Privacy Policy

This Privacy Policy describes how O'Shea & Sons, LLC ("we", "us", or "our") collects, uses, and shares information when you use UserVane (the "Service"), including uservane.com, api.uservane.com, the in-product widget, hosted link surveys, and CSV import.

Questions or privacy requests: hello@uservane.com.

1. Roles: controller and processor

There are two distinct data relationships:

Dashboard users (you, our customer). For your account, authentication, and billing, we are a controller of that business-contact and account data.
End-user feedback (your respondents). For survey responses, free-text comments, respondent identifiers, traits/metadata you attach, and imported historical responses, you are the controller and UserVane is the processor. We process that data only to provide the Service to you, under your instructions and our Data Processing Agreement.

Free-text survey comments may contain personal data. You are responsible for your lawful basis and notices to your end users.

2. Information we collect about dashboard users

Account and identity data. Name, email address, and authentication identifiers provided through WorkOS when you sign up or sign in.
Billing data. Subscription status, customer and subscription identifiers, plan tier, and payment metadata. Card numbers are handled by Stripe; we do not store full card numbers on our servers.
Project configuration. Survey copy, targeting rules, API keys you manage in the dashboard, allowed origins, webhook URLs, and similar settings.
Technical and usage data. IP address, user agent, request paths, and similar logs needed to operate, secure, and debug the Service.
Communications. Messages you send to support (for example via hello@uservane.com).

3. Information we process on your behalf (end users)

As processor, we process data you collect through the Service, including:

Survey responses. Ratings/scores and free-text comments. Free text may contain personal data.
Respondent identifiers. For live/in-product and link surveys, the identity you (or the link flow) supplies (for example an SDK userId). For imported respondents, we store a hashed identifier of the form imp_ + SHA-256 of the email (with project-scoped salting as implemented); we do not store raw respondent emails for imported rows.
Customer-provided metadata and traits you attach to respondents or responses.
Imported historical data (for example Delighted CSV imports): mapped ratings, comments, timestamps, and hashed respondent ids as above.

Channels today: in-product widget, hosted link surveys, and CSV import. We do not send survey emails on your behalf yet (bring-your-own email is a future feature). We do not use LLMs or generative AI to process survey content or free text. We do not sell personal data.

4. How we use information

Provide, maintain, and improve the Service
Authenticate dashboard users and manage accounts
Process subscriptions and prevent fraud
Store, score, and display survey results for the customer who collected them
Honor data-subject rights assistance (export and erasure APIs)
Respond to support and legal requests
Secure the Service and investigate abuse

5. Subprocessors

We use the following subprocessors to operate UserVane. This is the complete current list:

Cloudflare - hosting and infrastructure (Workers, D1, KV, DNS/CDN)
WorkOS - dashboard authentication and identity
Stripe - payment processing and subscription billing

These providers process data on our behalf under their terms and data-processing arrangements. They may process data in the United States and other countries where they operate. International transfers rely on Standard Contractual Clauses (or equivalent safeguards) as provided by those subprocessors where applicable.

6. Sharing

We share information with the subprocessors above as needed to run the Service, when required by law, to protect rights and safety, or with your direction (for example a webhook you configure). We do not sell personal information.

7. Retention

Survey responses and related end-user feedback are retained until you delete them (via the product APIs or dashboard flows) or close the account. There is no automated time-based retention job today; we do not claim a fixed retention period we do not enforce. Account and billing records are retained as long as your account is active and as needed for legal, tax, and dispute purposes. Support emails are retained as reasonably needed to help you.

8. Data-subject rights (export and erasure)

For end-user feedback you control, data subjects should exercise rights with you (the controller). We provide built APIs so you can fulfill those requests:

Export: GET /v1/privacy/export (secret key)
Erasure: DELETE /v1/privacy/erase (secret key), including erase by email for imported rows (email is hashed server-side to the stored imp_ identifier)

Dashboard users may request access or deletion of their account data by emailing hello@uservane.com. We will respond within a reasonable period and as required by applicable law. We may retain limited information where legally required (for example tax or fraud records) or where data has been de-identified.

After DSAR erasure of a respondent, we may retain a hashed suppression tuple so "never re-prompt" survives erasure, without keeping the free-text response.

9. Cookies and similar technologies

We and our processors may use cookies or similar technologies for authentication, security, and (for hosted link surveys) a first-party respondent cookie so the same browser is not double-counted. You can control cookies through your browser settings; some features may not work without them.

10. Security

We use reasonable technical and organizational measures appropriate to a small SaaS product on Cloudflare's edge platform to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16.

12. International transfers

If you or your respondents access the Service from outside the United States, information may be processed in the United States and other countries where we or our subprocessors operate. Transfers rely on Standard Contractual Clauses via subprocessors as applicable.

13. Changes

We may update this Privacy Policy. The "Last updated" date will change when we do. Continued use after the effective date means you accept the updated policy.

14. Contact

O'Shea & Sons, LLC
Email: hello@uservane.com