Everyone
Privacy Notice
Effective October 18, 2026
At a glance
- We collect what we need to run surveys, pay participants and bill customers, and nothing for advertising.
- We do not sell personal data or share it for cross-context behavioural advertising.
- When a business runs a survey on SurveyHood, that business decides what it asks; we process the answers on its behalf.
- Businesses that buy responses never receive participants’ names or contact details.
- You can download your data or delete your account yourself from your account settings.
This summary is for convenience. The full text below is what applies.
1. Who is responsible for your data
SurveyHood, based in McKinney, Texas, USA, is responsible for the personal data described in this notice when we decide why and how it is used: for example, account details, billing, the participant panel, our website and support.
When a business or organisation (“customer”) uses SurveyHood to run a survey or form, the customer decides what to ask and what to do with the answers. For those responses the customer is responsible (the “controller”) and SurveyHood processes them only on the customer’s instructions under our Data Processing Addendum. If you answered a survey sent to you by a business, please contact that business about your answers; we will help them respond.
2. What we collect
| Who | What we collect |
|---|---|
| Business customers | Name, work email, organisation name, team membership and role, sign-in records, plan and billing history (card details are collected and held by Stripe, not by us), support messages, and the settings and content of your workspace. |
| Panel participants | Email address, sign-in records, country, year of birth, region and postal code, preferred language, optional profile answers (such as gender, employment, education, household size and income band, devices and industry), survey assignments and answers, quality review outcomes, wallet and payout records including your PayPal email, referral records, and hashed device and network identifiers used to detect duplicate accounts. |
| Survey respondents | Whatever the survey asks (decided by the customer). Technical data needed to run the survey: a session identifier stored in a cookie, the country your connection comes from, and, unless the survey is set to anonymous mode, a hashed device fingerprint and your browser’s user-agent string. If you were invited by email, the invitation record. |
| Free tool users | Poll questions and options, anonymous votes with a random browser identifier and a one-way hash of the connection (to limit repeat voting), and the goals and settings typed into the AI survey generator or NPS maker together with the draft survey. No account or contact details are needed. |
| Website visitors | Basic request logs kept by our host, and first-party analytics events on a few pages (for example, which pricing option was viewed) linked to a random identifier in your browser, never to your name or email. Waitlist sign-ups give us an email address and country. |
3. How we use it
- To provide the service: run accounts, host surveys, collect and analyse responses, and produce exports. (Necessary to perform our contract with you.)
- To match participants with surveys using profile answers, and to pay rewards. (Contract.)
- To keep data trustworthy: quality-check responses, detect duplicate or fraudulent accounts, prevent abuse and secure the service. (Our legitimate interest in a reliable service, and the customer’s interest in genuine responses.)
- To bill customers and keep financial records. (Contract and legal obligation.)
- To communicate: service messages, survey invitations a customer asks us to send, survey-match emails to participants who opt in, and replies to support requests. (Contract, consent for optional emails.)
- To improve the product: aggregate, first-party analytics about how our website is used. (Legitimate interest. We honour Global Privacy Control and Do Not Track signals by switching it off.)
- To meet legal obligations, such as tax, accounting and responding to lawful requests.
We do not use personal data for targeted advertising, we do not sell it, and we do not make decisions with legal or similarly significant effects about anyone by automated means alone: every rejection of a paid response is made by a person.
4. AI features
Some optional features send survey text and response data to our AI provider to generate drafts, translations, summaries and themes. What is sent, and for how long it is kept, is explained in our AI Features Notice.
6. Where data is stored
SurveyHood is operated from the United States and our main service providers store data in the United States. If you use SurveyHood from another country, your data will be transferred to and processed in the United States. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses with our providers.
7. How long we keep it
An automated job deletes or anonymises data when these periods end:
| Data | Kept for |
|---|---|
| Survey responses and results | For as long as the survey owner keeps the survey; deleted when the survey or the account is deleted |
| Email addresses on invitation lists | Cleared when the survey closes, and at the latest 90 days after it closes |
| Abandoned (unsubmitted) survey sessions | 90 days |
| Participant profile and targeting answers | Until the participant deletes their account (30-day cooling-off), then anonymised |
| Earnings ledger, payout and invoice records | 7 years (tax and accounting law), with the person's identity removed on account deletion |
| Quality / screening event detail | 18 months |
| AI assistant inputs and outputs | 90 days (usage counts are kept) |
| Webhook delivery logs | 90 days |
| Price quotes that were not ordered | 30 days after the quote expires |
| Site analytics (no personal data) | 14 months |
| Free poll questions and votes | 12 months after the poll closes (or after creation if it never closes); the creator can delete it sooner |
| Drafts from the free AI survey generator and NPS maker | 30 days unless saved to an account |
| Support tickets | 24 months after the ticket is closed |
| Security and rate-limit counters | 24 hours |
| Audit log | Kept (security record, no message content) |
8. Your choices and rights
Depending on where you live (for example under the California Consumer Privacy Act, the Texas Data Privacy and Security Act, other US state laws, or the GDPR and UK GDPR), you may have the right to access, correct, delete or receive a portable copy of your personal data, to object to or restrict some uses, to withdraw consent, and to opt out of sale, sharing for targeted advertising and profiling. We do not sell or share data for targeted advertising, so there is nothing to opt out of there, but we honour Global Privacy Control signals anyway.
- Download your data: Account or Profile page → Download my data (a JSON file).
- Delete your account: from the same page. A 30-day cooling-off period applies; then your profile and personal details are removed and financial records are kept without your identity for the legally required period.
- Correct your details: edit your profile in the app. Fixed fields such as country and year of birth are corrected through support.
- Stop optional emails: turn off survey-match emails in your profile.
- Anything else: email privacy@surveyhood.com or open a privacy ticket from the Support page.
We will respond within the time the law requires (usually 30 or 45 days) and will not treat you differently for exercising your rights. We may need to verify your identity first. You may use an authorised agent where the law allows. If we decline your request you can appeal by replying to our decision; if you are still unhappy, you can contact your state attorney general or local data protection authority.
9. Security
We protect data with encryption in transit and at rest, database-level access rules that isolate each customer’s data, extra encryption for invitation email addresses, and an audit log of privileged actions. No system is perfectly secure, so we also limit what we collect and how long we keep it. More detail is on our Security page.
10. Children
SurveyHood accounts and the participant panel are for adults (18+). We do not knowingly collect personal data from children under 13. Customers must not use SurveyHood to collect personal data from children unless they comply with the Children’s Online Privacy Protection Act (COPPA) and similar laws, including obtaining verifiable parental consent. If you believe a child has given us personal data, contact privacy@surveyhood.com and we will delete it.
11. Changes and contact
We will post updates here with a new effective date and tell account holders about material changes before they apply.
Contact: privacy@surveyhood.com · SurveyHood, McKinney, Texas, USA.
Questions about this document? Email support@surveyhood.com, or privacy@surveyhood.com for privacy matters.