This policy explains what personal data Saywide collects, why, and what rights you have. It covers people who create surveys (“organizers”) and people who answer them (“respondents”).
Who we are
Saywide is a QRXRQ product, operated by saywide.com, Rua Hélder Luciano Roldão, 8B Fr. A, 2430-226 Marinha Grande, Portugal (“we”). Contact for privacy questions: team@qrxrq.com. Full company details are on the legal information page.
We act as a controller for account administration, billing coordination and our own security and website operations. For survey content, the person or organization deciding why and how answers are used will usually be the controller. An employee may act for that organization; an agency may be its processor. We act on the customer’s documented instructions as a processor or sub-processor under our data processing agreement. Roles depend on actual activities. If you answered a survey and want to exercise your rights over your answer, contact its operator first; we will help them, or help you identify the appropriate contact if needed.
Respondents
Answering a survey does not require a name, email or account. We store:
- your answers, as text, with the language each question was shown in;
- a response record with a generic label such as “Response 4”, its status and timestamps, and the version of the notice you accepted.
We do not store your IP address or browser details with your answers. Our servers record IP addresses in technical logs for security (see Logs). Request paths, identifiers and timing may allow activity to be correlated; answering without an account does not guarantee that you cannot be identified. Anything you write in an answer, including details that identify you, is stored as written, so avoid sharing personal details you do not want the organizer to see.
Voice answers. If you answer by voice, your browser streams the audio directly to Amazon Transcribe, which turns it into text. The audio does not pass through our servers and we do not keep it. You review and edit the transcript before submitting. Saved answers contain text, not an audio recording.
Your browser keeps an unsent draft of your answers on your device until you submit, and then a note that you submitted. See Cookies and local storage.
The survey operator receives submitted answers and can generate reports containing short quotations. They may download and share answers or reports, subject to their legal obligations and the information they give respondents. Ask the person who invited you if the operator’s identity, purpose, recipients or rights contact is unclear. Acknowledging a notice or accepting terms does not replace a valid legal basis for processing.
Organizers
| Data | Why | Legal basis |
|---|---|---|
| Name, email, password (stored only as a one-way hash), or your Google account identity if you sign in with Google | Create and secure your account, send verification and password-reset emails | Contract |
| Sessions: IP address and browser user agent | Keep you signed in, manage sessions, detect abuse | Legitimate interests (security) |
| Guest workspaces: a random credential in a cookie, with no name or email | Let you try Saywide without an account, and move your work into an account later | Contract |
| Surveys, questions, reports, branding (display name and logo) | Provide the service | Contract |
| Text you dictate or ask us to polish or translate | Writing assistance features | Contract |
| Subscription status, plan and billing period; a payment provider customer ID | Provide paid plans | Contract; legal obligation for records we must keep |
| Records of admin actions on your account (for example a suspension, with its reason) | Accountability and abuse handling | Legitimate interests |
We do not store card details. Payments are handled by Link (see Payments).
AI processing
When an organizer asks for a report, the survey title, questions and answers, and the organizer’s instructions are sent to an AI model to produce the analysis. Organizers’ writing features (drafting, polishing and translating surveys) also send the organizer’s text to an AI model. We use OpenAI with storage of requests turned off, and may use Amazon Bedrock instead for reports. Disabling application-level request storage is not a guarantee of zero provider retention: security, abuse-monitoring and legal retention may still apply under the provider’s terms. Saywide does not train its own AI models on your survey content.
Reports are written to avoid naming people. Code filters quotes that match certain email, phone-number and link patterns, but this is not complete anonymization. Organizers can view submitted answers and export the original text on eligible plans; names or other details you include may remain visible. AI output can be wrong; see the terms of service.
Cookies and local storage
The Saywide application uses cookies and browser storage for sign-in, security, language preferences and saving your progress. Its code does not include advertising or analytics tracking. External sign-in, payment and company sites operate under their own notices when you visit them.
| Name | Purpose | Lifetime |
|---|---|---|
better-auth.session_token | Keeps an organizer signed in | 30 days by default; renewed during continued use. |
better-auth.dont_remember | Ends the session when the browser closes, if you chose not to be remembered | Browser session |
better-auth.state | Protects Google sign-in against forgery | 5 minutes |
saywide_guest | Identifies a guest workspace | 365 days by default. |
saywide.locale | Remembers your interface language | 1 year |
Local storage: saywide.response.* | Unsent answer drafts, then a note that you submitted | Until you clear your browser data |
Local storage: saywide.voice-language | Remembers the language you speak for voice answers | Until you clear your browser data |
Session storage: saywide.* | Progress through a survey or screen | Until the tab closes |
Secure production sign-in cookies may carry a __Secure- prefix. You can clear cookies and local storage in your browser, but doing so can sign you out, remove unsent drafts or end access to a guest workspace.
Logs
Our servers log each request’s method, address and the client’s IP address, to keep the service secure and fix faults. Passwords, cookies and access tokens are removed from logs. Our retention policy sets a maximum of 30 days for routine logs. Sign-in attempts are counted per IP address to block password-guessing; stale counters are eligible for cleanup after 24 hours without an update.
We also keep sanitized server-error records for troubleshooting, accessible only to platform administrators. These contain a request identifier, the affected route pattern and technical diagnostic codes, without survey answers or raw exception messages. They expire from the live error viewer after 30 days and are eligible for automatic deletion at startup and hourly. Error alerts may be sent to our configured operations mailbox; mailbox and backup retention are managed separately.
Payments
Purchases using Stripe Managed Payments have Sold through Link, LLC as merchant of record, facilitating sales on the service operator’s behalf as identified at checkout. Link collects your payment details, address and tax information under its own privacy policy. We send Stripe your email address and an internal account ID so the purchase can be matched to your account, and receive the status of your subscription. For information about their handling of personal data, see Stripe’s privacy policy. Deleting a Saywide account does not by itself delete a separate Link account or records that the merchant of record must retain.
Who receives data
Our primary application and database hosting is in EU West (European Union). This does not mean that all third-party processing or delivery takes place in the EU; provider-specific locations are listed below.
| Provider | Purpose | Location |
|---|---|---|
| Railway | Application hosting and database | EU West (European Union) |
| Amazon Web Services (Transcribe, Bedrock) | Speech-to-text; AI reports | EU West |
| OpenAI | AI reports and writing features | United States |
| Bunny.net | Storing and delivering organizer logos | EU West; global delivery network |
| qrxrq.com | Verification and password-reset emails | EU West |
| Stripe and Link | Payments, tax and invoicing (independent controllers for this) | EU and United States |
| Sign-in with Google, if you choose it | United States |
Some providers may process data outside the European Economic Area. Applicable safeguards may include an applicable adequacy decision or Standard Contractual Clauses; the actual arrangement depends on the provider and contract. Contact us to request information about the safeguards that apply to your data. We may disclose data when the law requires it. We do not sell personal data.
Who at Saywide can see data
A small number of administrators can view accounts, surveys, answers and reports to provide support, investigate abuse and meet legal obligations. Administrative actions such as suspension, plan grants, file removal and account deletion are recorded in an audit log. Viewing content is not currently recorded in a dedicated access-audit log.
How long we keep data
- Accounts, surveys, answers and reports: until the account is deleted. Closing a survey does not delete its answers.
- Guest workspaces: our target retention period is 12 months without activity. Workspaces are not currently deleted automatically for inactivity; you can request deletion. Expiry or removal of the browser cookie can end access without deleting the stored workspace.
- Logos: queued for deletion when removed or when an account is deleted, with retries if storage is temporarily unavailable. Our policy allows up to 7 days for cached copies on the delivery network to expire. Downgrading hides Pro branding but does not currently delete the saved logo or branding settings.
- Records of admin actions: our target retention period is 24 months from the action; automatic expiry is not currently applied. Account deletion removes direct account links; identifying information in free-text reasons must also be removed unless needed for a specific legal obligation or ongoing dispute.
- Billing records: as required by tax law, held by Link as merchant of record.
- Backups, where enabled: our policy is a rolling retention period of no more than 365 days. Deleted data may remain in restricted backups until they expire. If a backup is restored, deletion requests must be reapplied.
- Routine hosting and security logs: up to 30 days.
Specific records may be kept longer where required by law or necessary for an ongoing security investigation or legal claim. Access is restricted, and those records are deleted when that reason no longer applies. Independent providers, including payment providers, apply their own retention obligations.
To delete your account, email team@qrxrq.com from the account’s address. We delete the account, its surveys, answers, reports and logos. If you have a subscription that will renew, cancel it first; our account-deletion process blocks deletion while a renewing subscription remains. Contact us if you need help. Cancellation and deletion do not by themselves request a refund.
Your rights
Under the GDPR you can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent where we rely on it, without affecting processing already lawfully carried out. These rights apply subject to the conditions in data protection law. Contact team@qrxrq.com; we normally respond within one month. If a permitted extension is needed because of the complexity or number of requests, we will explain it within that first month. We may need to verify your identity before acting. You can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt), or the authority where you live.
Children
Creating surveys, including in a guest workspace, and creating organizer accounts are for people aged 16 or over. Survey operators must explain the intended audience and any participation restrictions. They must not run surveys directed at children without a lawful basis, age-appropriate information and any required consent.
Changes
We will post updates here and change the date above. For significant changes, we will tell organizers by email before they take effect.