Survey Blaster Privacy Policy
Effective date: 1 October 2026 · Previous versions: [LINK TO ARCHIVE]
Summary
- We collect what we need to run your account and our website, and we process survey responses only on behalf of the customer who created the survey.
- We do not sell personal information, and we do not use survey content or responses to train AI models.
- Our servers are in the United States (Amazon Web Services, us-east-1). We protect transfers with legal safeguards described below.
- You can access, correct, delete or export your data. If you answered a survey, contact the person or organisation that sent it.
- Questions: [email protected]
1. Who we are
Survey Blaster is provided by Audentia LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, United States ("Survey Blaster", "we", "us"). We are the controller of the personal data described as ours in section 2.
[EU representative: [NAME, ADDRESS, EMAIL]. UK representative: [NAME, ADDRESS, EMAIL].]
2. Our two roles
We handle personal data in two different roles, and your rights work differently in each.
| Whose data | Examples | Our role | Who to contact |
|---|---|---|---|
| Customers and their users (account holders, team members, translators, client guests) | Name, email, billing details, settings, support messages | Controller: we decide how this data is used | Us |
| Website visitors and prospects | Pages visited, cookie data, newsletter or demo requests | Controller | Us |
| Survey respondents and contacts that customers upload | Survey answers, response metadata, contact lists | Processor: we act on the customer's instructions | The survey creator first; we will help |
If you answered a survey: the organisation or person who created it decides what it collects and why. Please contact them to exercise your rights. If you can't identify or reach them, email us at [email protected]. We will forward your request to them or tell you who they are.
3. Personal data we collect
From customers and their users
- Account details: name, email address, password (stored hashed) or one-time sign-in codes, workspace and project names, role.
- Billing details: plan, invoices, billing address and tax ID. Card details are handled by our payment processor, Stripe, and we don't store full card numbers.
- Sender settings: if you connect your own mail server, its address and credentials.
- Usage data: features used, log-ins, device and browser type, IP address and error logs.
- Communications: support requests, feedback and survey responses you send us.
From website visitors
- Pages viewed, referring site, device and browser information, approximate location from IP address, and cookie identifiers (see section 6).
- Details you give us in forms, such as a newsletter sign-up or a demo request.
Processed for customers (survey data)
- Survey content, including questions, images and video links.
- Responses: answers, including free text, uploaded locations and any personal data respondents choose to give.
- Response metadata: start and finish time, duration, device, browser, operating system, referring page, the collector link used, language chosen and IP address. Survey creators can choose to store IP addresses in full, truncated or not at all, and can turn on anonymous mode.
- Contacts: names, email addresses, custom fields and unsubscribe status in lists that customers import.
4. How we use personal data, and our legal bases
This section covers data we control. For survey data, we act only on the customer's instructions and under our [Data Processing Agreement].
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and run your account, provide the service and support | Account, usage, sender settings, communications | Performance of our contract with you |
| Take payment, issue invoices, keep tax records | Billing details | Contract; legal obligation |
| Keep the service secure, prevent fraud, spam and abuse, and enforce our Acceptable Use Policy | Usage data, IP addresses, account data | Legitimate interests (protecting users, respondents and our service) |
| Improve the service using usage statistics | Aggregated usage data (not survey content or responses) | Legitimate interests |
| Send service and billing notices, including renewal reminders | Account and billing details | Contract; legal obligation |
| Send product news and offers | Email address | Consent, or legitimate interests for existing customers where the law allows; you can opt out anytime |
| Run non-essential website cookies and analytics | Cookie and device data | Consent where required |
| Comply with law and respond to lawful requests | Any relevant data | Legal obligation |
5. Artificial intelligence
We do not use survey content, responses or contact lists to train artificial intelligence or machine-learning models, whether ours or anyone else's. If we ever introduce AI features, we will update this policy and notify customers before any change to this commitment.
6. Cookies and similar technologies
Our website and app use essential cookies to keep you signed in and secure. With your consent where the law requires it, we also use analytics cookies to understand how our website is used. You can change your choices at any time in [COOKIE SETTINGS].
Surveys may use essential cookies or similar browser storage, for example to save progress, prevent duplicate responses or remember a respondent's language. If a survey creator chooses Google Fonts or social sharing buttons, those providers may receive the respondent's IP address. See our [Cookie Notice] for details.
7. Who we share personal data with
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
We share personal data only with:
- Service providers (subprocessors) who help us run Survey Blaster, such as hosting (Amazon Web Services), email delivery, payment processing and analytics. They may use the data only to provide their services to us. Our current list is at [SUBPROCESSOR PAGE LINK].
- The customer who created a survey, who controls the responses and contacts in their workspace, and anyone they invite, including team members, translators and client guests.
- Authorities, where the law requires it or where needed to protect rights, safety or property. Where we lawfully can, we will tell the affected customer first.
- A buyer or successor if we are involved in a merger, acquisition or sale of assets, under confidentiality and with this policy continuing to apply.
8. International transfers
Our servers are in the United States (AWS, us-east-1, Virginia). Our personnel may also access data remotely from outside the United States, under the safeguards described in this policy. So your data may be processed outside the country where you live.
Where the law requires safeguards for these transfers, we use:
- [the EU-US Data Privacy Framework and its UK and Swiss extensions, if we self-certify, and] the European Commission's Standard Contractual Clauses, for data from the EU, EEA and Switzerland;
- the UK International Data Transfer Addendum, for data from the UK;
- equivalent safeguards required by other applicable laws.
You can ask us for a copy of the relevant safeguards at [email protected]. Standard plans are hosted in the United States. Enterprise customers can choose EU or dedicated hosting.
9. How long we keep data
| Data | How long |
|---|---|
| Account data | While your account is active, then [12] months after it closes, unless the law requires longer |
| Billing and tax records | For the period tax and accounting laws require, currently [7] years |
| Survey content, responses and contacts | As long as the customer keeps them. Customers can set responses to delete or anonymise automatically after 1 to 120 months. After an account ends, we keep survey data for 30 days so the customer can export it, then delete it within 90 days |
| Backups | Overwritten on a rolling basis and purged within 6 months |
| Website analytics | [26] months |
| Marketing preferences | Until you unsubscribe; we then keep your email on a suppression list so we don't contact you again |
10. How we protect data
We use technical and organisational measures appropriate to the risk, including:
- encryption of sensitive survey answers;
- tools for customers to encrypt, mask or exclude personal-data fields, truncate or drop IP addresses, run anonymous surveys and keep personal answers hidden in reports until revealed;
- role-based access for team members, translators and client guests, and sign-in by emailed one-time code;
No system is completely secure. [We do not currently hold a SOC 2 or ISO 27001 certification.]
11. Data breaches
If a personal data breach affects you, we will tell you without undue delay. Where the law requires it, we will notify the relevant regulator, usually within 72 hours of becoming aware of the breach. When we act as a processor, we will notify the affected customer without undue delay and in any event within 48 hours of confirming the breach.
12. Your rights
Depending on where you live, you may have the right to:
- know what personal data we hold about you and get a copy;
- correct inaccurate data;
- delete your data;
- object to or restrict certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing;
- not be subject to decisions based solely on automated processing (we don't make such decisions);
- complain to a data protection regulator.
How to make a request: email [email protected] or use [REQUEST FORM LINK]. We may confirm your identity, usually by sending a code to the email address on your account. Requests are free unless the law allows a fee. We aim to respond within 30 days, and always within the time the law allows [CHECK with counsel]. Survey respondents should contact the survey creator first (see section 2).
EU, EEA, UK and Switzerland. Our legal bases are listed in section 4. You can complain to your local supervisory authority or, in the UK, the Information Commissioner's Office (ico.org.uk). [Our EU and UK representatives are named in section 1.]
United States. We do not sell or share personal information for targeted advertising. Depending on your state, you may have rights to know, correct, delete and opt out, and not to be discriminated against for using them. Make requests using the contact details above. An authorised agent may make a request on your behalf with proof of authorisation.
13. Children
Survey Blaster accounts are for people aged 18 and over. Customers who survey children are responsible for getting verifiable parental or guardian consent and following child-protection laws. If you believe we hold a child's data without proper consent, contact us and we will help remove it.
14. Sensitive data
We don't ask our customers or website visitors for sensitive data such as health, religion or ethnicity. Customers who collect sensitive data in surveys must have a lawful basis and, where required, explicit consent. We recommend turning on field encryption for those questions.
15. Changes to this policy
We will post any changes here and update the effective date. If changes are material, we will email account holders at least [30] days before they take effect. Earlier versions are available at [ARCHIVE LINK].
16. Contact us
Survey Blaster · 30 N Gould St Ste R, Sheridan, WY 82801, United States · +1 (307) 800-1934
Privacy and data-protection requests: [email protected]