:
Account data — your name, email address, username, password (which we store only in encrypted form), and your account settings.
Subscription and billing data — your plan, billing period, invoice history, and a partial record of the payment card used, being the card type and the last four digits. We never receive or store your full card number. Card details go directly to Stripe, our payment processor.
Search and case data — a record of each search you run: when it ran, which Search type was used, and the Credits it cost. We keep this, tied to your account, in order to manage your billing. We do not record the terms you search for. We also hold the cases and reports you build, including any results you choose to save into them. Cases are private by default, and a saved result may itself contain the identifier that produced it, stored and encrypted as described in section 9.
API data — your API keys, the number and timing of calls, and which Search types were called.
Correspondence — emails you send us, contact form submissions and the subject you select, and support tickets.
Technical and usage data, collected automatically — your IP address, browser type and version, operating system, device type, the referring page, the pages you visit, and the dates, times and frequency of your visits.
Marketing preferences — your opt-ins, opt-outs and unsubscribes.
5.2 We do not ask customers for special category data — information about health, race or ethnicity, religion, political opinions, trade union membership, sex life or sexual orientation, or genetic or biometric data — and you should not send it to us.
5.3 We collect this data directly from you, automatically as you use the sites, and from Stripe when you subscribe or renew.
6. Why we use it, and our legal grounds
6.1 We use your data only for the purposes below, on the legal ground shown:
a. To open and run your account, return your search results, build your cases and provide the API — performance of our contract with you.
b. To take payment, issue invoices and manage renewals — performance of our contract with you.
c. To keep accounting and tax records — compliance with a legal obligation.
d. To keep the service secure, prevent misuse and detect fraudulent sign-ups — our legitimate interests in protecting the service and our customers.
e. To understand how the sites are used and improve them — our legitimate interests in running and improving the service.
f. To send you service emails you cannot opt out of while you hold an account — password resets, payment successes and failures, security notices and material changes to the service — performance of our contract with you.
g. To send existing customers occasional emails about UserSearch products similar to the ones they already use — our legitimate interests, on a soft opt-in basis. Every such email carries an unsubscribe link.
h. To send marketing to anyone who is not an existing customer — your consent, which you may withdraw at any time.
i. To respond to lawful requests from courts, regulators or law enforcement — compliance with a legal obligation.
6.2 Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights. You can object at any time: see section 12.
7. Who we share it with
7.1 We use the following suppliers, each under a written contract that limits them to processing data on our instructions:
| Supplier | What they do for us | Where processed |
|---|---|---|
| A2 Hosting, Inc. | Hosting and backups | United States |
| Cloudflare, Inc. | Content delivery, site protection, and the Turnstile check that guards our forms | United States and global network |
| Stripe | Subscriptions and card processing | Ireland and the United States |
| Twilio SendGrid | Account and service emails | United States |
| Google LLC | Google Analytics — website usage statistics | United States |
7.2 We keep this list current. Customers under our Data Processing Agreement receive advance notice of a change of sub-processor, on the terms set out there.
7.3 We also share data with:
Third-party data sources. When a search is run, the query is passed to the sources needed to answer it. Queries are sent from UserSearch's own account with each source. We do not pass your name, your email address or your billing details to them.
Our professional advisers — accountants, auditors and lawyers, each under a duty of confidentiality.
Courts, regulators and law enforcement, where we are legally required to disclose, or where disclosure is necessary to establish or defend legal claims.
A buyer, if all or part of the business is sold or transferred — see section 16.
7.4 We do not sell your personal data, and we do not share it for advertising purposes.
8. Cookies
8.1 Our sites use the following cookies:
Strictly necessary — sign-in and session cookies, security cookies, and the Cloudflare Turnstile cookie that protects our forms from automated abuse. These are required for the site to work.
Functional — remember your preferences, such as your chosen billing view or saved filters.
Analytics — Google Analytics (_ga and _ga_*), which tells us which pages are used and how people move through the site.
8.2 We do not use advertising, remarketing or cross-site tracking cookies, and we do not share cookie data with advertisers.
8.3 You can block or delete cookies in your browser settings, and you can opt out of Google Analytics specifically using Google's browser add-on at tools.google.com/dlpage/gaoptout.
8.4 If you block strictly necessary cookies, parts of the site will not work.
9. Keeping your data secure
9.1 We use technical and organisational measures to protect your data. These include:
Two-factor authentication, available on account sign-in if you choose to turn it on.
Private by default. Cases are private. Private Mode stores no search history, and what Forensic Mode retains in a Case is the result you keep, not the query that found it. Either way our records show that a search ran, its type and its Credit cost, never the terms you entered.
Results encrypted with a key we do not hold. Results shown in the web application are encrypted using a random key that lives in your browser, not on our systems. Results delivered through the API are returned to the calling system over an encrypted connection, and that system is responsible for storing them.
Encrypted bookmarks. Saved bookmarks are encrypted with our key, and you can optionally add a password of your own, which we do not store and cannot recover.
Access control — your account is reached through a username and password unique to you, and staff access is limited to those who need it for their role.
Encryption in transit across all our sites.
Regular backups, held separately from the live systems.
Data minimisation — we collect what we need for the purposes in section 6, and no more.
9.2 If you think your account has been accessed without your permission, or that your data has been lost or misused, email [email protected] immediately.
9.3 If a security incident affects your personal data, we will tell the Information Commissioner's Office and, where the law requires it, you, without undue delay.
10. How long we keep it
10.1 We keep personal data only as long as we need it:
a. Account data — up to seven years after you close your account, and sooner if you ask us to delete it.
b. Cases and saved results — until you delete them, and in any event no more than twelve months after your account closes.
c. Billing and invoice records — seven years, as required by UK tax law. We have to keep these even if you ask us to delete everything else.
d. API and security logs — for as long as we need them, typically ninety days.
e. Correspondence — for as long as we need it to deal with the matter and keep a record of it.
f. Search transaction and Credit records — for as long as your account exists, and deleted when your account is deleted.
10.2 Search processing. Most of the work of a search happens in memory. Apart from the transaction record described in section 5.1, the terms you search for are not written to our systems. Some processing uses temporary storage, which is normally cleared within an hour and typically within nine hours. Results are not kept beyond that unless you save or bookmark one, in which case it is stored and encrypted as described in section 9.
10.3 Section 10.2 describes our own systems. The third-party data sources we query run their own systems under their own policies, and we cannot speak for how long they keep anything.
10.4 After deletion, data may remain in backups for a short period before those backups are overwritten in the normal cycle.
11. Sending data outside the UK
11.1 Our hosting and most of the suppliers listed in section 7 are based in the United States, so personal data covered by this policy is stored and processed there.
11.2 We transfer personal data out of the UK only where one of these safeguards is in place: an adequacy decision covering the destination country; the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses; the Standard Contractual Clauses themselves, for transfers out of the EEA; or, for recipients in the United States certified under it, the EU–US Data Privacy Framework and its UK Extension.
11.3 You can ask us which safeguard applies to a particular supplier by writing to [email protected].
12. Your rights
12.1 You have the right to:
Be told what personal data we hold about you and why — this policy is part of that.
Get a copy of the data we hold about you.
Have it corrected if it is wrong or incomplete.
Have it erased, where we have no continuing reason to hold it.
Restrict how we use it while a question about it is being resolved.
Receive it in a portable form, or have us send it to another provider.
Object to our using it where we rely on legitimate interests, and to object to direct marketing at any time, with no reason needed.
Withdraw consent at any time, where consent is what we rely on. Withdrawing it does not affect anything done beforehand.
Not be subject to a decision made by machine alone where that decision has a legal or similarly significant effect on you. We do not make decisions of that kind. UserSearch returns information; it does not rate or decide anything about a person. Where a result carries a match-accuracy score, that score comes from the data source and not from us, and any conclusion drawn from a result is drawn by the person using it.
12.2 To exercise any of these, email [email protected]. Where the request concerns an account, sending it from the address registered to that account is the quickest route; otherwise we may need to ask for proof of identity before we act.
12.3 We respond within one month. If a request is complex we may extend that by up to two further months and will tell you why. There is no charge, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline it — and if we decline, we will explain why.
12.4 You also have the right to complain. If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You can complain to the Information Commissioner's Office at ico.org.uk, or, if you are in the EEA, to your national data protection authority.
12.5 Please keep us informed if your details change, so that what we hold stays accurate.
13. Marketing
13.1 We will send you marketing email only where you have opted in, or where you are an existing customer and the email concerns products similar to those you already use.
13.2 Every marketing email has an unsubscribe link, and you can also opt out at [email protected]. Unsubscribing does not stop service emails about your account, which we have to send while your account is open.
14. If you appear in UserSearch results
14.1 UserSearch does not create the underlying information. Results are assembled from third-party data sources and from publicly available sources. We are not the original publisher of that information and, in most cases, we cannot correct it at its source.
14.2 When a customer runs a search, we act as a processor on that customer's behalf, as described in section 3. The customer decides what to search for and why, and is responsible as controller for having a lawful reason to do so.
14.3 Most results are returned live and are not retained — see section 10.2. Where a customer saves a result into one of their cases, an encrypted copy sits in that case until the customer deletes it or their account closes.
14.4 Our customers agree, under our Terms of Service, to use UserSearch only for lawful and permitted purposes.
14.5 If you believe personal data about you is appearing in UserSearch results, write to [email protected] with enough detail for us to identify the record — for example the email address, username or phone number concerned. We will:
a. tell you which source the information came from, where we are able to identify it, so that you can ask that source to correct or remove it;
b. suppress the identifiers you give us from future UserSearch results, so far as we are able;
c. where a customer holds a saved copy, pass your request to that customer, who is the controller for it; and
d. reply within one month, as the law requires.
14.6 Where the information sits only with a third-party source and we pass a query through to it, we will say so and point you to that source.
14.7 All of the rights in section 12, including the right to complain to the Information Commissioner's Office, apply to you as well as to our customers.
15. Children
15.1 UserSearch is a professional tool. It is not directed at children, and accounts are for people aged 18 or over. If you believe someone under 18 has opened an account, email [email protected] and we will close it and delete the data.
16. If the business changes hands
16.1 Analytix Labs Ltd may expand or reduce its business, which could involve selling or transferring all or part of it. Where personal data forms part of what is transferred, it will continue to be handled under this policy or one that offers equivalent protection.
16.2 We may disclose data to a prospective buyer, under confidentiality obligations and limited to what the transaction requires.
17. If you are in the United States
17.1 Residents of California and of other US states with comprehensive privacy laws have the right to know what personal information we collect and why, to obtain a copy, to correct it, to delete it, and to opt out of its sale or of targeted advertising.
17.2 We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act. We run no advertising or remarketing cookies.
17.3 To exercise these rights, email [email protected]. We will not treat you any differently for having done so.
18. General
18.1 If any part of this policy is found to be invalid or unenforceable, that part will be treated as deleted and the rest will continue to apply.
18.2 This policy is governed by the law of England and Wales, and disputes arising under it are subject to the exclusive jurisdiction of the courts of England and Wales.
19. Changes to this policy
19.1 We may update this policy when our practices change or the law requires it. The effective date at the top always reflects the current version.
19.2 Where a change materially affects how we use your data, we will tell you by email or by a notice on the site before it takes effect.
20. Contact
20.1 Analytix Labs Ltd, trading as UserSearch, Second Floor, Avalon House, 5–7 Cathedral Road, Cardiff CF11 9HA. Email [email protected].
20.2 If you would like this policy in another format — large print, audio or braille — email us and we will arrange it.