SurveyKiller — Privacy Policy

Effective date: October 5, 2026

Who we are: Eigenlume LLC ("SurveyKiller," "we," "us"), 2108 N St, Ste N, Sacramento, CA 95816. Contact: support@surveykiller.com, or by mail at the address above.

This Policy explains what we collect, why we collect it, who we share it with, and the choices you have. It covers surveykiller.com and our related apps and APIs (the "Service").

1. Two different roles — please read this first

We handle personal information in two distinct roles:

• As a business (controller) for the account, billing, and usage data of the people who sign up for SurveyKiller — survey creators, account owners, and invited members. We decide how that data is used, as described in this Policy.
• As a service provider (processor) for the survey responses creators collect from their respondents, and for the contact lists creators upload to send survey invitations. The survey creator — not SurveyKiller — decides what to ask, whom to contact, and why. We process that data only on the creator's behalf, to provide the Service to them.

If you are a survey respondent: you do not need an account, and responses are anonymous by default — we do not require you to identify yourself, though the survey you answer may ask for information about you. If you answer through a personal invitation link that was emailed to you, your response is linked to your email address, and the organization that sent the invitation can see your answers alongside it. You are never charged to answer a survey. For privacy requests about your responses, contact the organization that ran the survey; we will assist them (see Section 9).

2. Information we collect

a. Account and profile data. Name, email address, organization name, your role in the organization, password (stored hashed, never in plain text), and account settings. If you sign in with Google, we receive your basic Google profile details (name, email address, and profile picture link). If you turn on two-factor authentication, we store your authenticator enrollment and hashed recovery codes. We also record when you accepted our Terms of Service and this Policy, and which version you accepted.

b. Billing data. Your plan, transaction and invoice history, and billing details — billing name and address (collected by Stripe at checkout), billing email, company, country, and tax ID if you provide them. Payment cards are collected and processed by Stripe. We never store full card numbers.

c. Survey content. The surveys, questions, and branding you create — including uploaded logos — and the analytics dashboards you configure.

d. Survey responses. The answers respondents submit — whatever the survey asks. Responses may include free-text answers and, where the creator enables AI answer-assist, the comment a respondent types or dictates to get suggested answers. Responses record when the respondent started and submitted the survey, and a random identifier for that visit. We do not attach the respondent's IP address, browser, or device details to a response. Creators control what their surveys collect (see Section 1).

e. Audience and contact data. Contact lists creators upload to send survey invitations — email address, name, company, and tags — plus invitation records and links. For each invitation email, we record whether it was delivered or bounced, whether the recipient unsubscribed or responded, and, where open tracking is on, whether it was opened. Open tracking works through a small image in the email, which many email apps let you block. Creators must have permission to contact these people (see our Acceptable Use Policy).

f. AI interaction data. Prompts and content submitted to AI features, the AI outputs (including AI analysis of survey responses), and the usage metadata we log to operate and meter the Service: feature type, model used, token counts, and estimated cost.

g. Usage, device, and log data. IP addresses on public endpoints such as survey pages, sign-in, and the contact form, used only for security and anti-abuse rate limiting and kept for about 24 hours in that system; the IP address and browser details (user agent) of each sign-in, which our authentication provider (Supabase) keeps while the session lasts and in its authentication logs, and which are also in our daily backups for up to 90 days; request and application logs at our hosting provider (Cloudflare), kept for a limited period under its own retention policies; and audit logs of sensitive organization actions. We do not run in-app behavioral analytics, session replay, or advertising trackers.

h. Cookies and local storage. Sign-in cookies set by our authentication provider, and one functional cookie that returns you to the right page after you confirm your email address. Preferences and UI state are stored in your browser's localStorage. We use no analytics or advertising cookies. See Section 8.

i. Support communications. Emails you send to our support address, and messages you send through our contact form (your name, email address, topic, and message).

3. How we use information

We use information to:

• provide, operate, secure, and improve the Service;
• create and manage accounts and organizations;
• process payments through Stripe and enforce plan limits and metering;
• power the AI features you choose to use (Section 4);
• respond to support requests;
• send transactional service emails — password resets, team and survey invitations, survey emails you ask us to send to your contacts, usage-threshold notices, and the billing, renewal, and subscription notices required by law;
• detect and prevent fraud, spam, abuse, and security incidents; and
• comply with law.

We use survey response data and uploaded contact data only to provide the Service to the creator who collected or uploaded it — not for our own unrelated purposes, not for advertising, and not to train AI models.

We do not currently send marketing email. If we ever start, those emails will include a working unsubscribe link, and we will honor opt-outs.

4. AI features and OpenAI

When you use AI features — survey generation and editing, response insights, asking questions about your results (AI Ask), AI-built dashboards, or respondent answer-assist — we send the relevant content to our AI provider, currently OpenAI, to generate the output. That content is the survey text and, where a feature uses it, response data or the messages a respondent types.

Response insights run automatically. On plans that include them, insights are on by default for every survey: we send respondents' answers to open-ended text questions to OpenAI in the background to label their sentiment and find common topics. You can turn insights off for any survey in its publish settings or on its results page. Separately, once a day we send OpenAI a summary of your surveys — titles, question text, and aggregate statistics, but no individual answers — to write the headline insight on your dashboard.

Under OpenAI's API terms, business data submitted through the API is by default not used to train OpenAI's models, and OpenAI may keep it for up to 30 days to monitor for abuse. We do not use your data to train AI models ourselves. We log AI requests to operate, meter, bill, and troubleshoot the features: for most features, the prompt and the output, plus usage metadata (feature type, model, token counts, estimated cost). Section 7.1 says how long we keep these logs.

Respondent answer-assist is optional per survey, is paid for entirely by the survey creator's plan, and never costs the respondent anything. AI-suggested answers are shown to the respondent to review, edit, and confirm before anything is submitted. Each message a respondent sends to the assistant is saved with the AI's reply when it is sent, even if the respondent never submits the survey.

Voice input. Some text boxes have a microphone button. It uses your browser's built-in speech recognition to turn what you say into text. Depending on your browser, the browser's maker (for example, Google in Chrome) may process the audio under its own privacy terms. We receive only the resulting text, never the audio.

Do not submit content to AI features that you are not permitted to share with a third-party AI processor.

5. How we share information

We share personal information only:

• With the service providers (subprocessors) listed in Section 6, which help us run the Service and may use the data only to provide their services to us;
• With the survey creator, for survey responses and invitation data — respondents' answers go to the organization that ran the survey;
• For legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and integrity of our users, the public, or the Service;
• In a business transfer (merger, acquisition, or sale of assets), in which case this Policy continues to apply to the transferred data.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined in California law. We have no advertising or third-party analytics partners.

6. Subprocessors

We will keep this list current as our providers change.

7. Data retention and security

7.1 Retention. We keep account data, survey content, and responses for as long as your account is active and as needed to provide the Service. Specific practices we apply today:

• IP addresses used for rate limiting are kept for about 24 hours.
• Records of your subscription consent and of price-change notices are kept for at least as long as the law requires — at least three years for auto-renewal consent records. Stripe keeps invoices and payment records.
• You can delete individual surveys in-product at any time. This deletes the survey, its responses, and the AI analysis shown for it, but not our log of AI requests about it (see the next point).
• Our log of AI requests — prompts, AI outputs, and usage records, including the messages respondents send to the answer assistant — is kept with your organization's data until the organization is deleted. Email support@surveykiller.com if you need specific AI records removed sooner.
• You can delete your account yourself in Settings → Profile → Delete account. This sets any paid subscription to cancel at the end of its current billing period and deactivates your account right away. You then have 30 days to change your mind: sign in and choose "Restore my account." Restoring your account does not undo the subscription cancellation. While the deletion is pending, your published surveys stop accepting responses and scheduled survey emails are paused. Restoring your account turns your surveys back on and lets paused emails resume. After the 30 days, we end any subscription that is still running and permanently delete from our live systems your account and profile, every organization you own, and everything in those organizations — surveys, responses, contacts and lists, dashboards, AI records, audit logs, and uploaded logos. If an organization you own still has other members, you must remove them first; we will not delete a team's data along with your account. Content in organizations you do not own stays with those organizations. We keep your subscription-consent and price-change notice records, which include your account email address, as described above. Your billing name and address are held only by Stripe. Stripe keeps its own customer and payment records; if you want your Stripe customer record deleted, email us, and Stripe will keep only what the law requires. If you need a copy of your data first, email support@surveykiller.com before the 30 days end. You can also ask us by email to delete your account.
• Backups. We back up our database once a day and keep each daily backup for 90 days, stored privately with GitHub (see Section 6). Extra copies we take by hand, for example before maintenance, are also deleted within 90 days. Anything you delete, including a deleted account, can remain in these backups until they expire, up to 90 days after deletion. Uploaded logos are not included in backups. We also leave out the IP addresses used for rate limiting; backups made before we started doing this still contain some, and they expire on the same 90-day schedule. Backups do include the sign-in IP addresses held by our authentication provider. If we ever restore from a backup, we re-apply the privacy deletion requests we have completed since that backup was taken.
• If someone unsubscribes from an organization's survey emails, or an email to them bounces, we keep their email address on that organization's do-not-email list, even if the contact is later deleted, so they are not emailed again.
• Our email provider keeps delivery logs for a limited time, and keeps addresses that bounced or marked our email as spam on a do-not-send list.

7.2 Security. We use reasonable safeguards appropriate to our size and the risk, including encryption in transit (HTTPS), hashed passwords, optional two-factor authentication, organization-scoped access controls, audit logs of sensitive organization actions, and payment handling by Stripe so card numbers never touch our systems. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

7.3 If we learn of a security breach affecting your personal information, we will notify you and regulators as applicable law requires.

8. Cookies, local storage, and "Do Not Track"

We use only a few cookies, and none of them tracks you:

• sign-in cookies set by our authentication provider, Supabase. One keeps you signed in; a large session may be split across a few numbered cookies, and it lasts up to 400 days unless you sign out. The other is a security cookie set when you sign up, sign in with Google, or reset your password. It holds only a random one-time code and can stay in your browser after it has been used; and
• one functional cookie that returns you to the right page — for example, a team invitation — after you confirm your email address. It expires within 24 hours.

Our hosting provider, Cloudflare, may also set a strictly necessary security cookie if it needs to check that a visitor is not a bot.

We set no analytics, advertising, or tracking cookies, and we use no third-party analytics, error-monitoring, session-replay, or ad-tech tools anywhere on the Service. Emails we send may contain a small image that lets our email provider record when the email is opened. We use this only to show creators whether their survey invitations were opened, and many email apps let you block these images. Some things are stored in your browser's local storage and stay in your browser: your preferences and UI state; a history of the AI requests you make in the survey builder (your instructions, the AI's proposed changes, and their cost); and, on surveys limited to one response per device, a note that you already responded.

You can block or delete cookies in your browser settings. Blocking the session cookie will prevent you from signing in.

Do Not Track and Global Privacy Control. We do not track users across other websites, and we do not sell or share personal information — so there is nothing for these signals to opt out of, and every visitor already receives the treatment these signals request. Our site therefore does not change its behavior in response to Do Not Track or Global Privacy Control signals. If our practices ever change, we will update this Policy and honor applicable opt-out preference signals as the law requires.

9. Your privacy rights

Everyone. You can access, correct, or delete your account information. In Settings you can update your name, password, two-factor authentication, and billing details, and delete your account (see Section 7.1). For a copy of your data, a change of email address, or anything else, email support@surveykiller.com. We verify requests before acting on them.

California residents. This Policy is our notice under the California Online Privacy Protection Act (CalOPPA). As an early-stage company, we do not currently meet the CCPA/CPRA thresholds that define a regulated "business" (for example, $25 million in annual revenue or data on 100,000 or more consumers). We nonetheless voluntarily honor CCPA-style requests from anyone: the right to know/access, correct, and delete your personal information, and the right to opt out of sale or sharing — though there is nothing to opt out of, because we do not sell or share personal information. We will never discriminate against you for making a privacy request. Email support@surveykiller.com and we will respond within a reasonable time, and within any legally required deadline that applies.

Survey respondents. If your request concerns answers you submitted to someone's survey, the survey creator controls that data — contact the organization that ran the survey. We will assist them in fulfilling your request. If you cannot identify or reach them, email us and we will help route your request.

Outside California and the U.S. We honor similar rights where other laws apply to us. We do not currently target the EU or UK; if that changes, we will first update this Policy with the required disclosures and transfer mechanisms.

10. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has given us personal information, email support@surveykiller.com and we will delete it. If you create surveys that may reach children, you are responsible for complying with the laws that apply (for example, COPPA); see Section 5.6 of the Terms of Service.

11. Where we process data

We are a U.S. company. We store data in the United States using the U.S.-based providers listed in Section 6. Our hosting provider, Cloudflare, runs the Service on its global network, so your requests may pass through a Cloudflare data center outside the U.S. on their way to our U.S.-hosted database. If you use the Service from outside the U.S., you understand that your information is processed in the U.S.

12. Changes and contact

We may update this Policy. We will post the new version with its effective date, and for material changes we will give additional notice (for example, by email or in-product) before the change takes effect. Questions or requests: support@surveykiller.com, or Eigenlume LLC, 2108 N St, Ste N, Sacramento, CA 95816.

Last legal review: 2026-07-06. Last updated: 2026-10-05. Effective date: October 5, 2026.