Privacy Policy

Account Information: When you create a Polst account, we collect your name, email address, organization name, and password. Enterprise customers may authenticate through single sign-on (SSO) providers, in which case we receive only the information your identity provider shares.

Response Data: When a participant answers a question on Polst, we collect their choice, a timestamp, and general context such as approximate geographic region and device category (mobile, desktop, tablet). We do not collect device fingerprints, IP addresses for tracking purposes, or personally identifiable behavioral data from respondents.

Content You Create: Questions, images, Decision Streams, and Polst Chains you publish on the platform are stored and indexed as part of the Polst data network.

Usage Analytics: We collect anonymized analytics about how you interact with the Polst dashboard, including page views, feature usage, and session duration. This data is used solely to improve the product experience.

To operate and improve the Polst platform, including real-time result aggregation, analytics, trust scoring, and SEO indexing.

To communicate with you about your account, product updates, and relevant features. You may opt out of non-essential communications at any time.

To generate aggregated, anonymized insights for content creators, brands, and data partners. Individual respondent identity is never shared or sold.

To maintain platform security, detect fraud, and enforce our terms of service through trust-scoring and bot-detection algorithms.

Polst does not sell personal information to third parties. Period.

We share aggregated, anonymized response data with question creators (brands, publishers, and creators) so they can understand audience sentiment. This data never includes respondent names, email addresses, or other personally identifiable information.

We use a limited number of trusted service providers for infrastructure (hosting, CDN, email delivery) who process data solely on our behalf under strict contractual obligations.

Enterprise customers with API access receive response data in accordance with their service agreement. All API data feeds are governed by the data ownership terms agreed to in the Enterprise plan.

Published questions and aggregated results are retained indefinitely as part of the Polst indexed network, consistent with our mission to create lasting value from audience sentiment.

Account data is retained for as long as your account is active. If you delete your account, we remove your personal information within 30 days, while aggregated, anonymized response data may remain.

Enterprise customers may request data exports and full deletion in accordance with their service agreement and applicable regulations.

Access and Portability: You may request a copy of the personal data we hold about you at any time.

Correction: You may update or correct your account information through your dashboard or by contacting us.

Deletion: You may request deletion of your account and personal data. We will process requests within 30 days, subject to legal retention requirements.

Opt-Out: You may opt out of non-essential communications, analytics cookies, and marketing at any time through your account settings.

If you are located in the European Economic Area, United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. Contact privacy@polst.com for region-specific requests.

Polst uses industry-standard encryption (TLS 1.3 in transit, AES-256 at rest), role-based access controls, and regular security audits to protect your data. For details on our security practices, see our Security and Trust page.

We may update this privacy policy from time to time. Material changes will be communicated via email and a prominent notice on our website at least 30 days before taking effect.

For questions, requests, or concerns about your privacy, contact us at privacy@polst.com or write to Polst Inc., Privacy Team, [Address].