Surveys privacy

This page explains how HOA-OS handles survey response data. It supplements the main privacy policy.

Identified vs anonymous surveys

Every survey is created in one of two modes by the survey author:

• Identified. Your name is attached to your responses. Survey administrators see who answered what.
• Anonymous. Your responses are not linked to your name or email. Survey administrators see aggregate counts and individual response text but cannot determine who wrote any specific response. We enforce this at the database level: the response row carries no user identifier when the survey is in anonymous mode.

The mode is shown to you on every invitation email and on the response page.

Retention

Anonymous surveys have an additional safeguard: 30 days after the survey closes, the recipient list is scrubbed — your email address and account ID are removed from the invitation record. Response content is preserved for analytics, but cannot be linked to a recipient.

Identified-mode survey data is retained for as long as your community administrator chooses, subject to the main privacy policy.

Third-party processors

Survey emails are delivered via Resend. Bot-protection on the response page uses Cloudflare Turnstile. AI-assisted features (drafting, summary) use a third-party AI model provider; only survey content (questions, response text in aggregate) is sent — never email addresses, account IDs, or personally identifying information beyond what you write into a response.

Your rights

To request deletion of your survey data outside the automatic retention window, contact your community administrator or HOA-OS support.