Privacy Policy

Account Information: When you create a Polst account, we collect your name, email address, organization name, and password. Where we offer single sign-on (SSO) authentication to enterprise customers in the future, we would receive only the information your identity provider chooses to share.

Response Data: When a participant answers a question on Polst, we collect their choice, a timestamp, and general context such as approximate geographic region and device category (mobile, desktop, tablet). We do not collect device fingerprints, IP addresses for tracking purposes, or personally identifiable behavioral data from respondents.

Content You Create: Questions, images, Polst Streams, and Polst Chains you publish on the platform are stored and indexed as part of the Polst data network.

Usage Analytics: We collect analytics about how you interact with the Polst website and dashboard, including page views, feature usage, and session duration. We use third-party analytics and product-experience tools that may capture aggregated interaction data such as clicks and scrolling to help us understand and improve the product experience. See our Cookie and Tracking Notice for details and your choices.

To operate and improve the Polst platform, including real-time result aggregation, analytics, trust scoring, and SEO indexing.

To communicate with you about your account, product updates, and relevant features. You may opt out of non-essential communications at any time.

To generate aggregated, anonymized insights for content creators, brands, and data partners. Individual respondent identity is never shared or sold.

To maintain platform security, detect fraud, and enforce our terms of service, including through trust-scoring and bot-detection methods designed to assess response authenticity.

Polst does not sell personal information to third parties. Period.

We share aggregated, anonymized response data with Polst creators (brands, publishers, and individual creators) so they can understand audience sentiment. This data never includes respondent names, email addresses, or other personally identifiable information.

We use a limited number of trusted service providers for infrastructure (hosting, CDN, email delivery) who process data solely on our behalf under strict contractual obligations.

Enterprise customers with API access receive response data in accordance with their service agreement. All API data feeds are governed by the data ownership terms agreed to in the Enterprise plan.

Published questions and aggregated results are retained indefinitely as part of the Polst indexed network, consistent with our mission to create lasting value from audience sentiment.

Account data is retained for as long as your account is active. If you delete your account, we remove your personal information within 30 days, while aggregated, anonymized response data may remain.

Enterprise customers may request data exports and full deletion in accordance with their service agreement and applicable regulations.

Access and Portability: You may request a copy of the personal data we hold about you at any time.

Correction: You may update or correct your account information through your dashboard or by contacting us.

Deletion: You may request deletion of your account and personal data. We will process requests within 30 days, subject to legal retention requirements.

Opt-Out: You may opt out of non-essential communications and marketing at any time, and you can manage analytics and tracking preferences as described in our Cookie and Tracking Notice.

Polst is designed to support the requirements of GDPR, UK GDPR, and CCPA. If you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under those regulations. For region-specific requests, or to ask about a Data Processing Addendum, contact privacy@polst.io.

Polst uses industry-standard safeguards to protect your data, including encryption of data in transit and at rest, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our practices. For more on our approach, see our Security and Trust page.

Polst is a business tool that is not directed to children. The Service is intended for use by businesses and their authorized representatives, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, contact privacy@polst.io and we will take steps to delete it.

We may update this privacy policy from time to time. Material changes will be communicated via email and a prominent notice on our website at least 30 days before taking effect.

For questions, requests, or concerns about your privacy, contact our Privacy Team at privacy@polst.io.