Privacy Policy

1. Introduction

SurveyPunk (“we”, “our”, or “us”) operates the survey engine and research platform at surveypunk.io and its related subdomains. We respect your privacy and are committed to protecting the personal data of our users, researchers, and survey respondents.

This Privacy Policy explains what information we collect, how it is used, how survey data is secured, and your rights regarding your data.

2. Research Data Ownership & Confidentiality

Your research, questionnaires, and respondent data belong exclusively to you.

• Questionnaire Documents: When you upload Word (.docx) or text-based PDF briefs, they are processed solely to extract questions, routing, and logic blocks for your survey project.
• No Public Model Training: We do not use your proprietary questionnaires, survey instruments, or respondent submissions to train publicly accessible machine learning models.
• Respondent Confidentiality: Survey responses collected via SurveyPunk hash links are stored securely and made available exclusively to the project owner and designated team members.

3. Information We Collect

• Account Information: When registering for an account, we collect your name, business email address, and hashed credentials.
• Survey Content: Questions, answer choices, skip logic rules and validation criteria created manually or uploaded.
• Respondent Submissions: Responses entered into active surveys fielded via our platform.
• Billing Information: Payments are processed securely via verified third-party payment gateways (e.g., Razorpay). We do not store sensitive credit/debit card numbers on our servers.
• Technical & Telemetry Data: Response records may include an IP address and contact details requested by the researcher. Optional Google Analytics measures public acquisition pages only after consent; research screens, survey answers, project names, and URL queries are excluded. Internal customer activation and paid-plan milestones are stored in our database. You can change analytics preferences on public pages.

4. How We Use Your Information

We use collected data solely to:

• Provide, maintain, and improve the SurveyPunk survey engine and Spunk AI extraction tools.
• Compile and execute conditional routing, skip logic, and termination rules.
• Generate color-coded Excel data exports and analytical summaries.
• Process billing transactions, support billing queries and prevent fraudulent use.
• Communicate platform updates, security alerts, and customer support messages.

5. Data Protection & Security

We implement industry-standard administrative, technical, and physical safeguards to protect your data:

• The hosted service uses HTTPS for transport.
• Database and hosting safeguards depend on the configured service providers.
• Server-side access checks limit project data to its owner and assigned team members.
• Account approval, suspension, reactivation and session revocation require owner access and create audit entries.

6. Third-Party Service Providers

We engage select trusted infrastructure vendors to operate our service:

• Cloud Hosting & CDN: Vercel (Edge delivery and serverless infrastructure).
• Database Services: PostgreSQL stores account, survey, response and billing records.
• Spunk AI Inference: Groq processes questionnaire content for requested Spunk AI imports/generation and answer content for requested summaries. Do not include unnecessary personal or patient identifiers. Provider retention and contractual terms must be reviewed for your research requirements.
• Account Email: Signup review notifications go to the platform owner. Account verification, approval and recovery messages use a configured email delivery provider; delivery setup is pending during controlled launch.
• Payment Processing: Razorpay for compliant payment transactions.

7. Your Rights & Data Control

Depending on your jurisdiction (including GDPR, UK GDPR, and India DPDP regulations), you have rights to access, rectify, export, or delete your personal data. You may request a complete export of your surveys and response datasets or request account deletion at any time by contacting our support team.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact our privacy compliance desk at: