Privacy Policy

🌐 This page has been translated for your convenience. If the translation and the English version differ, the English version governs.

1. Who we are

PollSlide Technologies LLC is a Wyoming limited liability company and the data controller for personal data collected through the Service.

Contact: help@pollslide.com

For GDPR purposes, we act as a data controller for presenter account data, and as a data processor on behalf of presenters for participant response data that they collect using the Service.

2. What data we collect

Account holders (presenters)

• Registration data: Email address, authentication method (email/password or Google OAuth)
• Profile data: Display name (if provided via Google OAuth)
• Subscription data: Plan tier, billing dates (payment card details are held by Stripe, not by us)
• Usage data: Presentations created, questions built, last login timestamp
• Support data: Messages and support tickets you send us

Participants (audience members who answer polls)

• Name: The display name entered voluntarily before answering (maximum 60 characters). This is the only personally identifying information collected from participants.
• Poll responses: The answers submitted to a specific question
• Timing data: How long it took to answer (used for leaderboard ranking)
• Submission timestamp: When the answer was submitted

Participants do not create accounts. Their data is associated with a session code and stored under the presenter's account. No participant email address or device identifier is collected.

Technical data (all users)

• IP address (logged by Firebase/Google infrastructure for security purposes)
• Browser type and version
• Referring URL
• Firebase session tokens (stored locally in your browser)

macOS Companion app

The companion app captures your screen locally to detect PollSlide QR codes. No screen content is transmitted to our servers. The detection runs entirely on your device. The app communicates with Firebase only to read session data and display poll results, using the same data described above.

3. How we use your data

• Service delivery: Authenticating you, synchronising your poll data in real time, displaying results
• Account management: Processing subscription payments (via Stripe), sending receipts and upgrade/downgrade confirmations
• Support: Responding to support tickets and technical queries
• Security: Detecting and preventing fraud, abuse, and unauthorised access
• Service improvement: Analysing aggregate usage patterns to improve the product (no individual-level behavioural profiling)
• Legal compliance: Complying with applicable laws and responding to lawful requests
• Communications: Sending transactional emails (receipts, security alerts) and, with your consent, product updates

We do not use your data for advertising, sell it to third parties, or use it to train AI models.

4. Legal basis for processing (GDPR)

For users in the EEA, UK, or Switzerland, our legal bases are:

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the Service you signed up for — authentication, data sync, billing
• Legitimate interests (Art. 6(1)(f)): Security monitoring, fraud prevention, aggregate analytics, improving the Service
• Legal obligation (Art. 6(1)(c)): Tax records, responding to lawful government requests
• Consent (Art. 6(1)(a)): Marketing emails (you can withdraw consent at any time)

For participant data, we process as a data processor on behalf of the presenter (who is the data controller). Presenters are responsible for having an appropriate legal basis to collect participant responses under their applicable law.

5. Who we share data with

We do not sell or rent personal data. We share it only with the following categories of sub-processors:

• Google Firebase / Google LLC — Real-time database, authentication, storage. Data is stored on Google Cloud infrastructure. Firebase Privacy Policy
• Stripe, Inc. — Payment processing. Stripe holds billing and card data; we receive only subscription status and billing dates. Stripe Privacy Policy
• Vercel, Inc. — Web hosting and serverless functions. Vercel Privacy Policy

We may also disclose data: (a) to comply with a legal obligation or valid court order; (b) to protect the rights or safety of PollSlide, our users, or the public; or (c) in connection with a merger, acquisition, or sale of assets, where the acquirer will be bound by this policy.

6. International data transfers

PollSlide Technologies LLC is based in the United States. Your data is stored on Google Firebase infrastructure, which may be located in the US or other countries. When we transfer data from the EEA, UK, or Switzerland to the US, we rely on:

• The EU–US Data Privacy Framework (where applicable)
• Standard Contractual Clauses (SCCs) adopted by the European Commission

You may request a copy of the relevant transfer mechanisms by emailing help@pollslide.com.

7. How long we keep your data

• Account data: Retained for the duration of your account plus 30 days after deletion
• Participant response data: Retained for as long as the associated presentation exists. Presenters can delete it at any time using the Reset Tally or Delete Presentation functions.
• Billing records: Retained for 7 years as required for tax purposes
• Support correspondence: Retained for 3 years
• Security logs: Retained for 90 days

After the retention period, data is deleted or anonymised.

8. Security

We take the security of your data seriously. Our measures include:

• All data in transit is encrypted using TLS 1.2 or higher
• Firebase Realtime Database rules enforce per-user access controls — your data is not readable by other users
• Passwords are hashed by Firebase Authentication; we never see or store plaintext passwords
• The admin panel is restricted to authorised personnel only and requires authentication
• The macOS Companion app processes screen content locally; no screen data is transmitted

No system is perfectly secure. In the event of a data breach affecting your rights, we will notify you and relevant supervisory authorities as required by law.

9. Your rights — EEA / UK users (GDPR)

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure / "right to be forgotten" (Art. 17): Request deletion of your personal data (subject to legal retention obligations)
• Right to restriction (Art. 18): Request that we restrict processing of your data in certain circumstances
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority. In the EU, find your authority at edpb.europa.eu.

10. Your rights — California users (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act:

• Right to know: Request disclosure of the categories and specific pieces of personal information collected about you in the past 12 months
• Right to delete: Request deletion of your personal information, subject to certain exceptions
• Right to correct: Request correction of inaccurate personal information
• Right to opt-out of sale/sharing: We do not sell or share personal information for cross-context behavioural advertising
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, email help@pollslide.com with the subject line "California Privacy Request". We will respond within 45 days.

11. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us at help@pollslide.com and we will delete it promptly.

For users aged 13–16, we require parental or guardian consent. Educators using PollSlide with students should ensure they have appropriate consent and data processing agreements in place under applicable law (e.g. FERPA in the US, GDPR in the EU).

Audience participants (including classroom use): participants join sessions without creating an account and provide at most a display name and their answers — we do not knowingly collect any other personal data from participants, show them no advertising, and never use their responses for profiling or marketing. Where a session's audience includes children (for example a school class), the presenter and their institution are responsible for obtaining any legally required consents before running the session (e.g. school authorisation under COPPA in the US, or parental consent under GDPR Article 8 in the EU/EEA). Participant responses are stored as part of the presenter's session results and are deleted when the presenter deletes the presentation or their account.

12. Cookies

We use cookies and similar technologies. For full details see our Cookie Policy. You can manage your cookie preferences at any time by clicking "Cookie settings" in the footer.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice in the Service at least 30 days before they take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact and DPA

For any privacy-related questions or to exercise your rights:

B2B customers who require a Data Processing Agreement (DPA) for GDPR compliance may request one by emailing help@pollslide.com.