Security

Everything on this page describes what the software does today. Where a detail depends on a supplier, we name the supplier rather than the promise.

The people answering your surveys

This is the part most feedback tools gloss over, so it goes first. Your customers are not our audience and we do not treat them as one.

• We do not record the IP address of anyone answering a survey.
• Survey pages load no analytics, no chat widget, no external fonts and no CDN. There is no third-party request on those pages at all, which is also why we never show them a cookie banner.
• Survey links carry a random, unguessable token. Knowing somebody's email address is not enough to answer for them or to read their answer.
• Every survey email carries a working one-click unsubscribe.

Your account

• Served over HTTPS. Passwords are hashed with bcrypt, never stored or logged in the clear.
• Access is scoped per account through membership: an account you are not a member of is invisible, not merely unlinked.
• Sign in with Google is available if you prefer not to hold another password.
• API keys are per account and can be regenerated.
• Personal data is filtered out of application logs and error reports.

Abuse and integrity

• Public survey links are rate limited, and each one can carry a response cap and a closing date.
• Incoming delivery webhooks are verified by HMAC signature with a replay window.
• Sign-up uses a honeypot rather than a third-party captcha, so no captcha vendor sees your visitors.

Where the data is

• Survey email is delivered through Mailgun's European infrastructure.
• Uploaded logos are stored on our own server rather than with a third-party object store.
• The full list of suppliers is in the privacy policy.

Getting your data out, or deleting it

• Every response can be exported to CSV at any time, without asking us.
• You can close your account yourself from Settings. If you are the only member, that deletes the account together with every survey, contact and response.

How this is kept honest

The application has an automated test suite of over 370 tests covering roughly 92% of the code, and a number of the claims on this page are asserted by it: that survey pages load no third-party script, that one account cannot reach another's data, and that this page does not contradict the product.

Reporting a vulnerability

Email hello@usedownright.com with enough detail to reproduce the issue. We will confirm receipt, and we will not pursue anyone who reports in good faith and does not access data belonging to other people.

Company details