← Back to home

Privacy Policy

Last Updated: June 2026

Qualeva ("we", "our", or "us") provides an AI-powered research and survey analysis platform. This Privacy Policy explains what information we collect, how we use and protect it, and the rights you have regarding your data.

We incorporate data protection into our product design and operational practices. If you have questions about this Policy, please contact us using the details at the end of this document.

1. Scope of This Policy

Qualeva serves two categories of users:

  • Account Users — customers (typically businesses or teams) who register for and use Qualeva to create surveys and view analysis results. For personal data related to account registration, authentication, billing, and service operations, Qualeva generally acts as a Data Controller.
  • Respondents — individuals who submit responses through surveys distributed by Account Users. For respondent data, Qualeva generally acts as a Data Processor and processes such data on behalf of Account Users, who remain the Data Controllers.

If you are a Respondent and wish to access, correct, or delete your responses, please contact the organization that invited you to participate first. We will assist where required by applicable law.

2. Information We Collect

We collect only information reasonably necessary to provide the Service:

  • Account Information — name, email address, organization name, authentication credentials, and related account information.
  • Survey and Project Content — surveys, question structures, and project configurations created by Account Users.
  • Respondent Data — survey responses and respondent information configured by Account Users in accordance with their business needs and applicable law (for example: name, email address, and contact information).
  • Billing Information — subscription and payment-related information. Payments are processed by Stripe. We do not store complete payment card numbers.
  • Usage and Log Data — access times, activity records, browser and device information, IP addresses, and related operational data for security, troubleshooting, and service improvement.

3. How We Use Information

We use collected information to:

  • provide, maintain, and improve Qualeva;
  • create and manage accounts;
  • perform authentication and access control;
  • process subscriptions and billing;
  • generate AI follow-up questions, analysis, and insights;
  • monitor security, prevent abuse, and diagnose issues;
  • communicate service updates and security notices; and
  • comply with legal obligations.

Where required by law, our legal bases may include contract performance, consent, legitimate interests, and legal compliance.

4. AI Processing and Your Data

Qualeva uses third-party large language model (LLM) providers to support AI follow-up generation, analysis, and insight reporting.

Current providers may include:

  • Anthropic Claude
  • DeepSeek
  • Additional providers introduced in the future

When AI features are enabled, survey response content may be processed by those providers.

Principles we follow:

  • Data Minimization — only data necessary for the requested functionality is processed.
  • Identity Separation — respondent identity information (such as name, email, phone number, and contact details) is not included in AI analysis by default unless explicitly enabled by the Account User or operationally required.
  • Controlled Scope — AI primarily processes survey responses, question structures, and necessary contextual information.
  • Third-Party Controls — provider selection and use are subject to applicable agreements and service policies.
  • Independent Provider Responsibility — third-party providers are responsible for their own infrastructure and data handling practices.

Some providers may operate across different jurisdictions and cross-border data transfers may occur.

AI outputs are automatically generated and may be incomplete, inaccurate, or unsuitable for specific business contexts. Account Users remain responsible for evaluating and using outputs appropriately.

5. Data Sharing / Subprocessors

We do not sell personal data.

We may share information only in the following circumstances:

  • trusted subprocessors;
  • legal obligations;
  • protection of rights and safety; and
  • mergers, acquisitions, or business transfers.

Current subprocessors:

Subprocessor Purpose
Amazon Web Services (AWS) Cloud hosting and infrastructure
Anthropic AI inference services
DeepSeek AI inference services
Stripe Subscription and payment processing

Subprocessors may process limited categories of data subject to contractual and policy obligations.

6. Data Retention

We retain data only for as long as necessary:

  • Account data — while the account remains active;
  • Survey and response data — until deleted by the Account User;
  • Logs — retained for limited operational periods;
  • Backups — retained on a rolling basis.

Certain information may be retained longer where required for legal, security, audit, backup, or contractual purposes.

7. Data Security

We implement reasonable technical and organizational safeguards including:

  • TLS 1.2+ encryption in transit;
  • industry-standard storage protections;
  • tenant isolation and access controls;
  • role-based access control (RBAC);
  • least-privilege principles;
  • logging and monitoring; and
  • environment separation and backup procedures.

No transmission or storage method can guarantee absolute security.

8. Data Storage and International Transfers

Qualeva operates on AWS cloud infrastructure. AWS maintains certifications including SOC and ISO standards applicable to its infrastructure.

Qualeva follows a shared responsibility model: AWS secures underlying infrastructure; Qualeva secures applications, access controls, and service-layer data handling.

Data may be processed outside your jurisdiction. Unless otherwise agreed, we do not guarantee storage or processing exclusively in any specific region.

9. Your Rights

Subject to applicable law, you may:

  • access data;
  • export data;
  • correct information;
  • request deletion;
  • object to or restrict processing;
  • withdraw consent; and
  • manage supported AI features.

Requests may be submitted through product functionality or by contacting us.

10. Cookies and Similar Technologies

We use necessary cookies and similar technologies for authentication, security, and core functionality. Additional technologies may require notice or consent where applicable.

11. Children

Qualeva is intended for businesses and adult users and is not designed for independent use by individuals under 18.

12. Policy Updates

We may update this Privacy Policy periodically. Material changes may be communicated through notices, email, or product communications.

13. Contact Us

Email: [email protected]

We will respond within a reasonable timeframe.

This website uses cookies

We use cookies to improve your browsing experience, analyze traffic, and personalize content. By clicking「Accept all」you agree to the use of all cookies.