Privacy Policy

Last updated: September 2026

Crowdzo is a service for creating and running interactive presentations, operated by SimplyPulse AB. We are committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and what rights you have.

1. Data Controller

2. Data we collect from account holders

If you create an account to build and save presentations, we collect:

• Email address - provided when you create an account, and used to send you login links.
• Subscription status - whether you are on the Free or the Plus plan.
• Your presentations - the slides, questions and any images you upload.

We do not collect names or payment card details. Payment processing for Crowdzo Plus is handled entirely by our payment provider, Paddle.com Market Ltd ("Paddle"). When you subscribe, Paddle collects and processes your payment information directly. We only receive confirmation of a successful subscription and store your subscription status accordingly. For details on how Paddle handles your data, see Paddle's Privacy Policy.

3. Data we collect from session participants

People who join a session as participants do not create an account, and we do not ask them for an email address or any other contact details. What is collected from a participant is what they choose to submit:

• Answers to slides - the option chosen in a poll, the word sent to a word cloud, the text written in an open-text answer, or the value picked on a scale.
• Questions and votes in Q&A - the text of any question asked, and which questions were voted for.
• A display name, only if given - a participant may ask a question under a name they type in themselves, or anonymously. Nothing requires a real name.

During a session each participant is identified by a randomly generated token. The token is not derived from an IP address, a device, or anything about the browser, and it cannot be worked backwards to anything about the person holding it. It exists so that participants can be shown their own answers, can reconnect if their connection drops, and so that limits on how often questions and votes may be submitted can be applied.

The token is stored in the participant's own browser using session storage, which means it is discarded when the browser tab is closed. It is not linked to an account or an email address, and it is not used to recognise anyone across different sessions or on a later occasion.

We set no cookies for participants. The token is stored only because it is needed to deliver the session the participant chose to join.

As with any web service, our servers keep technical logs which may include IP addresses. These are used to operate and secure the service, not to profile participants.

Where a host is on the Plus plan, the answers given to slides are retained after the session and can be downloaded by that host as a CSV file. Questions asked in Q&A are not part of that download.

If you run sessions within an organisation, note that you decide what you ask your audience. Where you invite participants to submit personal data in a free-text answer or a question, you are responsible for that choice.

4. Why do we process your data?

We process personal data for the following purposes:

• Providing the service - sending login links, linking your account to your presentations, running live sessions and delivering answers between participants, host and big screen. Legal basis: performance of a contract (GDPR art. 6.1 b).
• Securing the service - applying limits on login attempts, invitations, questions and votes to protect against abuse. Legal basis: legitimate interest (GDPR art. 6.1 f).
• Marketing of our own services - we may send information about new features and offers from Crowdzo. Legal basis: legitimate interest (GDPR art. 6.1 f). You can object to this at any time by contacting us at hello@crowdzo.live.

5. How long do we keep your data?

Your email address and your presentations are retained until you request account deletion, or automatically after 12 months of inactivity. Inactivity means you have not logged in during that period.

Links used to invite a moderator to a Q&A are not stored in readable form, expire after 30 days, and can be revoked by the host at any time, which disconnects that moderator immediately.

Login links expire 30 minutes after they are sent. If you choose to stay signed in, that session lasts 30 days.

6. Website analytics

We use Plausible Analytics to understand how our website is used - which pages are visited and where visitors arrive from. Plausible sets no cookies, collects no personal data, and does not follow visitors across other websites. It counts visits in aggregate and cannot identify an individual.

Analytics run on the public website only. Nothing is measured inside a running session, so what participants answer and ask is never part of this.

7. Who do we share your data with?

We will not sell your personal data to third parties.

Your personal data may be disclosed to public authorities where required by law, and to service partners who provide support services to SimplyPulse AB, such as IT services or email delivery. Where applicable, data processing agreements have been established with these partners.

8. Data storage and transfers

All data collected and stored directly by Crowdzo is held on servers within the EU. We do not transfer this data to countries outside the EU/EEA.

Payment processing is handled by Paddle.com Market Ltd, a company registered in the United Kingdom. The UK benefits from an EU adequacy decision, meaning transfers to Paddle are subject to an equivalent level of data protection. Paddle may in turn transfer payment-related data to the United States and other countries, relying on Standard Contractual Clauses (SCCs) as an appropriate safeguard. For full details see Paddle's Privacy Policy.

9. Data security

SimplyPulse AB is committed to protecting the security of your data. We have implemented appropriate technical and organisational security measures designed to protect the confidentiality and integrity of your data. All information provided to us is stored on secure servers. We apply reasonable safeguards appropriate to the sensitivity of the information, including the use of Transport Layer Security (TLS) to encrypt data transferred between your browser and our servers. Crowdzo uses no passwords, so there are no stored passwords to be exposed.

10. Your rights

Under GDPR you have the right to:

• Access - request a copy of the data we hold about you.
• Rectification - request that inaccurate data is corrected.
• Erasure - request that your account and email address are deleted.
• Data portability - request your data in a machine-readable format.
• Object - object to processing based on legitimate interest, such as marketing.

Send your request to hello@crowdzo.live and we will respond promptly.

Because participants are identified only by a random token that is discarded when the browser tab closes, we have no lasting way of tracing an individual answer or question back to a person in order to act on such a request. If you took part in a session and want something you submitted removed, contact the host who ran it.

11. Changes to this policy

We may update this policy from time to time. For significant changes we will notify you by email. The date of the most recent update is always shown at the top of this page.

Questions? Contact us at hello@crowdzo.live