At a glance
- Universal Strategic Arts Ltd (company no. 16700907) runs Unity Discover.
- If you have a Discover account, we are the controller of your account and billing data. This policy explains how we use it.
- If you were interviewed through Discover, the organisation that invited you decides how your answers are used. They are the controller and we process your data for them. See section 6, and contact them first.
- We do not sell your data, we do not show ads, and we do not use your data to train AI models.
- Our public website uses analytics and advertising cookies only if you accept them. They are never used inside your workspace.
- Contact privacy@thisisuniversal.com. We acknowledge within 3 business days and respond within one month.
1. Who we are
Universal Strategic Arts Ltd, registered in England and Wales (16700907), April Cottage, Mushroom Castle, Bracknell, RG42 7PL. Privacy: privacy@thisisuniversal.com · Security: security@thisisuniversal.com. We have not appointed a Data Protection Officer, as we are not required to; privacy requests are handled through privacy@thisisuniversal.com. Our processing of EU data is currently limited in scale and we have not appointed an Article 27 EU Representative; we will appoint one if that changes.
2. Data we collect about account holders
| Data | Why | Legal basis |
|---|---|---|
| Name, work email, workspace name, use case, terms acceptance and version | Create and run your account; sign you in with email codes | Contract |
| Billing: plan, payment status, invoices, VAT details; card details are held by Stripe, not us | Take payment, keep tax records | Contract; legal obligation (tax records kept 7 years) |
| Usage: interview minutes used, studies created, settings, notification preferences | Meter minutes, run the product, show your usage | Contract |
| Security and technical: IP address, device and browser details, sign-in attempts, error logs | Keep the service secure, prevent abuse, fix faults | Legitimate interests |
| Messages you send us (contact form, support email) | Respond to you | Legitimate interests |
| Service emails (sign-in codes, receipts, billing and service notices) | Run your account; you can turn receipts off in Settings | Contract |
| Website analytics, only if you accept cookies: pages visited, how you arrived (for example a search or an advert), device type and approximate location | See which pages and adverts bring people to Discover | Consent |
We do not send marketing emails. We use analytics and advertising measurement only on our public website and our sign-up and sign-in pages, and only if you accept cookies (see section 10). We never use them inside your workspace.
3. Your research content
Studies, discussion guides, interview transcripts, analysis and documents in your workspace belong to you. We process them to provide Discover for you, under our Data Processing Agreement.
4. AI processing
Discover uses AI models from third-party providers (listed on our sub-processors page) to run interviews and to analyse and draft. Inputs and outputs are stored in your workspace so you can use them. We do not use your content to train AI models, and we use our AI providers on terms that do not allow them to train their models on it. Discover does not make decisions about people that have legal or similarly significant effects.
5. Sharing
We share data only with the sub-processors listed on our sub-processors page, under contracts that protect it; with professional advisers; and where the law requires (we resist requests that are not lawful and tell the customer where we can). We do not sell personal data.
6. If you were interviewed through Discover
- The organisation that invited you is responsible for your interview data. Before the interview you were told:
- it is a voice conversation with an AI interviewer, recorded and transcribed;
- your answers may be summarised and analysed with AI and shared with that team;
- you can stop at any time.
- We store your name, email (if you were invited by email), any job title you gave, your answers, the transcript and the AI analysis. The voice provider stores the conversation audio.
- If you asked for a transcript copy, we emailed it to you.
- To access or delete your data, contact the organisation that invited you. If you can't reach them, email privacy@thisisuniversal.com and we will pass your request on.
7. Where data is stored and international transfers
Our main database is in Ireland (EU). Some providers process data in the United States. We protect those transfers with the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, or an adequacy decision such as the UK–US Data Bridge.
8. How long we keep data
| Data | Kept for |
|---|---|
| Account data and workspace content | While your account is open, plus up to 60 days after closure |
| Billing and tax records | 7 years |
| Security and error logs | 30–90 days, depending on the system |
| Website analytics in Google Analytics | 2 months for visitor-level data; after that, totals only |
| Interview audio and conversation records at the voice provider | Until deleted: on request, or when the account is closed |
9. Your rights
You can ask us to access, correct, delete, restrict or export your data, or object to processing based on legitimate interests. Email privacy@thisisuniversal.com. You can export your workspace yourself in Settings → Account. To close your account, email us from your account address. You can complain to the ICO (ico.org.uk), though we would like the chance to help first.
10. Cookies
Discover uses cookies needed to sign you in, keep your session and protect the service, and one that remembers your cookie choice. These are always on.
On our public website and our sign-up and sign-in pages, we also ask whether you accept two optional kinds of cookie:
- Analytics: Google Analytics, loaded through Google Tag Manager, tells us which pages people visit and how they found us.
- Advertising: if we run adverts, Google Ads tells us whether an advert led to a sign-up.
Nothing optional is set unless you say yes. You can change your mind at any time with Cookie settings at the bottom of the website. We never use analytics or advertising cookies inside your workspace. Google processes this data as described in How Google uses information from sites or apps that use our services.
Our error-monitoring tool records a sample of sessions to help fix faults, with all text and form inputs hidden.
11. Security
See our Trust Centre at trust.thisisuniversal.com.
12. Children
Discover is for organisations and is not directed at children. Customers may not interview anyone under 18.
13. Changes
We will post changes here and, if they are material, tell account holders by email before they take effect.