Information collected from business users

When you request access, create an account, or contact us, we may collect name, work email, phone number, company name, industry, role, number of locations, and messages you send. We also collect account credentials and usage information related to your use of the platform.

Information collected from customers submitting feedback

When end customers respond to questionnaires on your behalf, we may collect their responses, optional contact information if provided, and technical data such as browser type and timestamps. Customers should not include unnecessary sensitive personal information in free-text fields.

Contact information

Contact details you provide through forms, email, or support channels are used to respond to inquiries and manage your relationship with us.

Account information

We maintain account records including authorized users, subscription status, and configuration settings necessary to operate the service.

Device and browser information

We may collect IP address, device identifiers, browser type, operating system, and similar technical data for security and troubleshooting.

Questionnaire responses

Responses are processed to generate summaries, themes, and reports for your organization. Business clients may receive original comments as well as summaries depending on configuration and role.

Usage analytics

We record first-party website events on Unsaid marketing and restaurant-owner conversion pages: a pseudonymous visitor id, session id, event name, page path, timestamp, landing page, referrer, campaign parameters (UTM), and a coarse device category. We do not store page content, form values, email addresses, or other unnecessary personal data in this event log. Anonymous visitor ids are not joined to Smartlead contacts or email hashes. Public directory browsing and guest feedback sessions are kept separate from owner acquisition metrics. Raw events are retained for 13 months, then deleted. Engagement events (scroll, section views, CTA impressions, form field names without values, and friction signals) use the same first-party table. Third-party product analytics (PostHog) is optional, consent-gated, and not used as the conversion source of truth. Session recording is not enabled. Error monitoring (Sentry) may send technical diagnostic data when enabled so we can fix outages. Authenticated product areas may also log events for reliability and support. You can clear cookies and site data in your browser; see our Cookie Policy for details.

Cookies

We use essential cookies as described in our Cookie Policy. You can clear cookies through your browser settings at any time.

How information is used

We use information to:

Provide, maintain, and improve the services
Process questionnaire responses and deliver insights
Communicate about your account, support, and product updates
Secure the platform and prevent fraud or abuse
Comply with legal obligations

How customer feedback is analyzed

Feedback may be organized into themes, patterns, and labels to help leadership understand operational trends. Analysis is performed to deliver the service to the business that requested it. Feedback is not publicly posted by Unsaid.

Service providers

We use trusted vendors for hosting, email, and other operational functions. They process data on our instructions and subject to contractual protections.

Data sharing

We share customer feedback with the business or organization that configured the questionnaire. We may share information with service providers, professional advisers, or authorities when required by law or to protect rights and safety. We do not sell personal information.

Data retention

We retain information for as long as needed to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and customer configuration. First-party website event records are kept for 13 months, then purged.

Data security

We implement administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure. See our Security page for an overview.

Business customer access

Organizations using Unsaid control which authorized users can access feedback through role-based permissions. Businesses are responsible for their internal access policies.

Customer anonymity and confidentiality

Depending on configuration, end customers may respond without providing identifying contact information. Feedback is shared with the requesting business—not published as public reviews.

Legal requests

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Unsaid, our users, or others.

Corporate transactions

If we are involved in a merger, acquisition, or sale of assets, information may be transferred subject to this Policy or notice to you as required by law.

Children's privacy

Unsaid is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children.

State privacy rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information. Contact us to submit a request. We will verify requests as required by law.

Advertising measurement (Meta)

When advertising measurement is allowed under our Privacy Choices rules, Unsaid may use Meta’s browser Pixel and matching Conversions API events on getunsaid.co (Unsaid Website dataset only — not Rally). Events may include PageView, CompleteRegistration after account creation, and StartTrial after the product trial activates. Meta may receive technical identifiers (for example cookie IDs such as _fbp/_fbc when present), truncated request metadata, and hashed contact data when available for matching. Browser and server events use the same privacy decision so server-side events do not bypass browser restrictions.

California privacy disclosures

California residents may have rights under the CCPA/CPRA, including the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of sale or sharing of personal information as those terms are defined by law. Depending on configuration and your choices, Meta advertising measurement may involve disclosures that could be considered “sharing” or cross-context behavioral advertising under some state privacy laws. Use Privacy Choices to state a preference, or enable Global Privacy Control (GPC) in your browser. Where applicable, we treat GPC as an opt-out of Meta advertising measurement while the signal is present. To exercise other rights, contact privacy@getunsaid.co. We will not discriminate against you for exercising privacy rights.

Privacy Choices

Manage optional Meta advertising measurement for Unsaid (getunsaid.co only — never Rally). First-party visit and campaign cookies used for site operation and attribution are described in the Cookie Policy and remain subject to a separate privacy classification review. Preferences are stored so we do not ask repeatedly; Global Privacy Control and other applicable opt-outs take precedence over a prior marketing preference while those signals apply. Where prior consent is required (including when we cannot determine your location), we ask before loading Meta. Where an opt-out model is used, you can opt out here anytime.

Controls live on the Cookie Policy preferences section.

International users

If you access the services from outside the United States, your information may be processed in the United States or other countries where we or our providers operate. By using the services, you acknowledge that your information may be transferred to and processed in the United States, which may have different data-protection rules than your country.

Aggregated and de-identified information

We may use aggregated or de-identified information to improve the product, develop features, and understand usage trends. This information does not identify individuals.

Changes to the policy

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Material changes will be posted on this page.