Privacy policy

What we do with personal data, why we are allowed to, and how you get it back or removed. Written to the GDPR (DSGVO). Last updated 3 August 2026.

Controller and data protection contact

The controller (Verantwortlicher) for processing on this website and in the Better Feedback service within the meaning of Art. 4 (7) GDPR is:

QFINITY SOLUCOES EM TECNOLOGIA E INTELIGENCIA ARTIFICIAL LTDA
Rua Juracy Magalhães 853, Ponto Central
44075-115 Feira de Santana – BA
Brazil

  • Legal form: Sociedade Empresária Limitada (LTDA)
  • CNPJ: 65.972.544/0001-60
  • Represented by: Renata de Oliveira Barbosa Wisniewska
  • Responsible for data protection: Patryk Wisniewski
  • Email for privacy requests: hello@betterfeedback.app

Write to Patryk Wisniewski at the address above or at hello@betterfeedback.app for anything on this page — access, deletion, objection or a complaint. Put “Privacy” in the subject line and we will answer within one month, as Art. 12 (3) GDPR requires.

The short version

  • This website runs no analytics, no tag manager, no advertising pixel and no third-party tracking of any kind.
  • The feedback demo you can try on this site stays in your browser tab. Nothing you click or type into it is sent to us.
  • We do not sell personal data, ever, to anyone, and we do not use it to train models.
  • You only give us personal data if you email us or create an account.

Data processed when you visit this website

Server log data. Our hosting provider processes the technical data your browser transmits on every request: IP address, date and time, the URL requested, referrer, browser and operating system version, and the amount of data transferred. This is necessary to deliver the page at all and to detect attacks. Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in a functioning, secure website. Log data is not merged with other sources and is not used to identify you.

Cookies. This website sets no tracking or advertising cookies and therefore shows no cookie banner. It reads exactly one first-party cookie, bf_signed_in, which the Better Feedback app may set on the shared domain to record that this browser has an account. It contains no identifier, no token and no personal data — only the fact that a session exists — and it is used solely to show “Open dashboard” instead of “Sign up” in the header. Legal basis: Art. 6 (1)(f) GDPR; it is strictly functional and needs no consent.

The feedback demo on this site. The widget you can try here runs in demo mode: everything you click, write or mark is held in your browser's own sessionStorage and disappears when you close the tab. It is not transmitted to us and it is not stored on any server.

When you contact us

If you email us, we process your address, your name if you give one, and the content of your message in order to answer it. Legal basis: Art. 6 (1)(b) GDPR where your message concerns a contract or its initiation, otherwise Art. 6 (1)(f) GDPR — our legitimate interest in answering enquiries.

We keep correspondence for as long as it takes to deal with your enquiry and for as long as statutory retention duties apply, then delete it.

When you create a Better Feedback account

To run the service we process your email address, your name if you supply one, authentication data, your workspace and project settings, and the feedback items collected by widgets you install. Legal basis: Art. 6 (1)(b) GDPR — performance of the contract you enter into with us.

Feedback items you collect. When a reviewer leaves a note on a site you have installed the widget on, we store the note, the page URL, the element it was pinned to and its surrounding markup context, plus browser and viewport information — and, only if the reviewer chooses to give them, a name and email address. You are the controller for that content in relation to your own clients and reviewers; we process it on your instructions as your processor. If you deploy the widget on a page that shows personal data, you are responsible for having a legal basis for that.

If you are billed for a paid plan, our payment provider processes the payment data needed to take it. We do not see or store full card numbers. Legal basis: Art. 6 (1)(b) and (c) GDPR — contract performance and statutory accounting duties.

Processors and recipients

We keep the list of companies that touch your data as short as the product allows. Each of them is bound by a data processing agreement under Art. 28 GDPR and may only process data on our documented instructions.

  • Hosting and delivery: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — serves this website and the application. Processes request and log data.
  • Database and authentication: Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992 — stores account, workspace and feedback data for the application.
  • Transactional email: The email provider we use to send sign-in links, notifications and receipts. Processes your email address and message metadata.

Beyond these we disclose personal data only where we are legally required to — for example to tax authorities or, on a valid order, to law enforcement. We do not pass data to advertisers or data brokers.

Transfers outside the EEA

The controller is established in Brazil, and some of our processors are established in the United States and Singapore. Personal data is therefore transferred outside the European Economic Area.

The European Commission has issued no adequacy decision for Brazil. Transfers to the controller are made on the basis of the Standard Contractual Clauses adopted by the Commission under Art. 46 (2)(c) GDPR, together with the supplementary technical measures described below. Transfers to US processors are additionally covered by the EU–US Data Privacy Framework where that processor is certified. You may request a copy of the safeguards in place from hello@betterfeedback.app.

  • Data is encrypted in transit (TLS) and at rest.
  • Access to production data is limited to the people who need it to run the service, over individual accounts.
  • We keep the categories of data we hold deliberately small, so that a transfer carries as little as possible.

How long we keep things

  • Server logs: deleted or anonymised by our hosting provider on a short rolling window.
  • Account and workspace data: for as long as your account exists. Delete your account and we remove it, apart from what accounting law requires us to keep.
  • Feedback items: until you delete them or delete the project they belong to.
  • Invoices and accounting records: for the statutory retention period applicable to the controller.
  • Email correspondence: until the matter is closed and any statutory retention period has run.

Your rights

Under the GDPR you have the right to:

  • access — ask what personal data we hold about you and get a copy (Art. 15);
  • rectification — have inaccurate data corrected (Art. 16);
  • erasure — have your data deleted where no legal ground to keep it remains (Art. 17);
  • restriction — have processing limited while a dispute is resolved (Art. 18);
  • data portability — receive your data in a machine-readable format, or have it sent to another provider (Art. 20);
  • object — object at any time to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21);
  • withdraw consent — with effect for the future, wherever processing rests on consent (Art. 7 (3)).

Exercise any of them by writing to hello@betterfeedback.app. We do not charge for this and we will not make you jump through hoops.

You also have the right to complain to a supervisory authority (Art. 77 GDPR) — in the EU, the authority in your country of residence, place of work, or of the alleged infringement. In Austria that is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.

No automated decision-making, no profiling

We do not use your personal data for automated decision-making producing legal effects concerning you, or for profiling, within the meaning of Art. 22 GDPR. We do not use customer content to train machine-learning models.

Children

Better Feedback is a tool for professional use and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, tell us at hello@betterfeedback.app and we will delete it.

Changes to this policy

We update this policy when the product or the law changes. The current version always lives at this URL and carries the date shown at the top. If a change materially affects how we handle your data, we will tell account holders by email before it takes effect.