Privacy Policy

We handle personal information in two different roles, and it matters which one applies to you.

• Our customers. If you hold a Neat Feedback account, we decide how your account information is handled, and this policy describes that directly.
• People who submit feedback.If you left feedback through a widget on someone else's website, that organisation decides what to collect and why. We process that information on their instructions. Contact them first about your feedback; if you cannot reach them, write to us and we will help.

Account information. Your email address, display name, and profile picture if you set one. If you sign up with a password, we store a cryptographic hash of it — never the password itself.

Access requests. While Neat Feedback is invitation only, requesting access asks for your name, email address, company name, and team size, so we can review the request.

Feedback and project content.Feedback items and comments created in the dashboard or submitted through the widget. A submission can include a title and description, a screenshot and any annotations drawn on it, the page URL it was left on, browser and screen information such as user agent and viewport size, and the submitter's name and email address where the widget is configured to ask for them.

Newsletter. If you subscribe from our website, your email address.

Technical information. Standard server and security logs generated when you use the service, including IP address, request times and error details.

If you choose "Continue with Google", Google shares a limited profile with us so we can create or identify your account. We request only the basic sign-in scopes — openid, userinfo.email and userinfo.profile — and receive:

• your name
• your email address and whether Google has verified it
• your Google profile picture
• a Google account identifier

We use these solely to create your account, sign you in, and show your name and picture to your own teammates inside the product. We do not use them for advertising, we do not sell them, and we do not transfer them to anyone else except the service providers listed below who host the service on our behalf.

We request no access to Gmail, Drive, Calendar or any other Google service, and we never see or store your Google password. You can disconnect Neat Feedback at any time from your Google account permissions. Doing so stops future Google sign-ins; it does not by itself delete your Neat Feedback account.

If the email on your Google account already has a Neat Feedback account, and Google has verified that address, the two are linked into a single account rather than creating a duplicate.

• To provide the service: accounts, projects, teams and feedback.
• To send transactional email — sign-in confirmations, password resets, project invitations and access decisions.
• To send our newsletter, if you asked for it. Every newsletter email can be unsubscribed from.
• To keep the service secure and working: preventing abuse, investigating faults, and maintaining backups.
• To meet our legal obligations.

We do not sell personal information, and we do not use the content of our customers' feedback to train machine learning models.

We share personal information only with providers that run the service for us, and only as far as each needs:

• Supabase — database, file storage and authentication.
• Google — only if you choose to sign in with Google.
• Resend — delivery of transactional and newsletter email.
• Our hosting provider — running the application and its logs.

Customer-configured integrations.An account owner can connect a project to an external destination — an automation platform, a Notion workspace, or their own endpoint — so that feedback syncs there automatically. When that is switched on, feedback content is sent to the destination the customer chose, and that can include a submitter's name and email address. We deliver to the address the customer configured; what happens to the data there is governed by that destination's own terms, not ours.

We may also disclose information where the law requires it, or to establish or defend legal claims. If our business is ever transferred, information may transfer with it, and we will say so before it takes effect.

Our providers operate infrastructure in several countries, so your information may be processed outside the country you live in. Where that happens we rely on the safeguards those providers put in place, such as standard contractual clauses.

We keep account information for as long as the account exists. Feedback and project content is kept until the customer deletes it or closes their account. Access requests are kept while under review and for a reasonable period afterwards, so an approval or refusal is not lost. Newsletter subscriptions are kept until you unsubscribe. Security and server logs are kept for a short period. Backups are removed on their own schedule after deletion.

Depending on where you live you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to complain to a data protection authority. You can:

• edit your name and profile picture in Settings, and change your password from Settings → Security;
• unsubscribe from the newsletter using the link in any issue;
• disconnect Google sign-in from your Google account permissions page;
• ask us to delete your account and its content by writing to the address below.

If your request concerns feedback you submitted through a widget on someone else's site, we will pass it to that organisation, since the data is theirs to decide about.

Connections are encrypted in transit. Passwords are stored only as hashes. Access to data is restricted per project by database-level rules, so members only reach the projects they belong to. No service can promise perfect security, but if a breach affects your personal information we will notify you and any regulator as the law requires.

Neat Feedback is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

We will update this page when our practices change, and change the "last updated" date above. If a change materially affects you, we will give notice in the product or by email before it takes effect.

Questions, or a request about your information? Email admin@feedbackflow.developios.com.

See also our Terms of Service.