Privacy Policy
Last updated: July 6, 2026
⚠️ Draft — pending legal review
This document is a starting draft and has not been reviewed by legal counsel. It is not legally binding and must be reviewed and approved by a qualified attorney before publication.
This Privacy Policy explains how FeedbackHQ ("we", "us") collects, uses, shares, and protects personal information when you use our website and feedback management service (the "Service"). By using the Service you agree to the practices described here.
Information we collect
- Account information. When you register we collect your name, email address, and password (stored only as a secure hash), plus workspace details you provide.
- Feedback content. Requests, comments, and votes you submit. Guests who submit feedback provide a name and email address, which we store to attribute and follow up on their submission.
- Usage & device data. Log data such as IP address, browser type, and pages viewed, used to operate and secure the Service.
- Cookies & analytics. With your consent, we use analytics cookies to understand how the site is used. You choose whether to allow these via our cookie banner, and analytics do not load unless you accept. See Cookies below.
How we use information
- Provide, maintain, and improve the Service.
- Notify requesters about status changes and responses to their feedback.
- Secure the Service, prevent abuse, and comply with legal obligations.
- With consent, measure site usage to improve the product.
Legal bases (EEA/UK)
Where GDPR applies, we process personal data on the bases of contract (to provide the Service), legitimate interests (to secure and improve it), consent (for analytics cookies and certain communications), and legal obligation.
Sharing & subprocessors
We do not sell personal data. We share it with service providers who host our infrastructure, send transactional email, and (with consent) provide analytics, each bound to protect it. We may disclose information where required by law or to protect our rights.
Cookies
Strictly necessary cookies are used to operate the site. Analytics cookies load only after you accept them in our cookie banner; you can decline at any time and the site continues to work. We honor your choice via a stored consent preference.
Data retention
We retain personal data for as long as your account is active or as needed to provide the Service, then delete or anonymize it, subject to legal retention requirements.
Your rights
Depending on your location (including under GDPR and CCPA/CPRA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. Guests may request removal of feedback submissions tied to their email.
Security
We use industry-standard measures including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
International transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact
Questions about this policy or your data? Reach us via the contact section of our site. See also our Terms of Service.