Legal

Privacy Policy

Effective Date: 16 August 2026  ·  Last Updated: 16 August 2026
Applicable Law: Information Technology Act, 2000; Digital Personal Data Protection Act, 2023 (India)

1. Who We Are

SurveyAny is operated by SurveyAny, based in West Bengal, India. We are a Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023 (DPDP Act). Contact: hello@surveyany.com

2. What Data We Collect

2.1 Account Data (when you register)

• Name, email address, password (hashed — never stored in plain text)
• Profile picture (optional)
• Google account details (if you sign in with Google)

2.2 Usage Data

• Forms, surveys, and quizzes you create
• Responses collected through your forms
• Device type, browser, IP address, and approximate location
• Pages visited, actions taken, and time spent on the platform

2.3 Respondent Data

When someone fills a form you created, we collect the answers they submit. Respondents do not need to create an account. We act as a Data Processor for this data on your behalf — you (the form creator) are responsible for informing respondents about data collection.

2.4 Payment Data

Payments are processed by Razorpay. We do not store credit/debit card numbers, UPI IDs, or bank details. Razorpay's Privacy Policy governs payment data.

2.5 Waitlist Data

If you join our waitlist, we collect your email address solely to notify you at launch. We do not share this with third parties.

3. How We Use Your Data

• To provide, operate, and improve our services
• To authenticate your account and keep it secure
• To send transactional emails (password reset, response notifications)
• To send product updates and announcements (you may opt out anytime)
• To analyse usage patterns and improve the platform
• To comply with legal obligations under Indian law

We do not sell your personal data to any third party. We do not serve third-party advertisements using your data.

4. Legal Basis for Processing (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, we process your data on the following bases:

• Consent: You consent when you register, fill a form, or join the waitlist
• Legitimate Use: Processing necessary to perform the service you requested
• Legal Obligation: Where Indian law requires retention or disclosure

5. Data Sharing

We share your data only in limited circumstances:

• Service Providers: Supabase (database hosting), Vercel (hosting), Cloudflare (CDN/storage), Razorpay (payments), Zoho (email) — all under data processing agreements
• Legal Requirements: If required by a court order, government authority, or applicable Indian law
• Business Transfer: If SurveyAny is acquired or merged, data may transfer to the new entity. You will be notified.

We do not share data with advertisers, data brokers, or marketing platforms.

6. Data Storage & Security

• All data is stored on servers located in India or within jurisdictions compliant with DPDP Act provisions
• Data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Passwords are hashed using bcrypt — we cannot recover your password
• We conduct periodic security reviews and vulnerability assessments
• In case of a data breach, affected users will be notified within 72 hours as required by law

7. Your Rights (DPDP Act 2023)

As a Data Principal under the DPDP Act, you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your account and associated data
• Grievance Redressal: Lodge a complaint with our Grievance Officer
• Nominate: Nominate a person to exercise rights in case of death or incapacity
• Withdraw Consent: Withdraw consent at any time (this will affect your ability to use the service)

To exercise any of these rights, email: hello@surveyany.com. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You may disable cookies in your browser settings, but some features may not function correctly.

9. Children's Privacy

SurveyAny is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us immediately at hello@surveyany.com and we will delete it promptly.

10. Retention

• Account data: retained until you delete your account
• Form responses: retained until the form creator deletes them
• Logs and analytics: retained for up to 12 months
• Legal compliance data: retained as required by applicable Indian law (typically 5–7 years)

11. Grievance Officer

As required under the IT Act 2000 and DPDP Act 2023, our Grievance Officer is:

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 7 days before taking effect. Continued use of the service after changes constitutes acceptance.

13. Contact

For any privacy-related queries: hello@surveyany.com