This Privacy notice explains how Basirah ("Basirah", "we", "us") handles personal data when you use the platform at basirahtech.com. Basirah is a multi-tenant survey platform: organizations ("customers") use it to create and run surveys, and respondents complete those surveys.
Roles
For personal data contained in surveys and responses, the customer that runs the survey is the data controller and Basirah acts as a processor on their behalf. For account and platform-operational data (see below), Basirah is the controller.
What we collect
- Account data: name, email, organization, role, and authentication identifiers (including identity-provider subject IDs when you use single sign-on).
- Survey content & responses: the questions customers author and the answers respondents submit, including any files uploaded to a survey.
- Operational data: security and audit logs (actor, action, timestamp), session metadata, and basic technical information needed to operate and secure the service.
How we use data
- To provide the platform: authoring, distribution, response collection, reporting, and exports.
- To secure the service: authentication, abuse prevention, and audit logging.
- To maintain and improve reliability and support.
Hosting & location
Basirah is hosted on dedicated infrastructure in a Frankfurt, Germany (EU) data centre operated by Hostinger. Data is encrypted in transit (HTTPS/TLS). Internal services are not exposed to the public internet.
Sub-processors
We do not sell personal data. We use a limited set of sub-processors to run the service:
- Hostinger — cloud hosting and infrastructure (Frankfurt, Germany / EU).
- Google LLC — "Sign in with Google" authentication, when a user chooses it.
- Email / SMS / WhatsApp providers — message delivery, only for the channels a customer explicitly enables for their surveys.
We notify customers of material changes to this list.
Retention
Survey responses and related data are retained under the controlling customer's configuration and instructions, and are deleted when the customer deletes them or closes their workspace. Account and audit data are retained for the life of the account and for up to 12 months after account closure (to meet legal and security obligations), then deleted or anonymized.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data. If your data was provided to a survey run by a customer, please contact that organization; we will assist them as their processor. For account data, contact us directly.
Contact
Questions about this notice or a data request: info@basirahtech.com.