Data processing

What this covers

Where you collect personal data through a survey, you decide what is collected and why, and SurveyAxis processes it on your instructions. This describes how that processing works.

What we do with it

Only what is needed to run the service: storing responses, rendering the analysis you ask for, sending the invitations you send, and producing the exports you request. We do not process it for any purpose of our own.

Keeping it safe

Access is limited to the people who need it to operate the service. Sign-in secrets and API tokens are stored hashed. What every account has done is recorded in an activity log you can read.

Other processors

Stripe, for payments, and whichever mail server is configured for your deployment. Storage and background processing are on our own servers.

If something goes wrong

We will tell you about a breach affecting your data without undue delay, with what we know at the time rather than waiting until we know everything.

When it ends

On request, or when your account closes, your data is deleted or anonymised. Responses are anonymised rather than deleted where an author still relies on the figures, and everything identifying who gave them is removed.