Privacy Policy

1. Who this policy covers

This policy applies to two groups. "Account holders" are people who create a Feedback account, register sites, and view feedback in the dashboard. "Visitors" are the end users of an account holder's website who submit feedback through the embedded widget. Where the two are treated differently, we say so.

2. Information we collect

We collect the following categories of information:

• Account information: your email address, an optional display name, and a password that we store only as a salted hash. We never store your password in plain text.
• Sites and API keys: the site names, publishable API keys, allowed domains, and widget appearance settings you create in the dashboard.
• Feedback submissions: the message, category (feedback, feature request, or bug), an optional star rating, and the page URL the widget was used on.
• Technical and security data: the IP address and browser user agent attached to widget submissions and authentication requests, used for rate limiting and abuse prevention.
• Communications: information you provide when you use our contact form, such as your name, email, and message.
• Browser storage: we store your authentication token in your browser local storage so you stay signed in. We do not use it for advertising.
• Bot protection: when bot protection is enabled, Cloudflare Turnstile may process limited technical data (such as IP address, user agent, and similar client-side signals) to confirm a request is not automated. This processing is described in Cloudflare’s Turnstile Privacy Addendum.

3. How we use information

We use the information above to:

• Provide, operate, and maintain the Service, including authenticating you and delivering submitted feedback to the relevant account holder.
• Protect the Service through rate limiting, domain restrictions, and detection of suspicious activity.
• Send transactional messages such as password reset emails.
• Respond to your questions and support requests.
• Comply with legal obligations and enforce our terms.

4. Feedback collected through the widget

When you embed the widget on your website, you decide what is collected and why. For that feedback data, you are the controller and we act as a processor on your behalf. We process it only to provide and secure the Service, not for our own independent purposes.

You are responsible for having a lawful basis to collect feedback from your visitors and for telling them how their information is used, for example through your own privacy notice. You should avoid prompting visitors to submit sensitive personal information through the widget.

5. Cookies and local storage

We use browser local storage to keep you signed in. We do not use tracking or advertising cookies. Our infrastructure and bot protection providers (see below) may set their own cookies or use similar technologies to deliver and secure the Service.

6. How we share information

We do not sell your personal information. We share information only with service providers that help us run the Service, and only as needed:

• Cloudflare, for hosting, serverless compute, database storage, content delivery, email routing, and bot protection.
• Our email provider, to deliver transactional email such as password resets.
• Authorities or other parties when required by law, or to protect the rights, safety, and security of our users and the Service.

7. Data retention

We keep account information for as long as your account is active. You can delete individual feedback items and entire sites from the dashboard at any time, which removes the associated feedback. Security and abuse logs are kept for a limited period needed to operate the Service. When you ask us to delete your account, we remove your personal information unless we are required to keep it for legal reasons.

8. Security

We protect information using measures that include hashing passwords, transmitting data over encrypted connections, restricting API keys to approved domains, and rate limiting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Account holders can manage and delete much of their data directly in the dashboard. For other requests, or to delete your account, contact us using the details below. If a request concerns feedback you submitted to someone else's website, please contact that website's owner, who controls that data.

10. Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If you believe a child has provided us information, contact us and we will delete it.

11. International data transfers

The Service runs on a global edge network, so your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for these transfers.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice.

13. Contact us

If you have questions about this policy or your information, contact LatentEdge at [email protected] or through our contact page.