Privacy Policy

This page explains, in plain language, how Feedback Journey handles personal data. We would rather be specific than vague, so this page names the tools we use and the situations where data leaves our own systems.

Who is responsible for the data?

Feedback Journey is run by Feedbach As, registration number 933393585, Norway. If you have questions about privacy, access, deletion, or anything else related to personal data, send an email to hey@feedbackjourney.com.

Whose data do we handle?

1. People visiting this website

When you use feedbackjourney.com or the app on go.feedbackjourney.com, we handle the normal website or app traffic data needed to run those services. If you contact us, we also handle whatever you write in the contact form.

2. Users of the Feedback Journey app

In the app we handle account and profile data such as name, email address, title/role, profile image, organization membership, and subscription/billing metadata.

3. Respondents invited to surveys

We handle respondent email addresses, invitation status, preferred language, responses, timestamps, written comments, and optional recommendation data. If a respondent chooses to add their name and title together with a recommendation, that can also be stored.

4. Billing contacts

When someone pays for a subscription, billing and subscription data is handled through Stripe and linked back to the relevant user or organization.

What data do we use, and why?

Account and organization data: to create accounts, control access, show profiles, and let organizations manage members.
Survey and respondent data: to send invitations, collect responses, show results, and support improvement work inside the product.
Billing data: to create and manage subscriptions, handle renewals and cancellations, and keep payment state in sync.
Website contact data: to reply when you ask for support, a demo, or other help.
Website analytics data: to understand how the public website is used and improve it. This is optional and only turned on after you say yes.
AI feature input: if a user chooses to use the AI coach or AI goal suggestions in the app, we send the relevant survey context to our AI provider to generate that result.

Which third parties receive personal data?

These are the main external services that currently receive personal data from Feedback Journey:

Cloudflare: hosting, delivery, and infrastructure services.
Auth0 by Okta: authentication and identity handling for app users.
MailerSend: delivery of survey invitation emails to respondents.
Stripe: checkout, billing, subscription management, invoices, and payment administration.
Google Gemini: optional AI-generated comments and improvement-goal suggestions inside the app.
Slack: operational notifications and contact-message handling.
Amplitude: analytics on the public website, but only after you accept analytics cookies/identifiers.

What exactly do Stripe, MailerSend, Slack, Gemini, and Amplitude get?

Stripe gets the data needed to run checkout and subscriptions, such as email address, Stripe customer/subscription/payment IDs, invoice data, and subscription status.
MailerSend gets respondent email addresses and the content needed to send invitation emails.
Slack gets limited operational data when we receive contact requests or internal service events, such as name, email address, message content, or organization name, depending on the event.
Google Gemini gets the survey context needed to generate optional AI features. That can include survey scores, comments, messages, recommendations, and related names/titles already stored in the service.
Amplitude gets website usage data on feedbackjourney.com after consent. We use it to understand page usage and improve the public website, not for ads or cross-site marketing.

Do we transfer data outside Europe?

Yes. Several of the services listed above operate from the United States or may process data there. That means personal data can be transferred outside the EU/EEA. When that happens, we rely on the transfer mechanisms offered by the provider, such as standard contractual clauses and/or the EU-U.S. Data Privacy Framework where relevant.

How long do we keep personal data?

We try to keep data for as long as it is needed to run the service properly, handle support, and meet legal obligations, and not longer than that. In practice, that means:

account, survey, and improvement data is kept while the service relationship is active and while the historical record is still needed;
billing data is kept as long as needed for accounting, tax, subscription administration, and dispute handling;
contact messages are kept only as long as needed to handle the request and any reasonable follow-up;
analytics consent is stored so we remember your choice and do not ask on every page load.

What about cookies and tracking?

Feedback Journey uses necessary cookies or similar storage for things like language preferences and login/session handling in the app. On the public website, analytics is optional and only loaded after consent. Where it makes sense technically, we may scope cookies to the parent domain so the same preference can be reused across feedbackjourney.com and go.feedbackjourney.com. The details are in the cookie policy.

What rights do people have?

Depending on the situation, you may have the right to ask for access, correction, deletion, restriction, objection, or a copy of your personal data. If you want help with that, email hey@feedbackjourney.com and explain what you need. If we need more information to find the right data, we will ask.

Do we make fully automated decisions about people?

No. The AI features in Feedback Journey are optional coaching tools. They suggest text and ideas, but they do not make legal, employment, credit, or similar significant decisions for people.

How will we tell you about changes?

If we make a meaningful change to how Feedback Journey handles personal data, we will update this page. If the change is important for customers or users, we will also communicate it more directly where that makes sense.