Privacy Policy

Surveyvor is operated by Take a Luke Studio, Poland ("we", "us"). This policy explains what happens to information when you use it. It is written to be read, not to be survived.

What we process

Your briefs — in your browser only

Everything you type into Surveyvor is saved to your browser's local storage on your own device. It is not sent to us, and we have no server that stores it. The practical consequence, which matters: if you clear your browser data, your briefs are permanently gone and we cannot recover them. Use Export to keep a copy of anything you care about.

AI processing

When you press an AI button — refine a section, get interviewed, run a survey, polish the final brief — the relevant text is transmitted to Anthropic PBC (United States), which generates the response and returns it to you. We do not store the request or the response.

Anthropic states that by default it does not use inputs or outputs from its commercial API to train its models. See Anthropic's privacy documentation.

Technical data

• IP address — used briefly to count requests so one person cannot run up the AI bill. Stored as a counter for roughly twenty minutes, then discarded.
• Token counts — how much AI work each request needed, so we can monitor cost. No brief content is ever logged.
• Standard hosting logs — kept by our host in the normal way.

Who else is involved

These are the only third parties that touch anything:

• Anthropic PBC (US) — the AI that produces surveys and refinements. Receives brief text only when you ask for it.
• Vercel Inc. (US) — hosting. Sees requests, not brief content.
• Upstash — rate-limiting counters. Receives a key derived from your IP and a number. Nothing else.

These providers are based outside the EEA. Transfers rely on the European Commission's Standard Contractual Clauses and each provider's own safeguards.

Why we are allowed to do this

• Performing the service you asked for — sending your text to the AI happens only because you pressed a button asking for it.
• Legitimate interest — counting requests by IP to prevent abuse and protect the service from being run up as a bill.

How long anything is kept

• Your briefs — until you delete them or clear your browser. By you, not us.
• Rate-limit counters — about twenty minutes.
• Hosting logs — per our host's standard retention.

If you paste other people's information

Surveyvor is a professional tool, so briefs often describe real organisations and sometimes real people. You decide what to paste, and you remain responsible for it. If a brief contains personal data about your client or their customers, you are the controller of that data and should be satisfied you have a basis for sending it to an AI provider.

Surveyvor does not need names to work well. Describing roles — "the marketing director", "the regional team" — produces the same quality of survey and keeps personal data out of it entirely.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability. Because we hold no account and no copy of your briefs, most of these are already in your hands:

• Access and portability — Export writes any brief to a file you keep.
• Erasure — deleting a brief, or clearing your browser data, removes it completely. There is no server copy to ask us about.

For anything else, email hello@takealuke.studio. You also have the right to complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Cookies

One cookie, which records that you entered the beta password so you are not asked on every page. It contains no personal data. There are no analytics, advertising or tracking cookies, which is why this site has no cookie banner — there is nothing to consent to.

Changes

Surveyvor is in beta and changing. If this policy changes in a way that affects what happens to your information, the date at the top will change and material changes will be noted in the app.