Survey privacy
Who we are
This tool is a free service from NexAi·Studio (nexaistudio.com), the controller of the account data described here. Contact and legal notice: nexaistudio.com/contacte/ and nexaistudio.com/avis-legal/.
What we store about survey creators
Your email address, the date and version of your consent, whether you opted in to news (and when), the date of your last sign-in, and the surveys you create with their questions and responses.
What we store about respondents
Only the answers, the day and time, and how long it took. No account is needed. We do not store the IP, cookies or device data. If a free text question asks for personal data, that is the survey creator’s decision.
Who controls the responses
Whoever creates a survey decides what data to ask for and why: they are the controller of the responses they collect and must follow the GDPR (inform participants, have a legal basis, not ask for sensitive data without reason). NexAi·Studio acts as processor: it hosts the responses and shows them only to the survey creator. Nobody else sees your answers.
Why and legal basis
Account and sign-in emails: your consent when you sign up (GDPR art. 6.1.a) and performing the service. News and offers by email: only if you tick the optional box, which is unticked by default; you can withdraw it in your account or by writing to us. Abuse prevention: legitimate interest (art. 6.1.f).
Abuse prevention
To limit how many surveys, responses and emails are generated, we use a temporary identifier derived from the IP with a secret key; it cannot be reversed and is deleted within days. Surveys reported by three people are closed automatically.
Cookies and storage
We only use one technical session cookie (ns_s, 30 days) when you sign in to your account. People answering surveys receive no cookie. We use no analytics or advertising cookies.
Third parties
Cloudflare serves the page and hosts the database (D1, EU jurisdiction). Resend sends the sign-in emails. Google Fonts serves the typeface. Each processes data under its own policy and may involve international transfers with appropriate safeguards.
Retention
Surveys and responses are kept until you delete them or delete your account. Sign-in links expire after 15 minutes and sessions after 30 days.
Responses and controllers
Whoever creates a survey is the controller of the responses it receives (and, if they turn the option on, of the name and email respondents leave voluntarily). NexAi·Studio only hosts this data as a processor, uses it for nothing else and does not sell it. A respondent can ask the survey creator to delete their response. Creators can see each response on its own and delete it, and can upload a logo and choose colours: the logo is stored in the database and shown only on the survey’s public page.
Your rights
You can access, download and delete your data and withdraw consent from the account page. If you answered a survey and want to exercise rights over your answers, contact the survey creator; you can also write to us through nexaistudio.com/contacte/. You can complain to your data protection authority (in Spain, aepd.es).