Privacy Policy

Who we are

VaultCX is a customer experience platform operated by the RapidSay team. For survey responses and contact records uploaded by a customer organisation, that organisation is the data controller and VaultCX is the data processor.

What data we process

Account data. Names, work email addresses and role assignments for users of the platform.

Contact data. Records uploaded by a customer organisation into its own isolated workspace, which may include names, email addresses, phone numbers and custom fields. Personally identifiable information in contact records is encrypted at rest.

Response data. Answers submitted by respondents, including open-text answers, files uploaded where a survey permits it, and derived analysis such as sentiment scores and extracted themes.

Operational data. Delivery events, audit log entries recording administrative actions, and application logs.

Why we process it

To deliver the service the customer organisation has contracted for: distributing surveys, collecting and analysing responses, and producing reports.

Sub-processors

Message delivery, AI analysis and hosting involve third-party providers. The current list of sub-processors, their function and their location must be enumerated here before publication.

Retention and deletion

Retention periods per data category, and the deletion process on contract termination, must be stated here before publication.

Data subject rights

Requests for access, correction, deletion or objection should be directed to the customer organisation acting as controller, which VaultCX supports in fulfilling.

Contact

Questions about this policy should be sent to the address on the contact page.