MANDA SurveyResearch for small business
Draft for legal review

Privacy Policy

What MANDA Survey collects, why, where it’s kept, and your choices. Last updated 11 Oct 2026.

This is a draft. It is written for review by a lawyer in each market we sell in (Australia and the United States) and is not in effect yet. Online checkout isn’t open, and nothing is charged until we’ve confirmed the details with you by email. Items marked like [TO FILL] still need real details.

The short version

  • We collect as little as we can. People who answer our surveys and polls aren’t asked for their name, and we never store their IP address.
  • If you contact us, we use your details only to reply and run your study. We don’t add you to a mailing list.
  • We don’t sell personal information. This site has no advertising or analytics cookies and no trackers.
  • Answers are stored on servers in Seoul, South Korea. Businesses that buy research get aggregated results only.
  • Our surveys and polls are for adults 18 and over.

1. Who we are

MANDA Survey is run by Mathew Madel, trading as MANDA OS, Sydney, Australia.

  • ABN (Australian Business Number): [TO FILL: ABN]
  • Street address: [TO FILL: street address]
  • Email: [TO FILL: contact email]

We’re responsible for the personal information described here. Because we’re based in Australia, we also follow the Australian Privacy Principles.

2. What we collect

If you contact us or buy research

The details you give us in the “Get started” form: your business name, your name and email, and, if you choose, your phone number, business website and rough budget. We also keep your country and time zone, the package you’re interested in, what you want to find out, and who you want to hear from.

When online checkout opens, payments will be handled by Stripe. We won’t see or store your full card number.

If you answer a survey or poll

  • Your answers.
  • How you reached it: a link, a QR code, an ad, or a poll on a business’s website, and any campaign labels in the link.
  • A scrambled code made from your connection and browser, used only to stop repeat answers. It can’t be turned back into who you are, and we never store your IP address.
  • A random ID saved in your browser for this site, also to stop repeat answers. Clearing this site’s data in your browser removes it.
  • Only if you choose to leave them: your first name, email or phone number, so we can contact you about that study. We keep them apart from your answers.

If you take part through a research panel, the panel may pass us an anonymous participant ID so it can credit you. We don’t ask panel members for their name, email address or ZIP+4 code.

Everyone who visits

  • No advertising or analytics cookies, no tracking pixels and no third-party trackers.
  • Our host, Cloudflare, processes your IP address and basic request details to deliver this site and protect it from attacks.
  • Most of our pages use fonts from Google Fonts, so your browser connects to Google, which receives your IP address. The poll widget doesn’t.

3. How we use it

  • To reply to you, set up and run your study, and send you the results.
  • To bill you, once checkout opens.
  • To count one answer per person and keep out fake or automated answers.
  • To keep the site and our records secure, and to meet our legal obligations.

We don’t use any of it for advertising, and we don’t sell it.

4. Who we share it with

  • The business that asked for a study gets aggregated results only: totals, charts and themes, and written comments with anything that identifies a person removed.
  • Contact details you choose to leave at the end of a survey are used only to contact you about that study. [TO CONFIRM: whether the business that asked for the study also receives them]
  • Companies that work for us, only as needed to provide our service: Supabase (our database, in Seoul, South Korea), Cloudflare (hosting), Google Fonts (fonts), Stripe (payments, once checkout opens), research panel companies (to find and pay participants) and our email provider.
  • Authorities, when the law requires it.

We don’t sell personal information, and we don’t share it for targeted (cross-context behavioural) advertising.

5. Our promise about de-identified data

When we hold data that has been de-identified, we take reasonable measures to make sure it can’t be linked to a person, we keep and use it only in de-identified form, and we won’t try to re-identify anyone. Anyone we share it with must agree to the same in writing.

6. Where it’s kept

Survey and poll answers, and the details you send us, are stored on Supabase servers in Seoul, South Korea. Cloudflare serves this site from its worldwide network. When checkout opens, Stripe will process payments. Wherever your information is handled, we protect it as this policy describes.

7. How long we keep it

  • Enquiries and client records: [TO FILL: retention period].
  • Survey and poll answers: [TO FILL: retention period].
  • Contact details people choose to leave: [TO FILL: retention period].

We delete or de-identify information when we no longer need it.

8. Sensitive information

We don’t collect sensitive information by default. That includes health conditions, disability, sexual orientation or gender identity, genetic or biometric data, precise location and government ID numbers. If a study ever needs a sensitive question, we’ll ask for your separate, clear consent first, you can skip it, and only aggregated results will be reported.

9. Adults only

Our surveys and polls are only for people aged 18 and over, and this site isn’t directed to children. We don’t knowingly collect information from anyone under 18. If we learn that we have, we delete it. If you think a child has answered, please email us.

10. Email, texts and calls

  • We email you only to reply to you and about your study.
  • If we ever send marketing email, it will say who it’s from, include our postal address, and have a working unsubscribe link. We act on unsubscribe requests within 5 business days.
  • We don’t send marketing texts or make automated marketing calls.

11. Your choices and rights

You can ask us to tell you what we hold about you, give you a copy, correct it, or delete it. Email [TO FILL: contact email]. We’ll reply within 30 days, and we may need to confirm who you are first. You can ask someone to make a request for you.

Depending on where you live, US state privacy laws, such as those of California, Colorado, Connecticut, Texas and Virginia, may give you these rights and others, including the right to opt out of the sale of personal information or its use for targeted advertising. We don’t sell personal information or use it for targeted advertising, and we honour these requests wherever you live. We won’t treat you differently for using your rights.

Your answers aren’t linked to your name, so we may not be able to find them for you. If you left contact details, we can always find and delete those.

If you’re not happy with how we’ve handled your information, please tell us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au), or to the privacy regulator where you live.

12. Security

This site is served only over encrypted connections (HTTPS). We limit who can see the data, and we keep contact details apart from answers. No system is perfectly secure, but we work to protect what you share with us.

13. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change affects how we use information we already hold, we’ll tell the people affected where we can.

14. Contact us

Email [TO FILL: contact email], or write to Mathew Madel, trading as MANDA OS, [TO FILL: street address], Sydney, Australia.