> For the complete documentation index, see [llms.txt](https://docs.zigpoll.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zigpoll.com/faq/security-privacy-and-compliance.md). # Security, Privacy, and Compliance Information about data privacy, GDPR compliance, and security practices Protecting your data and your customers' data is important. Here are answers to the most common security and privacy questions. ### Is Zigpoll GDPR compliant? Yes. Zigpoll is designed with GDPR compliance in mind. We process data in accordance with GDPR requirements and provide tools to help you meet your own compliance obligations, including the ability to delete respondent data on request. ### Do you have a DPA, subprocessor list, and privacy policy? Yes. They are published on our website: * **Data Processing Addendum (DPA):** [zigpoll.com/dpa](https://www.zigpoll.com/dpa). It covers the EU Standard Contractual Clauses and the UK Addendum, and lists our subprocessors. * **Transfer Impact Assessment:** [zigpoll.com/tia](https://www.zigpoll.com/tia) * **Privacy Policy:** [zigpoll.com/privacy-policy](https://www.zigpoll.com/privacy-policy) * **Cookie Policy:** [zigpoll.com/cookie-policy](https://www.zigpoll.com/cookie-policy) * **Security overview:** [zigpoll.com/security](https://www.zigpoll.com/security) * **All terms and policies:** [zigpoll.com/terms-and-policies](https://www.zigpoll.com/terms-and-policies) ### Can you sign our DPA or complete a security questionnaire? Email with the document or questionnaire and your account name. The team handles these requests case by case. ### Is Zigpoll SOC 2 or ISO 27001 certified? Zigpoll does not currently hold its own SOC 2 or ISO 27001 certification. Zigpoll is working toward SOC 2 attestation. Production runs on Amazon Web Services, which holds those certifications for its infrastructure. Our [security page](https://www.zigpoll.com/security) describes the full security program. For the current status, contact . ### Does Zigpoll respect cookie consent? Yes. On Shopify, Zigpoll collects nothing until the visitor has consented to analytics through Shopify's Customer Privacy API. This works with any Shopify consent app. On other platforms, you can connect Zigpoll to your own consent manager with a single function call. See [Cookie Consent](/cookie-consent.md) for setup, including examples for Cookiebot, OneTrust, Google Consent Mode and the WordPress Consent API. ### Where is my survey data stored? Zigpoll is based in the United States. Survey data is processed by the service providers listed in our [DPA](https://www.zigpoll.com/dpa), including Amazon Web Services, MongoDB Atlas, and Redis Cloud. Data is encrypted in transit. See our [Privacy Policy](https://www.zigpoll.com/privacy-policy) for how international transfers are handled. If you have specific data residency requirements, contact before you sign up. ### Can I create anonymous surveys? Yes. If you don't collect email addresses or other identifying information in your survey, responses are effectively anonymous. Zigpoll does not require respondents to identify themselves unless you configure your survey to ask for that information. ### Can I delete a respondent's data? Yes. Open **Participants**, select the person, and click **More Actions**. Then choose one: * **Delete Participant** removes them and every response they submitted. Click **Delete** under **Delete Participant**. * **Delete Responses** removes only the responses you pick. Click **Enable** under **Delete Responses**, tick the responses to remove, then click **Delete Selection**. Use this to fulfill customer data deletion requests under GDPR and similar regulations. {% content-ref url="/pages/lzhG5Ivmp7ofmkfhnPjo" %} [Removing Participant Data](/tutorials/removing-participant-data.md) {% endcontent-ref %} ### Does Zigpoll use cookies? No. The on-site survey script doesn't set cookies. It uses your visitor's browser storage (local storage and session storage) to remember things like: * whether they have already seen or completed a survey, * page and session counts, and * campaign parameters. This keeps the same survey from showing again and again. No third-party tracking cookies are used. In regions that require consent, you can make Zigpoll wait for it. See [Cookie Consent](/cookie-consent.md). ### How do I prevent survey data from appearing in Shopify order notes? If you have the Shopify integration enabled, survey responses may be written to order notes or customer metafields. You can turn each of these off under your survey's **Settings → Workflows → Shopify** tab. Order notes and order details can also flow into packing slips, fulfilment apps, and ERPs. See [Order Details and Order Notes reach other systems](/polls/behavior-settings.md#order-details-and-order-notes-reach-other-systems). {% content-ref url="/pages/cUIo3hFmbOX7ogcg9qhp" %} [Shopify](/integrations/shopify.md) {% endcontent-ref %} ### I received a phishing email that looks like it came from Zigpoll Zigpoll will never ask for your password via email. If you receive a suspicious email claiming to be from Zigpoll, do not click any links and forward it to so we can investigate. ### Do you have a bug bounty or vulnerability disclosure program? If you've identified a security vulnerability, please report it responsibly by emailing . We take security reports seriously and will respond promptly. {% hint style="info" %} Have a security or privacy question not covered here? Contact us at . {% endhint %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.zigpoll.com/faq/security-privacy-and-compliance.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.