1. Scope
This policy applies to the Estebyan Global Platform website, accounts, survey authoring tools, response experiences, analytics, workflows, and related support communications. It does not govern third-party websites or services that link to Estebyan but operate under their own terms.
2. Our data roles
When an organisation or account holder creates a survey, that customer decides what questions to ask, who should respond, and how responses will be used. The customer is generally the controller of that survey data, and Estebyan processes it on the customer’s instructions.
Estebyan acts as a controller for information needed to operate the service itself, such as account, subscription, security, website, and support information. If you are a respondent with a question about a survey, contact the organisation that invited you first.
3. Information we collect
Account and workspace information
We may collect your name, email address, phone number, country, organisation, role, login and verification records, subscription details, and workspace settings.
Survey and response information
Customers may upload survey questions, media, respondent lists, linked data, and files. Responses may include answers, attachments, drafts, comments, workflow updates, and information the survey author chooses to request.
Technical and usage information
We may collect browser and device details, language, approximate or submitted location, IP address, access times, page hits, feature usage, storage and service consumption, diagnostic events, and security audit records. Survey authors control whether optional collection methods, such as location or OTP verification, are used.
Support and communications
We collect information you provide when you ask for support, report a problem, request a demonstration, or communicate with us.
4. How we use information
We use information to:
- provide survey creation, distribution, collection, analysis, export, and workflow functions;
- create and secure accounts, verify contact details, recover access, and enforce permissions;
- manage subscriptions, plan limits, storage, and third-party service usage;
- send requested invitations, reminders, confirmations, and service notices;
- operate, troubleshoot, protect, and improve Estebyan;
- detect abuse, preserve audit records, and comply with legal obligations; and
- provide AI-assisted features when an authorised user chooses to use them.
Where applicable, we rely on performance of a contract, legitimate interests in operating and securing the service, consent, and compliance with legal obligations. Customers are responsible for selecting an appropriate legal basis for the surveys they run.
6. International transfers
Estebyan is designed for global use. Information may be processed in countries other than the one where it was collected. We use contractual, organisational, and technical safeguards required for applicable cross-border transfers. Custom arrangements may be available where a customer has specific regional requirements.
7. Retention and deletion
We retain information for as long as needed to provide the service, meet the customer’s configured retention requirements, maintain security and audit records, resolve disputes, and comply with law. Survey authors can delete surveys and selected responses subject to permissions and retention controls. Backups are removed according to their rotation schedule.
When an account closes, we delete or de-identify information within a reasonable period unless continued retention is required by law, an unresolved claim, or the customer’s documented instructions.
8. Security
We use measures designed to protect information in transit and at rest, isolate tenant data, restrict administrative access, scan uploaded files, protect public endpoints, and record sensitive changes. No online service can guarantee absolute security. Account holders should use strong credentials and promptly report suspected unauthorised access.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, or withdraw consent. Account holders can update certain information within Estebyan. Respondents should normally submit requests to the organisation that created the survey.
We may need to verify your identity before acting on a request. You may also have the right to complain to your local data protection authority.
Cookies
We use cookies and similar storage needed for account sessions, security, language, and service operation. If optional analytics or marketing cookies are introduced, we will provide any notice and choice required by applicable law.
Children
Estebyan is not directed to children for independent account creation. Customers that survey children must have an appropriate legal basis, provide required notices, and obtain any necessary consent.
10. Changes and contact
We may update this policy as Estebyan, our providers, or legal requirements change. We will post the revised date and provide additional notice when a material change requires it.
For privacy questions or requests, email [email protected]. Include enough detail for us to understand the request, but do not send passwords or sensitive survey answers by email.