do-survey
← Do Survey

Privacy Policy

Last updated: 20 August 2026

1. Who we are

This Privacy Policy explains how LLC "DOSURVEY" (ООО «DOSURVEY»), INN 313 232 147, registered in Tashkent, Republic of Uzbekistan on 5 August 2026 (certificate No. 7154961, registration number 3309716), legal address: Republic of Uzbekistan, Tashkent, Mirzo-Ulugbek district, "Elobod" mahalla, Chust street, 1 ("we", "us", "Operator"), collects, uses, stores and protects personal data of users of the Do Survey platform (the "Service") at do-survey.com and do-survey.online.

Contact email: support@do-survey.online

The Service is a multi-tenant SaaS platform for creating and conducting surveys. Users fall into two categories:

  • Account holders (Tenants) — natural or legal persons who register an account to create surveys and manage respondents;
  • Respondents — natural persons who submit answers to surveys published by Tenants.

2. Legal basis

Processing of personal data is carried out in accordance with the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 of 2 July 2019, the Law "On Protection of Consumers' Rights", and other applicable legislation of the Republic of Uzbekistan. Where the GDPR applies (EU/EEA and, where relevant, UK GDPR), processing is also subject to the GDPR. Grounds: performance of a contract, consent of the data subject, legitimate interests of the Operator, and compliance with legal obligations. A DPA is available on request.

3. Categories of personal data we collect

3.1. Account holders

  • Full name, email, phone (if provided);
  • Organization name, subdomain (for account addressing). Billing address and VAT/Tax ID for payments via Paddle are collected by Paddle on its side and are not transferred to us;
  • Payment data handled by our payment providers Paddle and YooMoney (see section 6);
  • Authentication data (hashed password, 2FA secrets, session tokens);
  • Usage data: actions in the account, IP address, device and browser information.

3.2. Respondents

  • Answers submitted through surveys, including any personal data a Tenant chooses to collect;
  • Technical metadata: IP address, timestamp, user-agent.

3.3. Automatically collected data

  • Server and application logs for security, fraud prevention and performance monitoring;
  • Cookies and similar technologies (see section 7).

4. Purposes of processing

  • Provision, maintenance and improvement of the Service;
  • Account registration, authentication and access control;
  • Processing payments and issuing invoices;
  • Communication with users regarding their account and support requests;
  • Detection and prevention of fraud, abuse and security incidents;
  • Compliance with legal obligations.

5. Roles and responsibilities

For personal data of Respondents, the Tenant is the controller and LLC "DOSURVEY" acts as a processor on behalf of the Tenant. The Tenant is responsible for obtaining respondents' consent and for lawful processing. The Operator processes respondent data only to deliver and secure the Service and to comply with legal obligations.

For personal data of Account holders, LLC "DOSURVEY" is the controller.

6. Payment processing

Subscription payments are processed through two payment providers depending on the buyer's country:

  • Paddle.com Limited — acts as Merchant of Record for international subscriptions (for customers outside the Russian Federation and the Republic of Belarus). The sale contract is concluded between the user and Paddle; Paddle collects, stores and processes payment card data and billing information in accordance with PCI-DSS and its own Privacy Policy, and is responsible for taxes and refunds under its own rules.
  • YooMoney (brand "YooKassa", operator — "YooMoney", NBCO LLC, OGRN 1127711000031, INN 7750005725, Bank of Russia license No. 3510-K) — payment service provider for customers in the Russian Federation and the Republic of Belarus. The sale contract is concluded between the user and LLC "DOSURVEY"; YooMoney acts as a technical intermediary for processing the payment. Card data is entered on the secure side of YooMoney and is not transferred to the Operator. Refunds are handled under the Operator's Refund Policy.

LLC "DOSURVEY" does not receive or store full card numbers. In both cases, only depersonalized information necessary to fulfil the order is transferred to the Operator (e.g. buyer email, payment/subscription identifier, operation status).

7. Cookies and analytics

We use cookies and similar technologies for authentication, session maintenance, security and storing language preferences. These cookies are strictly necessary for the Service to function and do not require consent under ePrivacy.

Analytics. On the Service landing pages (do-survey.com and do-survey.online) we use self-hosted Umami analytics. Umami operates without cookies: we do not set identifying cookies and do not use device fingerprints for tracking. Only aggregated, anonymized traffic metrics (page views, visits, referrer, country, device type) are collected, without identifying any individual. The IP address is processed only at request time to determine the country and is not stored long-term. Analytics data is not shared with third parties (Google, Yandex, etc.) and is not used for advertising.

The legal basis for processing analytics data is the Operator's legitimate interest (Art. 6(1)(f) GDPR, applicable law of Uzbekistan) in understanding how the Service is used and improving it. Analytics data is retained for up to 12 months. Because the analytics is cookieless, a cookie banner and consent are not required.

We do not sell or share personal data with third parties for cross-context advertising. To opt out of being counted in analytics, contact us using the details in section 14 — we will add your domain to the Umami exclusions.

8. Data retention

Personal data is kept for the duration of the user's account and afterwards for the period required by applicable law or to defend against legal claims. Survey responses are retained for the lifetime of the Tenant account unless deleted earlier. Upon account termination, data is deleted within a reasonable period except where retention is required by law.

9. Data regions and international transfers

The Service is offered in two operational regions. The region is chosen at sign-up (website and geo-zone) and is not moved automatically.

Operational data of a workspace (surveys, questions, responses, tenant users, files, logs, queues, backups) is stored only in that workspace's region and is not copied or replicated to the other region:

  • EU region (*.do-survey.com) — data centre in Sofia, Bulgaria (European Union), for customers from the EU/EEA, UK, US, Middle East and APAC;
  • CIS region (*.do-survey.online) — data centre in the Russian Federation, for customers from the CIS.

European personal data of respondents, employees and EU-region account owners that is part of operational workspace data is stored in the EU region and is not stored in the CIS region.

Account catalogue (organization name, owner name and email, plan, billing identifiers, leads) is kept in a single operator catalogue in the EU region (Sofia). It does not include survey responses or employee lists.

The Service may also transfer data to payment providers (Paddle; YooMoney in the Russian Federation) as described in section 6. Transfers are made only to recipients that provide an adequate level of protection and only for the purposes described in this Policy.

10. Your rights

  • Request access to your personal data and a copy thereof;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your personal data;
  • Withdraw consent at any time;
  • Request restriction or objection to processing;
  • Request data portability where technically feasible.

To exercise your rights, contact support@do-survey.online. We respond within 30 days.

11. Security

We apply technical and organizational measures: TLS encryption in transit, access controls, hashed authentication, audit logging, and regular security reviews. No method of transmission or storage is 100% secure.

12. Minors' data

The Service is not directed at persons under 18. We do not knowingly collect personal data from persons under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy. The "last updated" date above reflects the latest revision. Material changes will be notified through the Service or by email.

14. Contact

Operator: LLC "DOSURVEY" (ООО «DOSURVEY»)
INN: 313 232 147
Address: Republic of Uzbekistan, Tashkent, Mirzo-Ulugbek district, "Elobod" mahalla, Chust street, 1
Email: support@do-survey.online
Websites: https://do-survey.com, https://do-survey.online

Updated: August 20, 2026