01Who we are
Askwise is a survey and form builder. Askwise is operated by Earth Wide Service Limited, a company incorporated in Hong Kong. In this policy, “Askwise”, “we”, “us” and “our” refer to Earth Wide Service Limited.
- Legal entity
- Earth Wide Service Limited
- Incorporated in
- Hong Kong
- Company Registry No.
- 79877575
- Registered address
- Room 511, 5/F, Ming Sang Industrial Building, 19-21 Hing Yip Street, Kwun Tong, Hong Kong
You can reach us about anything in this policy at [email protected].
02Customers, respondents and our two roles
Askwise handles personal data for two groups of people, and our role is different for each:
| Who | Whose data | Our role |
|---|---|---|
| Customers | People with an Askwise account: your name, email, password hash, plan and billing details, and how you use the product. | Controller (a “data user” under the Hong Kong Personal Data (Privacy) Ordinance). We decide how this data is used, as described in this policy. |
| Respondents | People who answer a survey built on Askwise: their answers and the limited technical context we record with them. | Processor on behalf of the customer who created the survey. The customer is the controller and decides what is collected and why. Our Data Processing Addendum governs this. |
03Customer account data
When you sign up and use your account, we store:
| Data | Details | Why we need it |
|---|---|---|
| Email address | The address you sign up with. | Signing in, password resets, receipts, service notices and the notifications you switch on. |
| Name | The name you give us. | Addressing you in the product and in emails. |
| Password | Stored only as a bcrypt hash. We never store or see your password in plain text. | Authenticating you. |
| Email preferences | Whether you want response notifications and summary emails. | Sending, or not sending, those emails. |
| Sessions | A hashed session token and your browser's user-agent string, kept server-side for 30 days. | Keeping you signed in and letting you recognise your sessions. |
| Password-reset tokens | A hashed, single-use token that expires shortly after it is issued. | Letting you reset a forgotten password securely. |
04Billing data
If you buy a paid plan, we also store your plan, billing interval (monthly or yearly), renewal date, cancellation status, and your invoices and their amounts.
05Surveys and responses
Survey content
For each survey you build we store its questions, settings, design, logic, welcome and thank-you screens, and any text or images you add, in both draft and published versions.
Responses
When someone answers one of your surveys, we store on your behalf:
- their answers, saved question by question as they go, so a response may be stored even if the respondent doesn’t finish;
- timestamps: when the response was started and completed, and how long it took;
- device type (mobile, tablet or desktop), derived from the browser’s user-agent. We don’t keep the user-agent string itself;
- referrer: the website the respondent came from (domain only), and whether the survey was opened as an embed;
- hidden-field values passed in the survey URL by the customer, for example a campaign name or a customer ID.
View counts
For each survey we count how many times it was viewed per day. These are aggregate numbers only; they are not linked to individual visitors.
What respondents tell customers
Respondents may include personal data in their answers, for example their name or email address if a survey asks for it. What is asked is decided by the customer, who is responsible for having a lawful basis and telling respondents how answers are used.
06Messages and abuse reports
If you contact us or submit an abuse report, we store your message along with the name and email address you choose to give us, so we can investigate and reply. Abuse reports can be sent without an email address.
07Technical data and rate limiting
To protect Askwise from abuse, we use the IP address of each request transiently for rate limiting, for example on sign-in attempts, sign-ups, contact messages and survey submissions. Rate-limit counters cover short windows and are held in memory; they are not used to build a profile of anyone.
We do not use third-party analytics, advertising or social-media trackers, on getaskwise.com or on the surveys we host, and we don’t sell or share personal data for advertising. Our servers may keep routine technical logs (such as errors) to keep Askwise running and secure. Cookies are described in our Cookie Policy.
08Why we use customer data and our legal bases
Where the GDPR or UK GDPR applies, we rely on the following legal bases for customer data:
| Purpose | Legal basis |
|---|---|
| Creating and running your account, hosting your surveys, storing and showing your responses, exports | Performance of our contract with you |
| Taking payment, issuing invoices, keeping accounting records | Contract; compliance with legal obligations |
| Service emails: password resets, receipts, notices about your account and plan | Contract |
| Response notifications and summary emails | Contract, according to your email preferences |
| Rate limiting, preventing spam and abuse, securing the service, handling abuse reports | Our legitimate interest in a safe, reliable service |
| Answering your messages | Our legitimate interest in replying; contract where it concerns your account |
For respondent data, we process only on the customer’s documented instructions, as set out in the Data Processing Addendum. We do not make decisions about anyone based solely on automated processing that have legal or similarly significant effects.
09Who processes data for us
We share personal data only with service providers that help us run Askwise, under contracts that limit their use of it to providing their service to us:
| Provider | What they do for us | Location |
|---|---|---|
| Railway | Hosting and database for the application, including surveys and responses | United States / European Union |
| Resend | Transactional email: password resets, receipts, notices and response notifications | United States |
If a customer sets up webhooks or redirects, responses are sent to destinations chosen by that customer. Those destinations are the customer’s responsibility, not ours.
We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of our users, respondents or others. If Askwise is ever sold or merged, data would transfer to the new operator, who would remain bound by this policy until it is changed with notice.
10International transfers
Askwise is operated from Hong Kong, and our hosting and email providers operate in the United States and the European Union, so data may be transferred outside your country. Where the GDPR, UK GDPR or similar laws require it, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) with our providers. You can ask for more information about these safeguards at [email protected].
11How long we keep data
- Account data: for as long as your account is active. When you delete your account, it is deleted from our live systems within 30 days.
- Surveys and responses: until the customer deletes them. Customers can delete individual responses or whole surveys at any time, and everything is deleted with the account.
- Unfinished responses in the respondent’s browser: kept in local storage on their device until the response is submitted or they clear their browser data.
- Sessions: 30 days, or until you sign out.
- Rate-limit data: short in-memory windows only.
- Billing records: as long as tax and accounting laws require us to keep them, even after your account is deleted.
- Backups: we keep backups for up to 35 days, after which deleted data is gone for good.
12Exporting and deleting data
Export. In Settings → Your data you can download everything in your account, including your surveys and their responses, as a JSON file. On Pro and Business plans you can also export each survey’s responses as CSV.
Delete. You can delete a single response or an entire survey from the dashboard at any time. You can delete your whole account in Settings after confirming your password. Data is removed from our live systems within 30 days and from backups within 35 days. Billing records we must keep by law are retained as described above.
13Your rights
Depending on where you live, you have some or all of these rights:
- GDPR and UK GDPR: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and the right to complain to your local data protection authority.
- California (CCPA/CPRA): to know what personal information we collect and how we use it, to access, correct and delete it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
- Hong Kong (PDPO): to request access to and correction of your personal data.
Customers can exercise most of these rights themselves in Settings. For anything else, email [email protected]. We may need to verify your identity before acting, and we reply within the time limits set by applicable law.
Respondents should send requests about their answers to the customer who ran the survey, who is the controller. If we receive such a request, we will forward it to the customer and support them in responding.
14Security
We protect data with encryption in transit (HTTPS), bcrypt password hashing, hashed session and response tokens, signed webhooks, access restricted to the people who need it, and providers with established security practices. No system is perfectly secure; if a breach affecting personal data occurs, we will notify affected customers without undue delay, and the relevant authorities where the law requires. For respondent data, we notify the customer so they can meet their own obligations.
15Children
Askwise accounts are for people aged 16 and over. We do not knowingly collect personal data from children through our own website.
Customers may not survey children under 13 without verifiable parental consent (see our Acceptable Use Policy). If you believe a child has given personal data through Askwise without that consent, contact [email protected] and we will work with the customer to delete it.
16Changes to this policy
We will update this policy when our practices change and revise the “Updated” date at the top. If a change is significant, we will tell customers by email or in the product before it takes effect.
17Contact
Questions about privacy or requests about your data: [email protected]. Postal address: Earth Wide Service Limited, Room 511, 5/F, Ming Sang Industrial Building, 19-21 Hing Yip Street, Kwun Tong, Hong Kong.