Privacy Policy

This Privacy Policy describes how Surbee ("we," "us," or "our") collects, uses, and shares information when you use our AI-powered survey platform. By using our service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, full name, and account credentials. We also store your user ID, profile information, and subscription status (including whether you have a Pro account).

1.2 Project and Survey Data

We store all surveys and forms you create, including project titles, descriptions, survey schemas, question text, question types, answer options, and survey configurations. We also save preview screenshots of your surveys, published URLs, and the complete code bundles that power your surveys.

1.3 Survey Response Data

When respondents complete your surveys, we collect their responses, submission timestamps, respondent IDs, session IDs, and IP addresses. For fraud detection purposes via our Cipher™ system, we also collect behavioral data including mouse movement patterns, keystroke timing data, timing data (how long respondents spend on each question), and device information (browser type, operating system, screen resolution).

1.4 Chat and AI Interaction Data

We store all conversations you have with our AI assistant, including your prompts, the AI's responses, chat session metadata, and timestamps. This helps us improve your experience and maintain conversation context.

1.5 Analytics and Fraud Detection Data

We calculate and store survey analytics including total response counts, completion rates, average completion times, fraud scores for each response, and flags for suspicious activity. Our Cipher™ fraud detection system analyzes behavioral patterns to identify potentially fraudulent survey responses.

1.6 Technical and Usage Information

We automatically collect IP addresses, browser types, device identifiers, operating system information, referring URLs, pages viewed, time spent on pages, and cookie data.

2. Cipher™ Fraud Detection Technology

At Surbee, we prioritize the integrity of your data. Our platform is powered by Cipher, our proprietary fraud detection and accuracy system that runs over 60 distinct authenticity checks across 7 detection layers.

2.1 What Cipher Monitors

• Behavioral Biometrics: Mouse movements, touch interactions, and keystroke dynamics that distinguish human behavior from bots.
• Device & Network Integrity: Consistency in device fingerprints, IP reputation, and detection of anonymizing proxies or VPNs associated with fraud.
• AI & Automation Detection: Advanced detection of AI-generated text, automated scripts (like Selenium/Puppeteer), and copy-paste anomalies.
• Cross-Session Consistency: Identification of "fraud rings" and coordinated patterns across multiple sessions.

2.2 How Cipher Data Is Used

We use anonymized behavioral data and response patterns to train and refine our Cipher models. This continuous learning process helps us stay ahead of new fraud techniques and ensures the highest quality data for our customers.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our survey platform service
• Generate AI-powered surveys and forms based on your requirements
• Collect and analyze survey responses on your behalf
• Detect and prevent fraudulent survey responses through Cipher™
• Provide analytics and insights about survey performance
• Improve our AI models and service quality using anonymized, aggregated data
• Send you service updates, security alerts, and support messages
• Respond to your support requests and inquiries
• Comply with legal obligations and enforce our terms

4. AI Model Training

5. How We Share Your Information

We share your information only in the following circumstances:

• Service Providers: We work with third-party service providers for hosting (Supabase), authentication, payment processing, and email services. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Row-level security policies on database access
• Regular security audits and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal purposes.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to our processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at privacy@surbee.com. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you logged in to your account
• Remember your preferences and settings
• Understand how you use our service
• Analyze usage patterns and improve our service

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our service.

10. Third-Party Services

Our service integrates with third-party services including:

• Supabase (database and authentication)
• Anthropic Claude (AI services)
• Payment processors (for subscription billing)

These third parties have their own privacy policies. We encourage you to review their policies to understand how they handle your information.

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete such information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. By using our service, you consent to the transfer of your information to the United States and other countries where we operate.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Sending an email to the address associated with your account
• Posting a prominent notice on our website

Your continued use of the service after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: privacy@surbee.com
Address: Surbee AG
Switzerland