Privacy Policy
Last updated: [date]
Who we are
VertoNow ("Verto", "we", "us") is a survey product operated by [legal entity name and registered address — confirm controlling entity]. This policy explains what personal data we collect when you create, publish, or respond to a Verto, why we collect it, and the choices and rights you have over it.
What we collect
We collect different data depending on whether you're a creator or a respondent:
- Creators (account holders): your name, email address, password, and the surveys ("Vertos") you build.
- Respondents: the answers you give to a Verto, plus a small amount of technical data used to run the survey — a session identifier (so your progress can be saved and you're not counted twice), your coarse location (country and region only — for example "GB, Greater London" — never a precise address or GPS coordinate), and, if a question asks for it, a birth month and year (never a full date of birth).
- Anyone, if you accept analytics cookies: device/browser information via Microsoft Clarity (session-replay analytics) — see our Cookie Policy.
Some Vertos may ask questions that request personal information such as your age, gender, or location, or let you answer with free text, audio, or photos. We only collect, use, and retain this information in relation to the specific Verto you're responding to, and answering is voluntary — a Verto only asks for consent to this where the creator has turned on the consent step, and you can decline it.
Why we collect it (legal basis)
- Running the service (contract) — creator accounts, hosting your surveys, recording responses.
- Consent — analytics cookies, and any Verto-specific research consent you agree to before answering.
- Legitimate interests — keeping the service secure and reliable (e.g. rate-limiting abuse), and small-sample suppression that protects respondent anonymity in results.
Cookies
We use cookies to run the site and, only with your consent, to understand how it's used. See our Cookie Policy for the full list and how to change your choice at any time.
Who we share it with
Personal data is not sold. It may be processed by these sub-processors, only for the purposes below:
- Microsoft Clarity — session-replay analytics, only if you accept analytics cookies.
- Nominatim / OpenStreetMap — resolves a respondent's typed location to a coarse country/region; we never send or store a precise address or coordinate.
- Google — sign-in (OAuth) and, for creators who connect it, exporting results to Google Sheets/Drive.
- [Hosting / database / email providers — list infrastructure sub-processors].
How long we keep it
[Retention schedule pending — see the production-readiness checklist.] As a placeholder commitment: we aim to retain respondent-identifying data no longer than necessary for the Verto's active collection period, and creators can permanently delete a Verto and its responses at any time from the dashboard.
Your rights
Under data protection law (including the UK/EU GDPR), you have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected;
- Request deletion of your data ("right to be forgotten");
- Object to or restrict certain processing;
- Receive your data in a portable format;
- Withdraw consent at any time (this won't affect processing already carried out).
To exercise any of these rights, contact us at [privacy / data-protection contact email]. You also have the right to complain to your local data protection authority.
Children
Where a Verto is aimed at, or may be answered by, people under 18, we ask only for the minimum information needed and present the consent step clearly before any question that could identify someone. If we discover we've unintentionally collected an image containing an identifiable face where that wasn't intended, we will delete it.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.
Contact
Questions about this policy or your data: [contact email].