Privacy Policy
Last updated: August 4, 2026
Cedar Research ("Cedar Research," "we," "us," or "our") provides paid product-feedback research sessions that connect industry professionals with the teams building their tools. This Privacy Policy explains what personal information we collect through cedar-research.com and our intake, survey, scheduling, and feedback forms (together, the "Services"), how we use it, who we share it with, and the choices and rights you have.
By using the Services or submitting a form, you acknowledge this Privacy Policy.
1. Information we collect
Information you provide
When you apply for or take part in a research session, we collect the information you enter, which may include:
- Contact and identity details — full name, email address, phone number.
- Professional details — company name, company website, company size, job title, management level, role, professional status, and a description of your role.
- Survey responses — property or portfolio types, unit / bed / tenant counts, level of involvement, areas you want to automate, and other screening answers.
- Session and feedback data — your selected session time, the feedback and ratings you give after a session, and your gift-card preference for any incentive.
- Free-text messages — anything you type into a message or notes field.
Information collected automatically
- Usage and device data — pages viewed, actions taken, referring pages, browser and device type, and a truncated / hashed form of your IP address used for security and to reduce duplicate submissions.
- Product analytics and session replays — we use PostHog to record how visitors interact with our pages, including page views, clicks, and session recordings. Form input fields are masked in these recordings so the values you type are not captured in the replay.
- Cookies and similar technologies — used for analytics and to remember your progress through a form. See "Cookies" below.
2. How we use your information
- Determine whether you qualify for a research session and match you to relevant studies.
- Schedule, run, and follow up on feedback sessions.
- Provide and pay any agreed incentive (for example, a gift card).
- Communicate with you about your application, session, or request.
- Operate, secure, debug, and improve the Services and prevent fraud or abuse.
- Comply with legal obligations and enforce our Terms of Service.
3. How we share your information
We do not sell your personal information. We share it only as described here:
| Recipient | Purpose |
|---|---|
| Cedar Research platform and backend infrastructure providers | Stores and processes submissions and runs the intake, survey, scheduling, and feedback workflows on our behalf. |
| Client companies participating in a study | Where you take part in a session, the feedback and professional context you provide are shared with the company whose product is being reviewed. We do not share your contact details with them without your agreement. |
| PostHog | Product analytics and session replay. |
| Calendly | Scheduling of session times. |
| Email and messaging providers (including FormSubmit and Instantly) | Delivering and managing communications related to your request and sessions. |
| Hosting and infrastructure (including Vercel), and embedded media (YouTube) and web fonts (Google Fonts) | Serving the website and its content. These providers may receive your IP address as a normal part of loading the page. |
| Professional advisors, authorities, or acquirers | Where required by law, to enforce our terms, protect rights and safety, or in connection with a merger, financing, or sale of assets. |
4. Cookies and tracking
We and our analytics provider use cookies and similar technologies to run the site, remember your progress through forms, and understand usage. Most browsers let you refuse or delete cookies through their settings; some features may not work correctly if you do. Where required, we will ask for your consent before setting non-essential cookies.
5. How long we keep your information
We keep personal information for as long as needed to run a study, provide incentives, meet legal and accounting obligations, and resolve disputes. When it is no longer needed, we delete or anonymize it. You can ask us to delete your information sooner as described in "Your rights."
6. How we protect your information
We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your rights
California residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know the categories and specific pieces of personal information we have collected about you.
- Request deletion of your personal information.
- Request correction of inaccurate personal information.
- Opt out of the "sale" or "sharing" of personal information — we do not sell or share it as those terms are defined under California law.
- Not be discriminated against for exercising these rights.
EU / UK / EEA residents (GDPR)
If you are in the EU, UK, or EEA, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Where we rely on consent, you may withdraw it at any time without affecting prior processing. You may also lodge a complaint with your local data protection authority.
Our legal bases for processing are: performance of a contract or steps taken at your request (running your session); your consent (for analytics cookies and marketing communications); and our legitimate interests (operating, securing, and improving the Services). Cedar Research acts as the controller for the personal information described here.
Exercising your rights
To make a request, email privacy@cedar-research.com. We will verify your request and respond within the timeframe required by applicable law. You may use an authorized agent where the law permits.
8. International data transfers
We are based in the United States and process personal information there. If you access the Services from outside the United States, you understand your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for these transfers.
9. Children's privacy
The Services are intended for professionals aged 18 and over and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version here and update the "Last updated" date. Material changes will be highlighted where appropriate.
11. Contact us
Cedar Research
Email: privacy@cedar-research.com