Gary Gaspar avatar
Written by Gary Gaspar
Updated over a week ago

Last updated: June 21, 2023

Below you will find a list of frequently asked questions regarding and GDPR. This page does not serve as legal advice. Please determine together with your legal advisor how GDPR applies to your business.

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union (EU) privacy law that allows EU citizens and residents to have access and control over their personal data. If your business is based in the European Union (EU), or you process the personal data of individuals in the EU, the General Data Protection Regulation (GDPR) affects you.

Is GDPR Compliant?

Yes! SRL is based in Belgium (EU) and complies with the GDPR framework. Here are the following measures we took to become compliant

  • Our privacy policy gives you more information about what data we collect, data retention and transfers, and outlines your data protection rights.

  • We have a Data Processing Agreement available for you.

  • We only share data with service providers that are also GDPR compliant. You can see our list of sub-processors here.

  • All data is encrypted both in transit and at rest, and stored in Europe.

  • Right to be forgotten: All data you created in can be deleted from our database and our sub-processors.

  • Right to request personal data: All data can be exported inside the app. For batch data exports, you can send a request to

  • Data accessibility: You have full control of the information you collect, store, and manage with

  • We created tools to ensure you can exclude sensitive or personally identifiable information from being collected

What personal information does collect?

It’s important to understand that collects data about two main types of users.

  1. Users with a login: When you create a account as an Admin, Member or Guest, we collect basic information such as Full name, Email address, Profile picture, IP address, Operating system, and Browser (Type, Version).

  2. End-users / reporters: Anyone submitting feedback via’s widget. For these users, collects basic information such as Full name & Email address, and device info (OS, Browser, …). In addition, there are two types of other sensitive data your admin could send to when collecting feedback via the widget.

    1. Admins can actively send any custom attributes about reporters via our custom metadata feature.

    2. Admins can passively collect sensitive data that might be embedded in the page content of your website. Since’s widget can capture screenshots, record videos, and replay sessions, the widget admin may collect personal information that your end users are typing into fields or that might get displayed on pages of your website or app. Luckily, we have created tools to help widget admin suppress the collection of personal and sensitive data.

Where is data stored and processed? stores all customer data in Europe. All data is processed with Amazon Web Services (AWS). Learn more about our Security Program here.

Is a data processor?

It is important to note that is acting both as a Data Controller and as a Data Processor within the realm of GDPR compliance.

We are a controller with respect to our visitors and customers interacting with any domain within our control (e.g.,,, etc.). For example, when someone visits our website or creates an account, we act as a data controller.

We are a processor (and occasionally a subprocessor) with respect to the end users whose data receives: our customers’ users. For example, feedback items that are collected by our widget and stored in your account fall under as Data Processor. When you install’s widget on your website and collect feedback items from your end-users, we act as a data processor, while you are the controller of your user’s data.

Do you enter into Data Processing Agreements (DPA)?

Yes. We do offer a DPA here ->

What happens with data collected by is the provider of a website widget service and not the owner of the feedback items created by the widget. The widget creator is responsible for the data he/she collects and is thus the data controller of the reporter’s data. In this case, we act as a data processor.

How do you use my data? acts as a data controller in the relationship between and our customers (widget admins), for the personal information they give us in order to use our service (registration information for example). does not sell personal data to third parties and never will. We only share your information with our service providers who help us operate our business, in which case those third parties are required to comply with the GDPR framework.

How long do you keep my data?

We keep your usage data indefinitely unless you request deletion by contacting us directly or by deleting your feedback items, user account, or entire workspace data yourself. As long as your account is active you (as the widget admin) have full control over the data you collect and delete.

We honor all deletions, and all data which has been deleted by you is permanently deleted from our back-ups within 90 days, and from our sub-processors.

How will empower me to honor my users' requests around their own personal data?

Widget reporters have the right to access their personal data or to request it to be removed. As a widget admin, we recommend that provide your reporters with a way to do so. This can be as simple as sharing an email address that reporters can send their requests to.

You can delete or export feedback items from your account if a reporter asks you to do so. We honor all deletions from an account, and all account data which has been deleted by you is permanently deleted from our back-ups within 90 days.

  • Right to be forgotten: admin users can delete reporters’ information or contact us at

  • Right to object: We recommend that you always get consent from your users before using We created a sample wording for your privacy policy

  • Right of access: Your users may contact you to request to access information that you hold about them. You can get that information inside your account or contact us at

How should I describe in my Privacy Policy? Do you have a sample language for this?

We recommend that you always get consent from your users before using We created a sample wording for your privacy policy

Where can I get more info about privacy?

You can reach out at and visit our Privacy Policy here

What are your company details? SRL (055.668.59.68)

Rue d’Alost 7

1000, Bruxelles


Did this answer your question?