Our Privacy Notice says we use service providers and share data with research clients. This page names them, so you can see who actually handles your data and what each one does.
Companies that process data on our behalf
These are our processors. They act on our instructions, under contract, and cannot use your data for their own purposes.
- Amazon Web Services — United States. Hosts our infrastructure. Almost everything we hold sits here.
- Zendesk — United States. Runs our customer support system, so it holds your correspondence with us.
- Tremendous — United States. Pays your rewards. Receives your name, email and the reward amount, and nothing else.
- AppsFlyer — Israel. App analytics and attribution. Receives device identifiers, not the content of what you share.
- Google Analytics — United States. Measures how our website is used. This is the marketing website, not the app.
- Alchemer — United States. A survey platform we still use for a small number of studies. We have moved most survey work to our own in-house system.
- Sum and Substance (Sumsub) — United Kingdom. Runs the identity check where a task requires one, confirming that a real, live person is present. It receives the check itself and no research data.
Who we share research data with
Research data goes to the clients and partners who commission the work: Measure Customers (the brands, broadcasters and advertisers who commission research), Measure Partners (research agencies running studies through us), and Research Partners (organisations we match data with for research, such as media measurement companies, broadcasters, retailers and other research organisations).
These are separate companies deciding their own purposes, not processors acting for us. What they receive is set by the task, and before any individual-level data leaves us it is scrubbed of identifiers and references so the recipient cannot work out who it is about. How that works is explained in Your data, explained.
Others who may receive data
- HMRC — where tax law requires us to report rewards and transactions.
- Regulators, including the Information Commissioner's Office, where we are required to engage with them.
- Our professional advisers — lawyers and auditors, under confidentiality.
- LinkedIn, only where you have chosen to validate your profile against it.
Who we do not share with
Worth stating plainly, because our Notice describes things that may happen in future.
- We are not currently sharing data with any advertising marketplace. Our Privacy Notice describes an optional advertising use through data marketplace platforms. That is not operational, no data has been made available under it, and it would require your separate opt-in before anything happened.
- We are not currently sharing your details directly with any named company under the direct-sharing route the Notice describes. If that changes, we will ask you first, name the company, and show you exactly what would be shared.
- We do not sell your personal information. The single exception would be the advertising opt-in above, which is treated as a sale and a share — and which you would have to choose.
When any of that changes, this page changes with it, and we will tell you as described in the “Changes to the Privacy Notice” section of the Notice.
Where these companies are
Most of our processors are in the United States. Transfers there are covered either by the UK Extension to the EU–US Data Privacy Framework, where the company is certified under it, or by the standard contractual clauses and the UK Addendum, with a transfer risk assessment completed for the country before any data moves. AppsFlyer is in Israel, which has a UK adequacy decision. Sumsub is in the United Kingdom.
Questions
Email privacy@measureprotocol.com. If you are not satisfied with how we have handled something, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would appreciate the chance to sort it out first.