Information on how data is processed
Data & privacy
This page gathers the facts about how Survey Coder handles your study data: where it is stored, in which region, which providers receive it and why, how long it is kept, and who to contact. Infrastructure facts verified on October 2, 2026.
Where data is stored
- Database, authentication and files: Supabase (PostgreSQL on AWS), region eu-west-1 (Ireland, European Union).
- Application and processing servers (API and tabulation engine): Railway, region europe-west4 (Netherlands, European Union).
- Independent backup copy: Cloudflare R2, EU jurisdiction.
- Web application: Vercel (global network). It only serves the app; it does not store customer data.
Responses, codebooks and results are stored in the European Union.
Providers that receive data, and why
Receive your survey data
- Anthropic (USA): Claude AI models, to propose the codebook, code responses and answer in the chat. It receives the open-ended response text, the question wording, the codebook and the project instructions.
- Supabase (Ireland): database, authentication and file storage.
- Railway (Netherlands): application and processing servers.
- Cloudflare R2 (EU): backup copy, encrypted before it leaves our infrastructure; Cloudflare cannot read its contents.
Do not receive your survey data
- Vercel: hosts the web application.
- Resend (USA): transactional email. It receives only your email address and the notice text.
- Stripe (USA): payments. Card data is handled by Stripe.
- Website analytics and marketing (Google Analytics 4 and Google Ads, Microsoft Clarity, LinkedIn Insight, OpenAI Ads pixel): they measure traffic on the public website, not the content of your surveys.
Connectors you turn on yourself (SurveyMonkey, Typeform, Qualtrics, Google Forms, Alchemer) use your own account on that platform; access tokens are stored encrypted.
Use of artificial intelligence
- A single language-model provider: Anthropic, through its commercial API. No other language-model providers are used to process your data.
- What is sent: the open-ended response text, the question wording, the codebook and the project instructions. Your account and billing data are not sent.
- Leaving the EU: this transfer to Anthropic (USA) is the only time survey data leaves the European Union.
- Training: Anthropic's Commercial Terms (section B) state that Anthropic may not train models on Customer Content from its services (anthropic.com/legal/commercial-terms).
- Retention at Anthropic: per its privacy center, Anthropic deletes API inputs and outputs from its backend within 30 days, with exceptions (Files API, zero-data-retention agreements, Usage Policy enforcement or legal obligations) (privacy.claude.com).
- Semantic search: the vectors (embeddings) are stored in the same Supabase database, in the eu-west-1 region (Ireland).
- Human review: AI results are proposals. Your team can review, correct or discard them before exporting.
Backups
- Supabase daily backup: automatic, kept for 7 days.
- Independent nightly copy: the database is dumped every night, encrypted before it leaves, and stored in Cloudflare R2 (EU jurisdiction) for 30 days.
- Weekly restore test: every Sunday a copy is restored in an isolated environment and compared with production.
Retention and deletion
When you delete a project, its data is removed from production immediately. Backup copies rotate, so that data disappears from all of them within 30 days at most.
Retention periods for other data (account, billing, support) are in the Privacy Policy.
Your rights and contact
The service is run by Insight Genius LLC (registered in Delaware, United States), operator of Survey Coder Pro.
To request access, correction, deletion or portability of your data, or for any question about how it is handled, write to hello@surveycoder.io. The Privacy Policy lists your rights under each jurisdiction (including Brazil's LGPD) and the response time.
About this page
This page describes facts about where and how data is handled. It is not a legal certification or a statement of compliance with any law. If your legal or security team needs more detail, write to us.
Frequently asked questions
- In which country is the data stored?
- In the European Union: the database in Ireland (Supabase, eu-west-1) and the processing servers in the Netherlands (Railway, europe-west4).
- Do responses leave the European Union?
- Only the text sent to Anthropic (USA) to propose the codebook and code the responses.
- How long until a deleted project is gone?
- It leaves production immediately and all backup copies within 30 days at most.