Privacy Policy

This Privacy Policy explains how Survantis collects, uses, discloses and protects personal information when you visit survantis.com, create an account, buy our reports or subscriptions, or use our research tools (Radar, Scripter, Recap, Tagger and Shelf Checker, together the “Services”).

Survantis is a brand operated by Zeluxa Corp., 57 El Dorado St., Richmond Hill, Ontario L4C 0K8, Canada, and — for customers located in the United States — Zeluxa LLC, 5900 Balcones Drive #18174, Austin, Texas 78731, USA (“Survantis”, “we”, “us”). The entity that invoices you is the controller of your account and billing data.

1. Information we collect

Account information: name, email, company, country, password (stored only as a secure hash).
Billing information: billing name and address, tax/VAT ID, order history. Card and wallet details are collected directly by our payment processors (Stripe and PayPal); we never receive or store full card numbers.
Order and research briefs: the product, category and markets you ask us to research, and any notes you provide.
Content you upload to the tools: questionnaires, survey data, audio/video recordings, transcripts and open-ended responses (“Customer Data”).
Communications: messages sent through our contact forms, emails and newsletter preferences.
Technical data: IP address, browser type, pages visited and similar data collected through strictly necessary cookies and — only with your consent — analytics cookies. See our Cookie Policy.

2. How we use information

To provide, operate and support the Services, including producing and delivering reports you order;
To create and secure your account, process payments, issue invoices and prevent fraud;
To communicate with you about orders, subscriptions, service changes and support requests;
To send newsletters and product news where you have given express consent (you can unsubscribe at any time);
To improve our website and Services using aggregated, de-identified information;
To comply with legal, tax and accounting obligations and to enforce our agreements.

Customer Data is processed only to provide the Services to you, on your instructions. We do not sell Customer Data, and we do not use it to train general-purpose AI models for third parties.

3. Legal bases (EEA, UK and similar jurisdictions)

Where applicable law requires a legal basis, we rely on: performance of a contract (providing the Services), legitimate interests (securing and improving the Services), consent (newsletters, analytics cookies) and legal obligation (tax and accounting records).

Service providers acting on our behalf — hosting, email delivery, payment processing (Stripe, PayPal), analytics (only with consent) and AI infrastructure used to run our tools — under contracts that require confidentiality and appropriate security;
Zeluxa group companies (Zeluxa Corp. and Zeluxa LLC) that manage contracts, billing and support;
Legal and safety reasons — to comply with law, respond to lawful requests, or protect rights, property and safety;
Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

We do not sell or rent personal information, and we do not “share” it for cross-context behavioural advertising as those terms are defined under California law.

5. International transfers

We operate from Canada, the United States and Türkiye and use service providers that may process data in other countries. When information is transferred across borders, we use contractual and organisational safeguards to protect it consistent with this Policy and applicable law. Information stored in another country may be accessible to authorities of that country under its laws.

6. Retention

We keep account information while your account is active. Invoices and transaction records are retained for as long as tax laws require (generally six to seven years). Customer Data is kept for the duration of your subscription or project and deleted or returned on request, subject to backups that expire on a rolling basis.

7. Security

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), hashed passwords, access controls and restricted storage of deliverables. No method of transmission or storage is completely secure; please use a strong, unique password.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or port your personal information, withdraw consent, object to or restrict certain processing, and not be discriminated against for exercising these rights. Canadian residents have rights under PIPEDA and applicable provincial laws; California residents have rights under the CCPA/CPRA; EEA and UK residents have rights under the GDPR/UK GDPR.

To exercise your rights, email info@zeluxa.com or use “Request account deletion” in your account. We will respond within the time required by law (generally 30 days) and may need to verify your identity. You may also complain to your local data-protection authority, such as the Office of the Privacy Commissioner of Canada.

9. Marketing emails (CASL / CAN-SPAM)

We send newsletters only with your consent. Every email includes an unsubscribe link, and we process unsubscribe requests promptly. Transactional emails about your orders and account are not marketing messages.

10. Children

The Services are intended for businesses and professionals and are not directed to children under 16. We do not knowingly collect their personal information.

11. Changes

We may update this Policy from time to time. We will post the new version here with a new “last updated” date and, for material changes, notify account holders by email.

12. Contact

Privacy Officer, Zeluxa Corp. — 57 El Dorado St., Richmond Hill, ON L4C 0K8, Canada — info@zeluxa.com