Privacy Policy

SurveyService (“we”, “us”, “our”) is a company registered in Sweden. We operate the SurveyService platform at surveyservice.app. For the purposes of the EU General Data Protection Regulation (GDPR), SurveyService is the data controller for the account and platform data described below.

Questions about this policy or your data can be sent to support@surveyservice.app.

Account data

Name, email address, and a hashed password when you register. Your current plan and billing history, handled via Stripe (see below — we never see or store your card details).

Survey content

The questions, settings, thank-you messages, and any custom logo you upload when building a survey.

Respondent data

Whatever your survey collects from the people who respond to it — this may include personal data if your questions ask for it. See “If you run surveys that collect personal data” below for what this means for you as a survey creator.

We also record the IP address of each respondent alongside their answers, to support fraud prevention and duplicate-response controls.

Technical data

A single session cookie that keeps you logged in, and standard request logs (IP address, timestamps) kept by our hosting provider for security and abuse prevention.

We process this data to:

• Provide the service — create and host your surveys, collect responses, and show you the results (performance of our contract with you)
• Generate AI summaries, key findings, and sentiment analysis from your responses when you request them (performance of our contract with you)
• Process payments and manage your subscription (performance of our contract with you)
• Send transactional emails — response notifications, digests you’ve opted into, and account emails (performance of our contract with you)
• Detect abuse, enforce plan limits, and keep the service secure (our legitimate interest)
• Respond to support requests (our legitimate interest / your consent)

We use the following subprocessors to run SurveyService. We don’t sell personal data to anyone.

• Supabase — our database and file storage (survey data, uploaded logos)
• Vercel — application hosting
• Stripe — payment processing for pay-per-survey and Pro; we never receive or store your card number
• Resend — delivery of transactional emails and digests
• Anthropic — when you generate an AI summary, the relevant question and answer text is sent to Anthropic’s Claude API to produce it
• Google Analytics — usage analytics on our own dashboard and marketing pages (see the Cookies section below); never on the surveys you send out, so your respondents are not affected
• Vercel Analytics — cookieless page-view and performance analytics on the same pages as Google Analytics above; never on the surveys you send out

Some of these providers are based outside the European Economic Area. Where that’s the case, transfers are covered by their standard contractual clauses or equivalent safeguards.

If your survey questions collect personal data about your respondents, you — not SurveyService — are the data controller for that data under GDPR and equivalent laws. We process it on your behalf (we’re a processor in that relationship). You’re responsible for having a lawful basis to collect it, telling respondents how you’ll use it, and handling any requests they make about their data.

We keep your account and survey data for as long as your account is active. If you delete a survey or your account, the associated data is deleted from our systems, aside from what we’re required to retain for legal, tax, or billing records (e.g. Stripe transaction history).

If you’re in the EEA, UK, or a jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Lodge a complaint with your local data protection authority — in Sweden, that’s the Swedish Authority for Privacy Protection (IMY)

If you’re a California resident, you have similar rights under the CCPA — to know what we collect, request deletion, and correct inaccurate data. We do not sell or share personal data as those terms are defined under the CCPA.

To exercise any of these rights, email support@surveyservice.app.

We use one strictly necessary cookie to keep you signed in. We also use Google Analytics to understand how our own dashboard, account, and marketing pages are used — this sets analytics cookies and collects things like pages visited, general location (city/country level), device and browser type, and referring site. Analytics cookies are only set if you accept them in the cookie banner; declining keeps Google Analytics off entirely. This is scoped to SurveyService account holders only: the surveys you send out and the pages your respondents fill in are never tracked by Google Analytics, on any plan. Separately, our servers keep a basic log of visits to our own dashboard, account, and marketing pages — the page visited and the referring website, if any — to understand where traffic comes from. This log doesn’t use a cookie or any other identifier and isn’t affected by your cookie choice above; it never records your IP address, browser, or device. We also use Vercel Analytics, our hosting provider’s own page-view and performance analytics tool, on the same dashboard, account, and marketing pages — it doesn’t set a cookie or use a persistent identifier either, so like the log above it runs regardless of your cookie choice and is never present on the surveys you send out or the pages your respondents fill in. Stripe may also set its own cookies while you are on its checkout page, governed by Stripe’s own privacy policy.

Data is encrypted in transit (HTTPS/TLS). Passwords are hashed and never stored in plain text. Access to production data is restricted to what’s needed to operate the service.

SurveyService isn’t directed at children under 16, and we don’t knowingly collect personal data from them.

If we make material changes to this policy, we’ll update the date at the top of this page and, where appropriate, notify you by email.

SurveyService (Sweden). For anything in this policy, or to exercise your data rights, email support@surveyservice.app.