Legal

Data Processing Addendum

Baseline processor terms for customers who use Conejo Survey to collect personal data through surveys.

Last updated: April 5, 2026 Terms Privacy Subprocessors

1. Scope

This Data Processing Addendum ("DPA") supplements the Conejo Survey Terms of Service and applies when a customer uses the Service to process personal data that is subject to applicable data protection law and no separate negotiated data-processing agreement governs that use.

In this DPA, "Customer" means the organization or person using the Service to collect survey data, and "Conejo Survey" means Market Action Research, Inc.

2. Roles

For survey response data and related respondent data that Customer collects through the Service, Customer acts as the controller or business and Conejo Survey acts as the processor or service provider. For account registration, billing, platform administration, and our own website analytics, Conejo Survey acts as an independent controller or business.

3. Subject Matter and Duration

The processing covered by this DPA consists of hosting surveys, collecting responses, storing uploaded assets, applying customer-configured response controls, generating dashboards and exports, and providing related support and security functions.

Processing continues for the duration of the Customer's use of the Service and, after deletion is requested, for the limited time reasonably needed to complete deletion, maintain backups, and satisfy legal, accounting, fraud-prevention, or security obligations.

4. Categories of Data and Data Subjects

  • •Data subjects: Customer account users, billing contacts, survey creators, and survey respondents.
  • •Categories of data: Identifiers, contact details, survey responses, comments, uploaded media, timestamps, and device/session identifiers used for response integrity or continuity.

5. Processing Instructions

Conejo Survey will process covered personal data only on Customer's documented instructions, as reflected in Customer's configuration of the Service, Customer's use of the product, and Customer's support requests, unless applicable law requires otherwise.

6. Confidentiality and Security

Conejo Survey will ensure that persons authorized to process covered personal data are subject to appropriate confidentiality obligations and will maintain reasonable administrative, technical, and organizational measures designed to protect the data against unauthorized access, disclosure, alteration, or destruction.

7. Subprocessors

Customer authorizes Conejo Survey to use subprocessors to operate the Service, subject to appropriate confidentiality and data-protection obligations. A current overview of key subprocessors is available on the Subprocessors page.

8. Assistance

Taking into account the nature of the processing and the functionality of the Service, Conejo Survey will provide commercially reasonable assistance to Customer in responding to requests relating to covered personal data that Conejo Survey controls or receives on Customer's behalf.

9. Return and Deletion

Customer can export data using the Service while the account is active. After account deletion is requested, Conejo Survey will delete covered personal data within the timelines described in the Terms and Privacy Policy, except to the extent retention is required by law, for billing records, or for legitimate security and dispute-resolution purposes.

10. International Use

Conejo Survey's self-serve offering is generally hosted and managed from the United States. If Customer needs region-specific transfer commitments, data-residency commitments, or negotiated enterprise privacy terms, Customer should contact us before using the Service for that processing.

11. Contact

For a countersigned copy request or questions about this DPA, email [email protected].