Protecting accounts
- Require two-step verification for owners and admins as an organisation policy (Quibzy staff must use it).
- Use Google or Microsoft sign-in where your organisation manages those accounts centrally.
- Remove leavers promptly (Members → Remove). This also disables API keys they created.
- Review the activity log monthly for role changes, exports and new keys.
Respondent privacy
- Anonymous mode never links a response to an account, even if the respondent is signed in. Duplicate protection uses a one-way code, not an identity.
- Identified mode records who answered. Use it only when you need to, and say so in Why you’re asking.
- Public result pages show totals only, never individual or text answers.
- Cover images and logos are re-encoded, which removes location and camera metadata.
Data retention & deletion
- Organisation-wide: Workspace settings → Delete responses after a survey closes (days). Deletions are logged as “Retention policy deleted responses”.
- Individual responses: admins can delete them from the Responses list.
- Export files expire automatically; download links last 30 minutes.
- Deleting an organisation permanently removes all its surveys, responses and files.
Personal data requests
Account settings → Your data → Download my data gives you your profile, memberships, the surveys you created and the responses you gave to identified surveys. Delete my account signs you out everywhere and starts deletion. For help, contact contact@quibzy.com. See also the privacy notice.