Privacy Policy
Last updated: 13 May 2026
1. Data We Collect
We collect information you provide directly: account details (name, email, username), survey content you create, and billing information (processed by Stripe — we never store card numbers). We also collect technical data automatically: IP addresses, browser type, pages visited, and usage patterns. Survey responses are collected on behalf of survey creators; Surveyee acts as a data processor for that data.
2. How We Use Your Data
We use your data to: provide and improve the Service; send transactional emails (account verification, password reset, subscription receipts); communicate product updates and security notices; comply with legal obligations; and prevent fraud and abuse. We do not sell your personal data to third parties. We do not use your survey response data for advertising.
3. Survey Encryption
Surveyee offers optional end-to-end encryption for survey responses. When enabled, responses are encrypted on the respondent's device using RSA-OAEP + AES-GCM before transmission. Only the survey creator, holding the private key, can decrypt responses. Surveyee has zero technical ability to access encrypted response content. This is a voluntary feature — unencrypted surveys are protected by TLS in transit and AES-256 at rest.
4. Data Sharing
We share data only with: infrastructure providers (PostgreSQL hosting, AWS SES for email) under strict data processing agreements; Stripe for payment processing; and as required by law or court order. We require all sub-processors to maintain equivalent data protection standards. We will notify you of any change in key sub-processors.
5. Cookies & Tracking
We use strictly necessary cookies for session management and authentication only — no advertising or tracking cookies, and no third-party analytics scripts that send data to third parties. See our Cookie Policy at /policies/cookies for the full detail, including how to control them.
6. Data Retention
We retain your account data for as long as your account is active. Survey data and responses are retained for the duration of your subscription. If you delete your account, we delete your personal data within 30 days. Encrypted backups may retain data for up to 90 days. Billing records are retained for 7 years as required by applicable tax law.
7. Your GDPR Rights
If you are in the European Economic Area, you have the right to: access a copy of your personal data; correct inaccurate data; request deletion ("right to be forgotten"); restrict or object to processing; data portability (receive your data in machine-readable format); and withdraw consent at any time. To exercise any right, email [email protected]. We respond within 30 days. You may also lodge a complaint with your local data protection authority.
8. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us immediately and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy. For material changes, we will notify you by email and post a prominent notice on the Service at least 30 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
10. Contact & Data Controller
Surveyee is the data controller for personal data you provide directly. For privacy inquiries, data subject requests, or to reach our Data Protection Officer, contact us at [email protected]. Surveyee is not yet operated through an incorporated legal entity; full operator and registered-address details will be published on our Imprint page once incorporation is complete. This policy is governed by applicable EU data protection law (GDPR) regardless of the specific entity or jurisdiction of incorporation.