This policy explains how TopAI Surveys ("TopAI Surveys", "we", "us") handles personal data and advertising data when you visit topaisurveys.com, use our demo workspace, or connect a Google Ads account to our platform.
Data obtained through Google APIs is governed by our Google API data use statement, which forms part of this policy.
1. Who is responsible for your data
TopAI Surveys is the controller for personal data collected through this website and the demo workspace. For advertising data retrieved from a customer's Google Ads account, we act as a processor on behalf of that customer, who remains the controller.
Contact: privacy@topaisurveys.com
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, work email, company, role | Provided by you |
| Enquiry data | Message content, account volume, stated measurement goals | Contact form or email |
| Usage data | Pages viewed, referring URL, browser and device type, approximate location derived from IP | Automatically collected |
| Authorisation data | OAuth tokens issued by Google after a customer grants access to their own Google Ads account | Google OAuth 2.0 |
| Advertising data | Account structure and daily performance metrics for connected accounts | Google Ads API |
| Survey response data | Aggregated, de-identified survey responses used for measurement | First-party survey panels |
We do not collect Google account passwords, and we do not request access to Gmail, Drive, Calendar or Contacts.
3. Why we use it
- To provide the service — synchronising delivery data, computing lift reports and displaying them to the authorised customer (performance of a contract).
- To respond to enquiries — replying to access requests and support messages (legitimate interests).
- To secure the service — detecting abuse, fraud and unauthorised access (legitimate interests and legal obligation).
- To improve the product — aggregate, de-identified usage analysis (legitimate interests).
- To meet legal obligations — accounting, tax and regulatory requirements.
We do not use advertising data or Google user data for advertising personalisation, retargeting, profiling, credit assessment, or sale to third parties.
4. Cookies
This website uses only strictly necessary cookies and local storage: a session cookie for the demo workspace sign-in, and a preference value that remembers whether you dismissed the demo notice. We do not run third-party advertising or analytics trackers that build cross-site profiles.
You can block or clear cookies in your browser settings; the demo workspace requires the session cookie to keep you signed in.
5. Sharing
- Infrastructure providers — hosting, storage and email delivery within the EU, under written data-processing terms.
- The customer — if you are a survey respondent, your responses are shared only in aggregate with the commissioning advertiser; if you are a workspace user, reporting is shared with your own organisation.
- Legal requirements — where we are obliged to disclose data by law or a valid legal request.
We never sell personal data or advertising data.
6. International transfers
Data is hosted in the European Union. Where a sub-processor processes data outside the UK/EEA, transfers rely on the UK International Data Transfer Addendum or the European Commission Standard Contractual Clauses, supported by a transfer risk assessment.
7. Retention
- Enquiries — 24 months from last contact.
- Workspace data — for the life of the account, then deleted within 30 days of closure.
- OAuth tokens — deleted immediately on revocation.
- Advertising data — rolling 25 months, or 30 days after revocation.
- Server logs — 90 days.
8. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing, and you may withdraw consent where processing relies on it. Write to privacy@topaisurveys.com; we respond within 30 days. You may also complain to your local supervisory authority (in the UK, the Information Commissioner's Office).
9. Security
Encryption in transit (TLS 1.2+) and at rest, least-privilege access control, audit logging, encrypted secret storage, and periodic review of connected accounts and scopes.
10. Children
The service is intended for business users and is not directed to children under 16. Survey participation is limited to panelists who have confirmed they meet the minimum age in their jurisdiction.
11. Changes
We update this policy when our processing changes. Material changes are announced on this page with a revised date.
12. Contact
Privacy enquiries and data requests: privacy@topaisurveys.com
General enquiries: partners@topaisurveys.com