Privacy Policy

What we collect

• Account information: email address, display name, and profile photo via secure authentication (email/password or Google OAuth).
• Workspace data: teams, surveys, assignments, responses, and any text or form data you create.
• Media files: photos, videos, and audio recordings you upload or capture through the app.
• Location data: GPS coordinates are collected in two ways: (1) when you submit responses to location-required survey questions, stored with the related response, and (2) when you log in or log out of the workspace as a team member, stored in activity logs visible to workspace owners for team management and oversight purposes.
• Payment information: billing details processed securely through Stripe (we do not store full credit card numbers).
• Device and usage data: IP address, browser type, device identifiers, app diagnostics, error logs, and performance metrics to improve reliability and security.
• Subscription data: plan type, billing interval, payment history, and usage metrics (surveys created, storage used, team members).

How we use data

• Authenticate you and maintain secure sessions.
• Provide and improve workspace features including team management, survey distribution, response collection, and report generation.
• Track team member activity, login/logout events, and location for workspace oversight and team coordination.
• Process payments and manage subscriptions.
• Monitor service performance, diagnose technical issues, and track error logs.
• Enforce usage limits based on your subscription plan.
• Prevent fraud, abuse, and unauthorized access.
• Communicate service updates, billing notices, and support responses.
• Comply with legal obligations.

Third-party services

We use trusted service providers to operate SurveyCrew.app:

• Firebase/Google Cloud: Authentication, database, file storage, and cloud functions (data may be stored on Google servers globally).
• Stripe: Payment processing and subscription management.
• Sentry: Error tracking and application monitoring.
• Upstash: Rate limiting and abuse prevention.

These providers are contractually required to protect your data and may only use it to provide services to us. We do not sell your personal information to third parties.

Data security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), secure authentication tokens, Firebase security rules, rate limiting, input validation, and regular security monitoring. However, no method of transmission over the internet is 100% secure.

Data retention and deletion

• Account and workspace data are retained while your account is active.
• Payment records are kept for 7 years to comply with financial regulations.
• Error logs and diagnostics are retained for 90 days.
• Account deletion process: You may request account deletion at any time through your account settings. When you request deletion:
  • Your account will be scheduled for deletion 30 days from the request date (grace period).
  • During the 30-day grace period, you can cancel the deletion request and restore your account at any time through your account settings.
  • Your account remains accessible and functional during the grace period.
  • After 30 days, your account and all associated data will be permanently deleted, including: profile information, surveys, teams, responses, uploaded media files, workspace settings, and subscription data.
  • Deletion is permanent and cannot be reversed after the 30-day grace period ends.
  • Some data may be retained if required by law (e.g., payment records for tax purposes).
• Backup copies may persist for up to 90 days in disaster recovery systems after permanent deletion.

International data transfers

Your data may be processed and stored on servers located in the United States and other countries where our service providers operate. By using SurveyCrew.app, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

Children's privacy

SurveyCrew.app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Your rights

• Access: Request a copy of your personal data.
• Correction: Update your profile information in-app or request corrections.
• Deletion (Right to Erasure): Request deletion of your account and data through your account settings. Deletion requests are subject to a 30-day grace period during which you can cancel the request. After 30 days, deletion is permanent and irreversible.
• Portability: Request export of your survey data.
• Opt-out: Disable location collection for survey responses by skipping location-required questions (submissions will remain incomplete). Note: Login/logout location tracking is automatic for all team members; if you wish to avoid this tracking, please contact your workspace owner about your team membership.
• Withdraw consent: Revoke permissions at any time through your account settings.

For EU/EEA residents: You have additional rights under GDPR, including the right to erasure with our 30-day grace period. For California residents: You have rights under CCPA including the right to know what personal information is collected and the right to opt-out of sale (we do not sell your data).

Data breach notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of discovering the breach.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact us

For questions, data requests, or deletion requests, contact us at hello@liveratech.com or through our contact form. We will respond to verified requests within 30 days.