1. Overview
FeedValue ("FeedValue," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our feedback collection platform and related services (the "Service").
This policy applies to:
- Customers: Businesses and individuals who create accounts and use FeedValue to collect feedback
- End Users: Individuals who interact with feedback widgets deployed by our Customers
- Website Visitors: Individuals who visit our website without creating an account
By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.
2. Information We Collect
2.1 Information from Customers
When you create a FeedValue account, we collect:
- Account Information: Name, email address, password (hashed), and profile information
- Organization Details: Company name, website URLs, and team member information
- Billing Information: Payment method details (processed by Stripe; we do not store credit card numbers)
- Configuration Data: Widget settings, integration preferences, and webhook URLs
- Usage Data: Login times, feature usage, and interaction with the dashboard
2.2 Information from End Users
When End Users submit feedback through Customer widgets, we collect:
- Feedback Content: The text, ratings, or selections submitted through the widget
- Page Context: The URL where the feedback was submitted
- Technical Data: Browser type, device information, and timestamp
- Optional Information: Email address or other contact information if voluntarily provided
Note: End User data is collected on behalf of our Customers. Customers are the data controllers for End User data, and FeedValue acts as a data processor. Please refer to the Customer's privacy policy for information about how they handle your feedback.
2.3 Information Collected Automatically
We automatically collect certain information when you visit our website or use the Service:
- Log Data: IP address, browser type, operating system, referring URLs, and access times
- Device Information: Device type, screen resolution, and unique device identifiers
- Analytics Data: Pages viewed, features used, and interaction patterns
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Service Delivery
- Provide, maintain, and improve the Service
- Process feedback submissions and display them to Customers
- Authenticate users and manage account access
- Process payments and manage subscriptions
- Send transactional emails (password resets, billing receipts)
3.2 Communication
- Respond to support requests and inquiries
- Send product updates and feature announcements (with consent)
- Notify you of changes to our terms or policies
- Send usage alerts and limit notifications
3.3 Analytics and Improvement
- Analyze usage patterns to improve the Service
- Generate aggregated, anonymized insights
- Detect and prevent fraud, abuse, and security issues
- Troubleshoot technical problems
3.4 Legal and Compliance
- Comply with legal obligations
- Enforce our terms of service
- Protect the rights and safety of FeedValue, our users, and others
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions that require a legal basis for processing personal data, we rely on the following:
Contract Performance
Processing necessary to fulfill our contractual obligations to you, including providing the Service, processing payments, and managing your account.
Legitimate Interests
Processing necessary for our legitimate business interests, such as improving the Service, ensuring security, and preventing fraud, where these interests are not overridden by your rights.
Consent
Processing based on your explicit consent, such as receiving marketing communications. You may withdraw consent at any time.
Legal Obligation
Processing necessary to comply with applicable laws, such as tax record retention requirements.
5. Information Sharing
We do not sell your personal information. We share information only in the following circumstances:
5.1 Service Providers
We share information with third-party service providers who perform services on our behalf:
- Stripe: Payment processing (PCI-DSS compliant)
- Cloudflare: Content delivery and DDoS protection
- Email Service Providers: Transactional and marketing emails
These providers are contractually obligated to use data only for the purposes we specify and to maintain appropriate security measures.
5.2 Customer Access to End User Data
Feedback submitted by End Users is shared with the Customer who operates the widget. Customers may export, analyze, and use this data according to their own privacy policies.
5.3 Legal Requirements
We may disclose information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure user safety.
5.4 Business Transfers
If FeedValue is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
6. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 30 days |
| Feedback Data | As configured by Customer (default: account duration) |
| Billing Records | 7 years (legal requirement) |
| Server Logs | 90 days |
| Analytics Data | 26 months (aggregated thereafter) |
You may request deletion of your data at any time, subject to legal retention requirements. See "Your Rights" below for more information.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal information.
Right to Erasure
Request deletion of your personal information (subject to legal retention requirements).
Right to Data Portability
Receive your data in a structured, commonly used, machine-readable format.
Right to Object
Object to processing of your data for direct marketing or based on legitimate interests.
Right to Restrict Processing
Request that we limit the processing of your personal information in certain circumstances.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.
For End Users: If you submitted feedback through a FeedValue widget, please contact the website or application where you provided feedback to exercise your rights. They are the data controller for your feedback data.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest
- Access Controls: Role-based access with least-privilege principles
- Authentication: Secure password hashing and optional two-factor authentication
- Infrastructure: Hosted on secure, audited cloud infrastructure
- Monitoring: Continuous security monitoring and incident response procedures
- Vendor Security: Third-party vendors are assessed for security compliance
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
10. International Data Transfers
FeedValue is based in the United States. If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.
For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on:
- Standard Contractual Clauses (SCCs): EU-approved contractual terms that ensure adequate protection
- Data Processing Agreements: Contracts with sub-processors that include appropriate safeguards
By using the Service, you consent to the transfer of your information to the United States and other countries that may have different data protection rules than your country.
11. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information.
If you believe we have inadvertently collected information from a child under 16, please contact us at [email protected].
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered Customers (for material changes)
- Updating the "Last updated" date at the top of this policy
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
For users in the EEA: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.