1. Scope
This Policy applies to the LetsConfide website, account, survey workspace, respondent forms, support channels, and related services. A customer may also publish its own privacy notice and consent language for a particular study. The customer is responsible for ensuring its study notice matches the data it collects.
2. Information we may handle
Account and business information
Name, work email, phone number, organisation, billing address, plan, support messages, and account activity.
Survey and response information
Survey questions, configuration, consent records, response payloads, respondent identifiers chosen by the researcher, timestamps, and study metadata. The exact fields depend on how the customer configures a form.
Payment information
We receive payment status, amount, currency, provider transaction ID, plan, invoice, and limited billing information from the payment provider. We do not intentionally store full card numbers, CVV, UPI PINs, net-banking passwords, or other payment-instrument credentials.
Technical information
Security logs, device/browser information, IP address where required for security or fraud prevention, approximate event timestamps, and cookie or similar technology choices described in the cookie notice.
3. Why we use information
- To create and administer accounts, studies, permissions, and subscriptions.
- To deliver encrypted survey collection, receipts, exports, support, and security features.
- To process payments, prevent fraud, reconcile refunds, and maintain financial records.
- To communicate service changes, incidents, support responses, and billing notices.
- To comply with law, lawful requests, payment-provider rules, and security obligations.
- To improve reliability and usability using aggregated or de-identified information where practical.
4. Encryption and blockchain design
Response data should be encrypted in transit and at rest using controls appropriate to the production implementation. LetsConfide’s blockchain-enabled model is intended to anchor a cryptographic hash, timestamp, or equivalent integrity proof rather than raw responses or personal information on a public chain.
Security baseline: the intended production design uses AES-256-GCM with a 32-byte key for encrypted payloads, TLS 1.3 for transport, and a 32-byte SHA-256 integrity proof. Ciphertext length varies with the response and authenticated-encryption overhead. Raw answers are intended to remain 0 bytes on a public blockchain. These are design targets, not a security certification.
Blockchain records can be difficult or impossible to delete. For that reason, the production service must not place personal data, direct identifiers, payment data, or raw survey answers on a public blockchain. Contact us if you believe a configuration could expose sensitive information.
5. Sharing
We may share information with contracted hosting, security, analytics, email, customer-support, and payment providers strictly for service delivery; with the customer organisation that administers a study; with professional advisers; or where required by law, court order, fraud review, or security investigation. We do not sell survey answers for advertising.
6. Retention and deletion
Customers choose study retention settings where the product supports them. We retain account, billing, audit, and support records for as long as reasonably necessary for service, legal, security, dispute, and accounting purposes. Deletion requests may be limited by legal retention, fraud prevention, backups, or an irreversible integrity proof that contains no personal data.
7. International processing
Some service providers may process information outside India. Before launch, publish the actual provider list, locations, transfer safeguards, and contractual controls used by LetsConfide. Customers should tell participants where their study data may be processed.
8. Choices and requests
Contact [privacy email] to request access, correction, deletion, or information about processing, subject to identity verification, customer instructions, legal retention, and applicable law. A participant may also need to contact the organisation that created the survey because that organisation determines the purpose of the study.
9. Children and sensitive studies
LetsConfide is not intended to knowingly collect children’s information without the required consent and safeguards. Customers running health, employment, financial, biometric, political, or other sensitive studies must complete their own legal and ethics review before collecting responses.
10. Contact
Privacy contact: [privacy email]
Registered entity: [legal entity name]
Address: [registered address in India]