> For the complete documentation index, see [llms.txt](https://docs.zigpoll.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zigpoll.com/faq/security-privacy-and-compliance.md). # Security, Privacy, and Compliance Information about data privacy, GDPR compliance, and security practices Protecting your data and your customers' data is important. Here are answers to the most common security and privacy questions. ### Is Zigpoll GDPR compliant? Yes. Zigpoll is designed with GDPR compliance in mind. We process data in accordance with GDPR requirements and provide tools to help you meet your own compliance obligations, including the ability to delete respondent data on request. ### Do you have a DPA, subprocessor list, and privacy policy? Yes. They are published on our website: * **Data Processing Addendum (DPA):** [zigpoll.com/dpa](https://www.zigpoll.com/dpa). It covers the EU Standard Contractual Clauses and the UK Addendum, and lists our subprocessors. * **Transfer Impact Assessment:** [zigpoll.com/tia](https://www.zigpoll.com/tia) * **Privacy Policy:** [zigpoll.com/privacy-policy](https://www.zigpoll.com/privacy-policy) * **Cookie Policy:** [zigpoll.com/cookie-policy](https://www.zigpoll.com/cookie-policy) * **Security overview:** [zigpoll.com/security](https://www.zigpoll.com/security) * **All terms and policies:** [zigpoll.com/terms-and-policies](https://www.zigpoll.com/terms-and-policies) ### Can you sign our DPA or complete a security questionnaire? Email with the document or questionnaire and your account name. The team handles these requests case by case. ### Is Zigpoll SOC 2 or ISO 27001 certified? Zigpoll does not currently hold its own SOC 2 or ISO 27001 certification. Zigpoll is working toward SOC 2 attestation. Production runs on Amazon Web Services, which holds those certifications for its infrastructure. Our [security page](https://www.zigpoll.com/security) describes the full security program. For the current status, contact . ### Does Zigpoll respect cookie consent? Yes. On Shopify, Zigpoll collects nothing until the visitor has consented to analytics through Shopify's Customer Privacy API. This works with any Shopify consent app. On other platforms, you can connect Zigpoll to your own consent manager with a single function call. See [Cookie Consent](/cookie-consent.md) for setup, including examples for Cookiebot, OneTrust, Google Consent Mode and the WordPress Consent API. ### Are Zigpoll surveys accessible to screen readers and keyboard users? The on-site survey is built to be usable without a mouse, and the work follows the WCAG 2.1 guidelines, although Zigpoll has not published a formal conformance report or VPAT. * **Keyboard.** Every answer option, button and the close control can be reached with Tab and activated with Enter or Space. Escape closes a pop-up survey. * **Screen readers.** Single Choice questions are exposed as a radio group, Multiple Choice as checkboxes, with the selected state announced, and controls carry labels. The pop-up is announced as a dialog. * **Motion.** Animations are turned off for visitors whose system has reduced motion enabled. * **Colour and contrast** are set by you in [Design and styling](/polls/display-settings.md), so check your chosen colours against your site's contrast requirements. * **Shopify checkout surveys** are rendered by Shopify's own checkout components, which carry Shopify's accessibility support. If an accessibility audit flags something in a Zigpoll survey, send the report to . ### Where is my survey data stored? Zigpoll is based in the United States. Survey data is processed by the service providers listed in our [DPA](https://www.zigpoll.com/dpa), including Amazon Web Services, MongoDB Atlas, and Redis Cloud. Data is encrypted in transit. See our [Privacy Policy](https://www.zigpoll.com/privacy-policy) for how international transfers are handled. If you have specific data residency requirements, contact before you sign up. ### Can I create anonymous surveys? Yes. If you don't collect email addresses or other identifying information in your survey, responses are effectively anonymous. Zigpoll does not require respondents to identify themselves unless you configure your survey to ask for that information. ### Can I delete a respondent's data? Yes. Open **Participants**, select the person, and click **More Actions**. Then choose one: * **Delete Participant** removes them and every response they submitted. Click **Delete** under **Delete Participant**. * **Delete Responses** removes only the responses you pick. Click **Enable** under **Delete Responses**, tick the responses to remove, then click **Delete Selection**. Use this to fulfill customer data deletion requests under GDPR and similar regulations. {% content-ref url="/pages/lzhG5Ivmp7ofmkfhnPjo" %} [Removing Participant Data](/tutorials/removing-participant-data.md) {% endcontent-ref %} ### Does Zigpoll use cookies? No. The on-site survey script doesn't set cookies. It uses your visitor's browser storage (local storage and session storage) to remember things like: * whether they have already seen or completed a survey, * page and session counts, and * campaign parameters. This keeps the same survey from showing again and again. No third-party tracking cookies are used. In regions that require consent, you can make Zigpoll wait for it. See [Cookie Consent](/cookie-consent.md). ### How do I prevent survey data from appearing in Shopify order notes? If you have the Shopify integration enabled, survey responses may be written to order notes or customer metafields. You can turn each of these off under your survey's **Settings → Workflows → Shopify** tab. Order notes and order details can also flow into packing slips, fulfilment apps, and ERPs. See [Order Details and Order Notes reach other systems](/polls/behavior-settings.md#order-details-and-order-notes-reach-other-systems). {% content-ref url="/pages/cUIo3hFmbOX7ogcg9qhp" %} [Shopify](/integrations/shopify.md) {% endcontent-ref %} ### Zigpoll added a customer to my email list. How do I stop it? That is the **Accepts marketing** setting. While it is on, a respondent whose email address Zigpoll has is marked in Shopify as subscribed to email marketing (and to SMS marketing when the survey collected a phone number), so they appear as subscribers in Shopify, and an email tool that syncs subscribers from Shopify will pick them up. Turn it off under the survey's **Settings → Workflows → Shopify** tab, and do the same for each survey that should not subscribe people. Turning it off stops new subscriptions; it does not unsubscribe anyone already marked. In accounts created on or after August 13, 2026, new surveys start with it off. In older accounts it is on unless you turn it off. See [What Accepts Marketing does](/polls/behavior-settings.md#what-accepts-marketing-does). This is separate from cookie consent, which controls whether a survey is shown at all. ### I received a phishing email that looks like it came from Zigpoll Zigpoll will never ask for your password via email. If you receive a suspicious email claiming to be from Zigpoll, do not click any links and forward it to so we can investigate. ### Do you have a bug bounty or vulnerability disclosure program? If you've identified a security vulnerability, please report it responsibly by emailing . We take security reports seriously and will respond promptly. {% hint style="info" %} Have a security or privacy question not covered here? Contact us at . {% endhint %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.zigpoll.com/faq/security-privacy-and-compliance.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.