Privacy policy

SurveyOwl handles two kinds of personal data: details about the people who build forms, and the answers people give when they fill one in. This page covers both.

Last updated

Who is who

The person or team who builds a form decides what it asks and what happens to the answers. For those answers, they are the controller of the data and SurveyOwl processes it on their behalf. For account, billing and usage data about the form builder, SurveyOwl is the controller.

What we collect from form builders

  • Account details: your email address, name, password hash or Google sign-in identifier, and timezone.
  • Workspace data: forms, templates, settings, integrations you connect, and the members you invite.
  • Billing data: your plan and subscription status. Card details are entered with our payment provider and never reach our servers.
  • Usage data: pages visited, features used and errors, collected with product analytics while you use the site and the app.

What we process for respondents

When someone answers a form, we store their answers and any files they upload, and we record basic delivery details such as the time of submission. We do not use respondent answers for advertising, and we do not sell them.

Services that handle data for us

  • Paddle processes subscription payments and tax as our merchant of record.
  • Cloud hosting and object storage hold the application, database and uploaded files.
  • PostHog provides product analytics, error tracking and feature flags.
  • Google provides sign-in, optional address autocomplete and, where a form enables it, reCAPTCHA. hCaptcha and Cloudflare Turnstile are offered as alternatives.
  • Razorpay processes payments collected through a form’s Payment block, under the form owner’s own account.
  • Integrations you switch on, such as Google Sheets, Slack, Notion, Airtable, Discord, Telegram, Zapier and webhooks, receive the responses you route to them.

Cookies and local storage

We use a session cookie to keep you signed in and small local-storage entries for preferences such as your panel theme. Analytics may set an identifier to recognise a returning browser. Public forms embedded on other sites do not read your account session.

Your choices

You can edit your account details in settings and delete forms and responses you own. To ask for a copy of your data, a correction, or deletion of your account, write to hello@surveyowl.co. If you answered someone else’s form, contact that form’s owner first, as they decide what is kept.

Changes

We will update this page when what we collect or who handles it changes, and the date at the top will move with it.