A. Information Related to Your Interaction with Zigpoll and the Offerings and communicating the Offerings.

Registration and Contact Information. We collect information about you when you (a) register to use the Services and (b) otherwise provide contact information to us via email, mail, or through our Offerings. This information you provide may include your username, first and last name, email address, mailing address or phone number.

Payment Information. When you purchase the Services, we will also collect transaction information, which may include your credit card information, billing and mailing address, and other payment-related information (“ Payment Information”). We describe how Payment Information may be collected and processed in Section 4.

Other Information.We may collect other information from you that is not specifically listed here. We may use any such information in accordance with this Privacy Policy or as otherwise permitted by you.

Legal Basis.Our Legitimate Interest. Zigpoll products work together to help sales, marketing, and support teams better communicate with customers. In order to engage visitors and leads we have a legitimate interest to collect relevant data and send messages based on this information. We consider your privacy and data protection rights when we pursue our legitimate interests and ensure that the way our Offerings work don't impact on those rights. For website visitors Zigpoll will store this data for 9 months, for sales and marketing leads Zigpoll will store this data until the individual opts out or where they have not engaged with Zigpoll in 24 months.

Legal Basis — Registered Account Holders. Once you register for the Services, we process your registration, contact and account information to perform our Customer Agreement with you. We also process aggregated and anonymized data derived from your own use of the Services — which does not identify you or any individual — to pursue our legitimate interest in operating, supporting and improving the Offerings, including generating industry benchmarks and best-practice guidance, as described in Section 3.5 (Aggregated Anonymous Data) of our Terms of Service. This is separate from, and does not extend to, the data of your own end users described in Section B below.

B. Customer Data.

You may submit various types of information and data into the Services for hosting and processing purposes (“Customer Data”). Customer Data may include, without limitation, (a) billing information, personal information such as names, email addresses, phone numbers, location and photos of your end user customers, potential customers and other users of and visitors to your websites, apps and other properties (e.g. Teammates' details (“People”), which information may be input into the Services by you or collected by the Services using Zigpoll tags, scripts and other code implemented on such properties, and (b) information contained in communications between you and People using the messaging features of the Services.

Our Role. Where Customer Data consists of information about People — the end users, customers and visitors of your own websites, apps or properties, including their survey responses — you are the controller of that data and Zigpoll acts solely as your processor, on your documented instructions, under our Data Processing Agreement. Zigpoll does not determine the purposes for which People's personal information is collected or used, and does not process it for any independent purpose of our own.

Legal Basis. We process and store Customer Data solely to perform our Customer Agreement with you and on your instructions as our processor; without this information, we wouldn't be able to provide our Offerings to you. We do not rely on our own legitimate interest, or any other independent legal basis, to process People's personal information — that determination is yours to make as controller.

Special-Category and Free-Text Information. We do not intentionally collect or process special categories of personal data (as defined in Article 9 GDPR). However, where your survey includes free-text or open-ended questions, People may voluntarily include such information in their responses. As the controller of that data, you are responsible for the design and wording of your survey questions and for establishing a lawful basis for any special-category information you choose to collect.

We use your information in the following ways:

• To provide, maintain and improve the Offerings and our other products and services, including to operate certain features and functionality of the Offerings (for example, by remembering your information so that you will not have to re-enter it during this or subsequent visits);
• To process your inquiries and otherwise deliver customer service;
• To process your payments, we share and use Payment Information as described in Section 4 (Payment Information);
• To control unauthorized use or abuse of the Offerings and our other products and services, or otherwise detect, investigate or prevent activities that may violate our policies or be illegal;
• To analyze trends, administer or optimize the Offerings, monitor usage or traffic patterns (including to track users’ movements around the Offerings) and gather demographic information about our user base as a whole;
• To communicate directly with you, including by sending you newsletters, promotions and special offers or information about new products and services. Your opt-out options for promotional communications are described in Section 6 (Your Controls and Choices);
• In the manner described to you at the time of collection or as otherwise described in this Privacy Policy.

We do not sell, trade, share or transfer your personal information to third parties except in the following limited circumstances:

• We may share your personal information with our parent companies, subsidiaries and affiliates;
• We may share your personal information with third-party service providers to permit such parties to provide services that help us with our business activities, which may include assisting us with marketing, advertising our product/service offerings, or providing, maintaining and improving the features and functionality of the Offerings, among other things. For example, we may provide personal information to our service providers for direct emailing of our newsletters or notifications of our product/service offerings. The data shared can include name, job title, email address, message history, company information. These providers fall into categories such as cloud hosting and database infrastructure, content delivery and network security, email and SMS delivery, payment processing, error and security monitoring, analytics, and AI-assisted analysis of survey data. All third parties are engaged under contract and obliged to meet appropriate security requirements and comply with all applicable legislation; the current list of sub-processors, their purpose and location is published in Schedule A of our Data Processing Agreement and on our Trust Center;
• We may share your personal information when we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process or enforceable governmental request, (b) enforce a Customer Agreement, including investigation of potential violations thereof, or (c) protect against imminent harm to our rights, property or safety, or that of our users or the public as required or permitted by law;
• We may share your personal information with third parties (including our service providers and government entities) to detect, prevent, or otherwise address fraud or security or technical issues;
• We may share your personal information with our business partners who offer a service to you jointly with us, for example when running a cross-promotion;
• We may share your Payment Information to process your payments, as further described in Section 4 (Payment Information);
• We may share and/or transfer your personal information if we become involved in a merger, acquisition, bankruptcy, or any form of sale of some or all of our assets; and
• We may share your personal information with a third party if we have your consent to do so.

We may also share aggregated or anonymized information with third parties for other purposes. Such information does not identify you individually, but may include usage, viewing and technical information such as the types of Offerings our customers and users generally use, the configuration of their computers, and performance metrics related to the use of Offerings which we collected through our technology. If we are required under applicable law to treat such information as personal information, then we will only disclose it as described above. Otherwise we may disclose such information for any reason.

Zigpoll is headquartered in the United States, and our service providers are located in the United States and other countries. As a result, personal information we collect may be transferred to, stored, and processed in the United States or other countries outside the European Economic Area (EEA), United Kingdom, or Switzerland, which may have data protection laws that are different from those in your country.

Where we transfer personal information out of the EEA, United Kingdom, or Switzerland, we rely on appropriate safeguards recognized under EU GDPR and UK GDPR, including the European Commission's Standard Contractual Clauses, the UK's International Data Transfer Addendum, the Swiss Federal Data Protection and Information Commissioner's adaptations, and, where applicable, certification of the recipient under the EU-U.S. Data Privacy Framework. The full mechanisms we rely on, and the safeguards each sub-processor has in place, are set out in Section 10 (International Data Transfers) and Schedule A of our Data Processing Agreement, and in our Transfer Impact Assessment. You can request more information about these safeguards by emailing [email protected].

We use an artificial-intelligence sub-processor to power certain AI-assisted features of the Services, including generating analytical summaries, themes and insights from survey data, answering natural-language questions about survey data, assisting with survey drafting, and detecting abusive or fraudulent content. Personal data is disclosed to that sub-processor for no other purpose.

We do not use Controller Personal Data, including survey responses, to train, fine-tune, or otherwise develop any artificial-intelligence or machine-learning model, whether our own or a third party's. Personal data disclosed to our AI sub-processor is transmitted with server-side storage disabled and is not used by that sub-processor to train or improve its models. Outputs generated by the AI sub-processor are returned to us, stored within our own infrastructure, and made available only to the relevant customer — never disclosed to any other customer.

Where a survey includes free-text responses, People may volunteer personal information in those responses, which may in turn be processed by our AI sub-processor as part of the AI-assisted features described above. The full detail of what is disclosed to our AI sub-processor, when, and under whose control, is set out in Section 4 (Artificial Intelligence and Model Training) of our Data Processing Agreement.

When you make a purchase on the Offerings, any credit card information you provide as part of your Payment Information is collected and processed directly by our payment processor Stripe through their Stripe Checkout service. We never receive or store your full credit card information. Stripe commits to complying with the Payment Card Industry Data Security Standard (PCI-DSS) and using industry standard security. Stripe may use your Payment Information in accordance with their own Privacy Policy here: https://stripe.com/us/checkout/legal.

The Offerings may also contain links to third party websites. This Privacy Policy applies solely to information collected by us. Even if the third party is affiliated with us through a business partnership or otherwise, we are not responsible for the privacy practices of such third party. We encourage you to familiarize yourself with the privacy policies of such third parties to determine how they handle any information they separately collect from you. Please be aware that we do not warn you when you choose to click through to another website when using the Offerings.

The Websites contain features that enable you to post reviews, comments or other content that is publicly viewable. You should be aware that any personal information you submit as part of those posts can be read, collected, or used by other visitors to the Websites, and could be used to send you unsolicited messages. We are not responsible for the personal information you choose to publicly post on the Websites.

Our Websites use cookies and similar technologies. For a full list of the cookies and technologies we use on www.zigpoll.com, why we use them, and how to manage your preferences, see our Cookie Policy.

The Zigpoll survey widget embedded on a customer's own website or app uses local and session storage — not third-party advertising cookies — to operate its own functionality, such as recognizing a repeat visit, preventing duplicate responses, and remembering in-progress answers. This storage is first-party to the customer's domain. If a customer enables additional analytics or tracking on the pages where surveys are displayed, that is the customer's own configuration as controller of that property, and is not covered by this Privacy Policy or our Cookie Policy.

You can remove or block certain cookies using the settings in your browser, but the Offerings may cease to function properly if you do so.

Website visitors and leads. As described in Section 1 (Information We Collect) above, we retain website-visitor data for 9 months, and sales/marketing lead data until you opt out or, if earlier, 24 months after your last engagement with Zigpoll.

Customer Data, including survey responses. Where you are our customer, we retain Customer Data (including People's survey responses) for the term of your Customer Agreement. Following termination, and on your written instruction, we delete Customer Data from production systems within 30 days of that instruction. Absent an instruction, we retain Customer Data in deactivated form for a 90-day grace period — so that an accidental termination or lapsed subscription can be reversed and any outstanding billing, dispute or legal matter resolved — and then permanently delete it from production systems, in any event within 12 months of termination. Encrypted backups follow our backup rotation schedule (a point-in-time recovery window of 7 days; snapshots retained for up to 12 months) and are used only for disaster recovery. We may retain data beyond these periods only where law requires it (for example, billing and tax records), in which case it is de-identified where possible and placed beyond ordinary use. The full detail is set out in Section 13 (Return and Deletion of Data) of our Data Processing Agreement.

Support, security and account data. We retain support correspondence, security logs and account records for as long as needed to provide the Offerings, maintain the security of our systems, and comply with our legal and contractual obligations, after which they are deleted or de-identified.

Opt-Outs. We may provide you with the opportunity to “opt-out” of having your personal information used for certain purposes when we ask for this information. If you decide to opt-out, we may not be able to provide certain features of the Offerings to you.

Communication Preferences. If you no longer wish to receive our newsletter and promotional communications, you may opt-out of receiving them by following the instructions included on such communications or on the Offerings. Please note, however, that you may be unable to opt-out of certain service-related communications.

Cookies. See Cookies and Similar Technologies above and our Cookie Policy for how to manage your preferences.

How We Respond to Do Not Track Signals. Your Web browser may have a “do not track” setting which, when enabled, causes your browser to send a do not track HTTP header file or “signal” to each site you visit. At present, the Offerings do not respond to this type of signal.

Data Subject Rights. You can access, rectify, erase, restrict or export your personal information at any time by emailing our privacy contact at [email protected]. You can object to our processing of your personal information at any time. We may first ask you for information to verify your identity (or your authority to act for someone else); we will not ask for more than is reasonably necessary for that purpose.

We respond without undue delay and at the latest within one month of receiving your request. Where a request is complex, or we have received a number of requests from you, that period may be extended by up to two further months — if so, we will tell you within the first month, together with the reasons for the delay.

Data collected through a customer's survey. Where your personal information was submitted through a survey or campaign run by one of our customers, that customer is the controller of the data and Zigpoll processes it on the customer's behalf. If you send such a request to us, we will pass it to the relevant customer promptly and assist them in responding; the substantive response will come from them.

Automated decision-making. Zigpoll does not make decisions based solely on automated processing that produce legal or similarly significant effects on you. If that ever changes, we will implement the safeguards required by the EU GDPR (Article 22) and the UK GDPR (Articles 22A–22D) — including the right to information about the decision, to make representations, to obtain human intervention, and to contest the decision — before doing so.

If you are unsatisfied with our response, you have the right to lodge a complaint with your supervisory authority — the Information Commissioner's Office in the UK, or the data protection authority of your EU member state (reachable directly or via our representatives below) — and to seek a judicial remedy.

In accordance with Article 27 of the EU GDPR and the UK GDPR, Argonautic Labs LLC (d/b/a Zigpoll) has appointed the representatives below. Individuals in the EEA and the United Kingdom, as well as supervisory authorities, may contact the relevant representative on any matter relating to our processing of personal data.

EU Representative — Instant EU GDPR Representative Ltd (attn: Adam Brogden), Office 2, 12A Lower Main Street, Lucan, Co. Dublin, K78 X5P8, Ireland. Email: [email protected].

UK Representative — GDPRLocal Ltd. (attn: Adam Brogden), 1st Floor Front Suite, 27–29 North Street, Brighton, England, BN1 1EB. Email: [email protected].

When you use the Offerings, we make good faith efforts to provide you with access to your personal information upon your request and either provide you the means to correct this information if it is inaccurate or to delete such information at your request if it is not otherwise required to be retained by law or for legitimate business purposes. You may access, review, correct, update, change or delete your information at any time. To do so, please contact us at [email protected] with your name and the information requested to be accessed, corrected or removed, or if you are using the Service, sign in to your account, go to your profile, and make the desired changes. We may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort (for instance, requests concerning information residing on backup tapes), jeopardize the privacy of others, would be extremely impractical, or for which access is not otherwise required. In any case where we provide information access and correction, we perform this service free of charge, except if doing so would require a disproportionate effort.

Please note that if you cease using the Service or we terminate your access to the Service in accordance with your Customer Agreement, you may no longer have the ability to access or update your information.

We may retain your information as necessary to support the Offerings, comply with our legal obligations or resolve disputes. Note that content you post may remain on the Offerings even if you cease using the Offerings or we terminate your access to the Offerings.

We reserve the right to change our Privacy Policy at any time. If we make changes, we will post them and will indicate on this page the policy’s new effective date. If we make material changes to this policy, we will notify you by email or through notice on the Offerings.

The Offerings are not intended for use by anyone under the age of 16, nor does Zigpoll knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, you may not attempt to register for the Offerings or send any information about yourself to us, including your name, address, telephone number, or email address. In the event that we confirm that we have collected personal information from someone under the age of 16 without verification of parental consent, we will delete that information promptly. If you are a parent or legal guardian of a child under 16 and believe that we might have any information from or about such child, please contact us at the email or mailing address provided at the end of this Privacy Policy.

The security of your personal information is important to us. We maintain a variety of appropriate technical and organizational safeguards to protect your personal information. We limit access to personal information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs. Further, we have implemented reasonable physical, electronic, and procedural safeguards designed to protect personal information about you. When you enter sensitive information (such as your password), we encrypt that information in transit using industry-standard Transport Layer Security (TLS) encryption technology. No method of transmission over the Internet, method of electronic storage or other security methods are one hundred percent secure. Therefore, while we strive to use reasonable efforts to protect your personal information, we cannot guarantee its absolute security.

If you have questions or need to contact us about this Privacy Policy, please email us at [email protected].