carVertical
Policies

PRIVACY POLICY FOR USER RESEARCH

This privacy policy explains how we collect, use, and protect your personal data when you participate in our internal user research activities. We hope you will take a moment to read this important information.

1. Who is the Data Controller of your Personal Data?

The data controllers are UAB “cV Group” (hereinafter “carVertical”), legal entity code 303134915, address Aukštaičių Str. 7, LT-11341 Vilnius, Lithuania and/ or UAB “carOne” (hereinafter “carOne”), legal entity code 306657511, address Aukštaičių Str. 7, LT-11341 Vilnius, Lithuania (hereinafter together as "we" or "us”).

2. What is the Purpose of Us Processing Your Data?

We process your personal data to conduct our internal user research. We use your data to gather feedback, understand user behavior, identify areas for improvement, and ultimately make our products and services better for all of our users.

3. What Personal Data We Collect?

We collect:

  • Your name, email, time zone, and general location to manage your participation and schedule surveys at a time that's convenient for you.
  • Research participant data, which includes your survey responses, interview recordings, transcripts, and any other feedback, notes, or comments provided during the research which we use for analysis.
  • Technical data, such as the type of device you use (e.g., mobile phone, computer) and the platform you access (e.g., mobile app, website) to understand how people use our products and services.
  • Consent status (e.g., subscribed or unsubscribed) and, if you are compensated for your participation, payment details.

4. What is the Legal Basis for Our Data Processing?

We process your data based on your consent, which you can withdraw at any time.

We may also process some data to meet our legal obligations, such as handling payment details for accounting and tax purposes. We may also process some data based on our legitimate interests to prevent fraudulent or dishonest participation.

5. How long will we retain your personal data?

We only keep your personal data for as long as needed to achieve our purposes. We’ll keep your contact and research participant data for no longer than 1 year to analyze it, after which it will be securely deleted or made anonymous.

Your payment details (along with your contact information, if necessary) will be kept as long as required to meet our legal obligations.

If you withdraw your consent, we will delete your data unless we have a legal reason to keep it.

6. How We Collect Your Data?

We collect your personal data directly from you and, in some cases, from our partners who assist us with surveys and interviews. Our research tools also automatically collect some technical data, such as your device type, to improve your experience. These tools also help us manage your participation by collecting information about your consent status and survey schedule. Survey sessions may also be recorded on platforms like Google Meet.

7. How is Your Data Shared and Transferred?

We share your data with partners who help us run our research and analyze the results. This includes platforms like User Interviews (User Interviews, Inc.) and Lyssna (UsabilityHub Pty Ltd), which we use to manage invitations, collect responses, and store your data. We also use Google services (Google LLC), such as Google Meet and Google Drive, for interviews and secure storage.

We may also work with other service providers for cloud hosting, IT infrastructure, database software, team collaboration, customer management, payments, data analytics. We only share the minimum amount of data necessary.

In the case of a business transfer, like a merger or sale, your data may be transferred to the new owner. We may also share your data with law enforcement or government authorities if legally required.

When it is absolutely necessary, we may transfer your data outside of the EU/EEA. If we do, we'll ensure your data remains protected by using approved methods like Standard Contractual Clauses (SCCs) or other legal safeguards. You can contact us for more information.

8. Your Rights

You can access your data by asking if we are processing your personal data, under which conditions, and by requesting a copy of the data we hold about you. You also have the right to ask us to correct any inaccurate data or to erase your data entirely. You can request to restrict our data processing or object to its use if it is based on our legitimate interests. Additionally, you can request that we transfer your data to you in a common electronic format. You have the right to withdraw your consent at any time. If you have concerns about how we handle your data, you can also lodge a complaint with a data protection authority.

You can exercise your rights, subject to certain conditions and limitations outlined in the GDPR. To do so, please contact info@carvertical.com or dpo@carvertical.com for carVertical or info@carone.app for carOne. We may need to verify your identity for security reasons before we can fulfill your request.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on our website or by other appropriate means.

10. Contact Us

If you have any questions about this privacy policy or our data processing practices, please contact info@carvertical.com or dpo@carvertical.com for carVertical or info@carone.app for carOne.

Last update: 08-27-2025