Summary. Full document available on request.
Privacy notice
Last updated 27 October 2026
This page is a plain English summary. For the full document, email hello@surveystack.co.uk.
Two kinds of data
Data about the people who use StackProof (names, work emails, roles), for which SurveyStack is the controller. And data inside the reports your firm checks, such as client names and addresses, for which your firm is the controller and we act as your processor under the data processing agreement.
What we collect about users
Name, work email, role, the firm’s details you give us, sign-in times, and the scans and calls each person makes. Card payments are handled by Stripe; we never see card numbers.
Why
To provide the service, sign people in, keep the QA record, bill the firm and improve the checks. Our lawful bases are the contract with your firm and our legitimate interest in running and improving StackProof.
Report text
Held only until the draft and final are compared, then deleted, and never used to train AI models. See the security page for the processors involved.
Cookies
The app uses one cookie to keep you signed in. This website uses no tracking cookies.
How long we keep it
User details for as long as the firm’s account is open, and up to six years after for accounts and legal claims. QA records for as long as the firm’s account is open, unless the firm asks us to delete them.
Your rights
You can ask to see, correct or delete your data, or object to how we use it, by emailing hello@surveystack.co.uk. You can also complain to the Information Commissioner’s Office.