Privacy Policy

1. Data Controller

Crowdpulse is operated by Webtential ApS, located at Natsværmervej 48, Denmark. We are the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR).

For data protection inquiries, contact us at [email protected].

2. What Data We Collect

Account data (presenters)

• Name and email address (from Google sign-in or magic link)
• Profile picture (if provided by Google)
• Account creation date and last login

Session and interaction data

• Session titles and settings you create
• Poll questions, options, and voting results
• Q&A submissions and reactions
• Word cloud responses

Audience participant data

• Name (only when voting is non-anonymous, as chosen by the presenter)
• Votes, reactions, and text responses submitted during a session
• No account creation is required for audience participants

Technical data

• IP address and browser type (server logs)
• Pages visited and features used

3. Why We Collect It (Legal Basis)

• Contract performance — To provide the Service you signed up for (account management, session creation, voting)
• Legitimate interest — To improve the Service, prevent abuse, and ensure security
• Consent — For optional features like marketing emails (you can withdraw consent at any time)
• Legal obligation — To comply with tax and accounting requirements

4. Third-Party Processors

We share data with the following third-party services:

Each processor is bound by data processing agreements and processes data only as instructed by us.

5. International Data Transfers

Our servers are located in the United States. When you use Crowdpulse, your data is transferred to and stored in the US. We ensure appropriate safeguards are in place for these transfers, including the EU-US Data Privacy Framework where applicable.

6. Data Retention

• Account data — Retained while your account is active. Deleted within 30 days of account deletion.
• Session data — Retained while your account is active. You can delete individual sessions at any time.
• Anonymous voting data — Aggregated results may be retained even after session deletion; individual responses are deleted with the session.
• Server logs — Retained for up to 90 days for security and debugging purposes.

7. Your Rights (GDPR)

As a user in the EU/EEA, you have the right to:

• Access — Request a copy of all personal data we hold about you
• Rectification — Correct inaccurate or incomplete data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Portability — Receive your data in a structured, machine-readable format
• Restriction — Request restricted processing of your data
• Objection — Object to processing based on legitimate interest
• Withdraw consent — Where processing is based on consent, withdraw it at any time

To exercise these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

8. Cookies

Crowdpulse uses essential cookies only — for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Essential cookies do not require consent under GDPR.

9. Children's Privacy

Crowdpulse is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

For privacy-related questions or to exercise your data rights, contact us at [email protected].