Posted on: 2018-05-01
Last updated: 2018-05-24

Our sub-processors of data

In some cases we use 3rd party technologies and services, to deliver the best services to our Users, Respondents, and Visitors.

Data or Personal data may reach, be stored, or get processed by these services.

  1. Stripe

    To securely handle online payments, we use the best and most secure online payment system available, called Stripe. Stripe handles our online payments when users use their credit or debit cards.

    In our Stripe dashboard, we can see an overview of all transactions and users who have paid us, but this data is without provided credit/payment card information, as they are encrypted and safely stored in Stripe’s data centers.

    Risha Jamison
    Privacy Counsel | Stripe, Inc.
    185 Berry Street, Suite 550, San Francisco, California 94107
    Phone: (866) 620-8423

  2. PayPal

    To provide alternative ways of payment to our Customers we also use PayPal. Just like Stripe, we cannot see or access details about payment information, when payments are handled by PayPal.


    At the time of writing this document, we cannot verify if PayPal as an organization is compliant with the GDPR.

    Therefore, we do not recommend our users (specially citizens of EU who are protected by GDPR) to use PayPal for their payments, unless the users are fine with PayPal’s terms and privacy policy.

  3. DigitalOcean

    We store and safeguard Users’ data (registration and account information), survey data (information about User’s surveys, questions, etc.), and Response data (information that Respondents provide while participating in surveys and their uploaded files).

    This data is securely saved on our data centers hosted by DigitalOcean LLC, which are physically located in EU (Frankfurt Germany) and follow GDPR law. This data centers are also used for data storage in databases and as digital files, emails and for generating charts of collected responses, hosting our website.

    Alan Shapiro
    General Counsel | DigitalOcean, LLC
    101 Avenue of The America, New York, New York 10013 Phone: (347) 903-7918

  4. Firebase

    Our system uses a 3rd party service made by Google called Firebase. All of Firebase database are currently located in US only and currently they have no plans that we know of, to move them to Europe. Google LLC, including the Firebase products, is certified under both the EU-U.S. and Swiss-U.S. Privacy Shield frameworks and their certifications can be viewed on the Privacy Shield list. Firebase already complies with GDPR.

    Google Firebase is used as an intermediate database for storing surveys and responses, and data for charts. Before the data reaches and gets saved on our European servers, it is temporarily passed and processed through Google Cloud servers that abide by the European Union (EU) data protection directive.

    However, as soon as the data is processed there (which normally takes just a few seconds), it will be transferred and saved on our servers and immediately deleted form Google Cloud Servers.

    Keith Enright
    Director, Privacy Legal | Google LLC
    Google Data Protection Office
    1600 Amphitheatre Pkwy, Mountain View, California 94043
    Phone: 650-253-0000
    Fax: 650-618-1806

  5. LiveChat

    To provide a superior live chat support both to our users and website visitors we use a tool called Livechat. This application has an built in tracking system that provides us with some data and insights about users and their way of surfing our site or app.

    For more information refer to:
    Privacy Shiled Framework | LiveChat Inc.

    Katarzyna Janiszewska
    Lawyer | LiveChat Inc.
    One International Place, Suite 1400, Boston, Massachusetts 02110
    Phone: +1 617 275-2400

  6. Google Analytics

    Both on our website and in our app, we use a service from Google which is called Google Analytics. Google Analytics is used for tracking page views and user behaviour within SurveyLegend services. With intentions of improving user experience, identifying bottlenecks and pain points, improving performance and ease of use.

    Important to know that data is kept in Googles systems and is not used to track individual users only to get an overview of large groups of users. Google Analytics shows us general information which are not personally identifiable! For example, we cannot not see who exactly has searched for which keyword on Google to find our website, or we can never know which one of our current visitors lives exactly where. As explained in the previous sections, we just see general behavior of our visitors or users, which countries they are from, which pages on our website are mostly visited, what devices (computers, tables, or smartphones) or web browsers (Chrome, Safari, Firefox, etc..) are used to access our site or app, and things like that.

    For more information refer to:
    Privacy Shiled Framework | Google LLC.

    Keith Enright
    Director, Privacy Legal | Google LLC
    Google Data Protection Office
    1600 Amphitheatre Pkwy, Mountain View, California 94043
    Phone: 650-253-0000
    Fax: 650-618-1806