Privacy Policy

1. Introduction

Poll Vault ("we," "us," or "our") is operated by Redbud Consulting. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at pollvault.redbud.consulting and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Information you provide

• Account information: name, email address, and password (stored in hashed form) when you register.
• Profile information: optional username and avatar image.
• Subscription & billing: when you subscribe to a paid plan, payment processing is handled entirely by Stripe. We store your Stripe customer ID but never store your credit card number or payment details.
• User content: saved polls, comments, poll flags, suggestions, and notification preferences.
• White-label branding: company name, URL, contact email, and logo if you use white-label export features.

Information collected automatically

• Session data: we use essential session cookies (via NextAuth.js) to keep you logged in. These are strictly necessary for the Service to function.
• Local storage: we store your theme preference (light/dark mode) in your browser's local storage.

We do not use third-party analytics, advertising trackers, or tracking cookies.

3. How We Use Your Information

• To create and manage your account
• To provide, maintain, and improve the Service
• To process subscriptions and billing through Stripe
• To send email digests and notifications you have opted into
• To respond to your inquiries and support requests
• To enforce our Terms of Service and protect against misuse

4. Third-Party Services

We share information with the following third-party service providers, solely to operate the Service:

• Stripe — payment processing. Stripe receives your billing information directly. See Stripe's Privacy Policy.
• Resend — email delivery. Resend processes your email address to deliver transactional emails and digests.
• Supabase — database hosting and file storage (avatars, logos).
• Anthropic — AI-powered poll analysis. We send poll content (not your personal information) to Anthropic's Claude API for analysis.
• Netlify — web hosting.

We do not sell, rent, or trade your personal information to third parties.

5. Cookies & Local Storage

We use only essential cookies required for authentication and session management. We do not use advertising, analytics, or tracking cookies. Your theme preference is stored in browser local storage and is never transmitted to our servers.

6. Data Security

We implement industry-standard security measures to protect your information:

• Passwords are hashed using bcrypt and never stored in plain text
• All data is transmitted over HTTPS
• Payment information is processed securely by Stripe (PCI-DSS compliant)
• Database access is restricted and authenticated

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: update or correct inaccurate information via your account settings.
• Deletion: request deletion of your account and associated data.
• Export: export your saved polls and data in CSV or JSON format.
• Opt out of communications: unsubscribe from email digests at any time through your notification settings or via the unsubscribe link in any email.

To exercise any of these rights, contact us at the email address below.

8. Data Retention

We retain your account information for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes (e.g., audit logs, billing records).

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell your personal information. You have the right to request disclosure of what personal information we collect, use, and disclose about you. To make a request, contact us at the email address below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Redbud Consulting
Email: pollvault@redbud.consulting