How Survey.is handles account, survey, invitation, and response data.

Scope

Survey.is provides lightweight survey creation, sharing, invitation, and analytics tools. Workspaces use Survey.is to create surveys and collect responses. Respondents use public survey links, short codes, QR codes, email invitations, embedded website survey popups, or API-triggered invitation links to submit responses.

Workspace owners and members decide what survey questions to ask, who to invite, and whether a survey is anonymous or tied to invitation details. Survey.is processes that information to provide the service.

Information We Collect

• Account information: name, email address, authentication identifiers, selected timezone, workspace memberships, roles, and profile settings.
• Workspace and survey content: workspace names, projects, survey titles, descriptions, questions, settings, templates, public codes, theme choices, and result view presets.
• Responses: submitted survey answers, submission time, public survey identifiers, browser repeat-response cookie state, whether a response was submitted through a website popup, and invitation attribution when a respondent uses a tracked invitation link.
• Invitation data: recipient names and email addresses, reusable audience lists, scheduled batches, reminder settings, message templates, delivery status, API trigger token metadata, and optional hidden metadata submitted through invitation workflows.
• Billing information: workspace plan level, Stripe customer and subscription identifiers, billing email, subscription status, renewal dates, invoices, payment method management, and related checkout or billing portal state. Payment card details are handled by Stripe, not stored directly by Survey.is.
• Usage, device, and log information: page views, product events, browser/device details, IP-derived request metadata, error logs, security logs, and operational diagnostics. Application logs are designed to redact sensitive values such as secrets, tokens, passwords, signatures, cookies, and raw message bodies.

How We Use Information

• Authenticate users, maintain secure sessions, and manage workspace access.
• Create, edit, publish, and close surveys.
• Collect responses and show analytics, trends, exports, reports, and response data tables to authorized workspace users.
• Send invitation and result-digest emails, process reminders, and attribute responses to invitation links when configured.
• Run billing, subscription, plan-limit, and feature-access workflows.
• Maintain security, debug errors, prevent abuse, and improve the service.
• Communicate about product, account, billing, security, and support matters.

How Information Is Shared

Survey.is shares information with service providers only as needed to operate the product. Current providers include Firebase Authentication for identity, Stripe for billing, Mailgun for managed email delivery, Google Analytics for website/product analytics when configured, and infrastructure providers that host the application, database, storage, logs, and backups.

Workspace content and survey response data are visible to authorized members of the workspace according to their role. Public survey links are intentionally public, but they are scoped to taking a survey or viewing public aggregate results when a workspace enables that option.

Survey.is may also disclose information if required by law, to protect the service and users, to investigate abuse or security issues, or as part of a business transfer such as a merger, acquisition, financing, or sale of assets.

Your Choices

• Workspace owners and admins can invite or remove members, manage surveys, close surveys, clear results, configure invitation settings, and manage billing for their workspace.
• Users can update their profile name and timezone from the Profile page.
• Respondents can choose whether to answer a public survey. If a survey was sent through a tracked invitation, the workspace may associate that response with the invitation record.
• Workspace owners can request help with access, deletion, export, or correction requests for workspace data.

Security and Retention

Survey.is uses server-side sessions after Firebase token verification, role checks for workspace access, prepared database queries, signed Stripe webhooks, hashed API trigger secrets, and redaction for sensitive log fields. No system can be guaranteed perfectly secure, but Survey.is is designed to limit access and reduce unnecessary exposure.

Survey.is keeps account, workspace, survey, invitation, billing, and response records while they are needed to provide the service, comply with legal or accounting obligations, resolve disputes, enforce agreements, and maintain backups. Workspace owners can request deletion or export of workspace data when appropriate.

Survey.is is not directed to children under 13, and workspaces should not intentionally collect children's personal information through surveys unless they have the rights and consents required to do so.

Contact

Questions about this policy or privacy requests can be sent through the support channel provided by Survey.is or QR Wild LLC. Workspace members should first contact their workspace owner or admin for requests about a specific workspace, survey, invitation, or response.