SurveyNode

Privacy Policy

Last updated: September 7, 2026

Privacy Policy

Last Updated: January 2026

1. Introduction

ESJ Software Ltd ("we", "us", "our") operates the SurveyNode platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting your personal data in compliance with:

  • UK Data Protection Act 2018 (DPA 2018)
  • EU General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA) and other US state privacy laws

2. Data Controller

ESJ Software Ltd
Email: privacy@surveynode.com

For EU/UK residents, we act as both data controller (for platform operations) and data processor (for survey data collected on behalf of our customers).

3. Information We Collect

3.1 Account Information


  • Email address
  • Full name
  • Organization name
  • Password (encrypted)

3.2 Survey Response Data


  • Responses to survey questions
  • Respondent identifiers (as configured by survey creators)
  • Conversation messages in AI-powered surveys
  • Device and browser information
  • IP addresses

3.3 Usage Data


  • Pages visited
  • Features used
  • Survey creation and management activities

4. Legal Basis for Processing (GDPR Article 6)

We process personal data under the following legal bases:

  • Contract Performance: To provide our services to registered users
  • Legitimate Interests: For platform security, fraud prevention, and service improvement
  • Consent: For optional features like marketing communications
  • Legal Obligation: To comply with applicable laws

5. How We Use Your Information

  • Provide and maintain our services
  • Process survey responses
  • Send service-related communications
  • Improve our platform
  • Detect and prevent fraud
  • Comply with legal obligations

6. Data Retention

  • Account data: Retained while your account is active, plus 30 days after deletion
  • Survey responses: Retained according to the survey creator's settings, maximum 7 years
  • Usage logs: Retained for 90 days

7. Data Sharing

We may share data with:

  • Service providers: Cloud hosting (Railway), AI processing (Anthropic)
  • Survey creators: Responses to their surveys
  • Legal authorities: When required by law

We do not sell your personal data.

8. International Data Transfers

For EU/UK residents, data may be transferred to countries outside the EEA. We ensure appropriate safeguards through:

  • Standard Contractual Clauses
  • Adequacy decisions where applicable

9. Your Rights

GDPR/UK DPA Rights


  • Access: Request a copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests

CCPA Rights (California Residents)


  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale (we do not sell data)
  • Right to non-discrimination

To exercise your rights, contact: privacy@surveynode.com

10. Cookies

We use cookies for authentication and platform functionality. See our Cookie Policy for details.

11. Data Security

We implement appropriate technical and organizational measures including:

  • Encryption in transit (TLS) and at rest
  • Access controls and authentication
  • Regular security assessments
  • Incident response procedures

12. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect data from children.

13. Complaints

You have the right to lodge a complaint with a supervisory authority:

  • UK: Information Commissioner's Office (ICO)
  • EU: Your local Data Protection Authority
  • US: FTC or your state Attorney General

14. Updates to This Policy

We may update this policy periodically. We will notify you of material changes via email or platform notification.

15. Contact Us

For privacy-related inquiries:
Email: privacy@surveynode.com