Privacy Policy

1. Who we are

"FeatureVote" is a feedback and roadmap tool operated by Universal Global Services Ltd (UGS), United Kingdom. For the personal data described here, UGS acts as the data controller (or processor where we process data on behalf of a customer workspace).

2. Data we process

• Account and workspace data — name, email address, login credentials (hashed), portal settings and plan information.
• Feedback content — ideas, comments, votes and any personal data you choose to include in submitted feedback.
• Technical data — IP address, browser type, timestamps and basic usage events needed to operate, secure and debug the service.
• Communications — messages you send to our support, billing or privacy mailboxes.

3. Legal bases

We process personal data to perform our contract with you (providing the service), to pursue legitimate interests (security, abuse prevention, product improvement), to comply with legal obligations, and — where required — based on your consent.

4. Cookies and local storage

We use essential cookies and browser storage to keep you signed in, prevent duplicate votes and remember interface preferences. We do not use advertising cookies. See our Cookie Policy for details.

5. Retention

Account data is kept while your workspace is active. Feedback content is kept until you or the workspace owner deletes it. Billing records are retained as long as required by tax and accounting law. Support emails are kept for up to 24 months.

6. Sharing and third parties

We share data only with processors that help us run the service, under data-processing agreements, and where legally required. We do not sell personal data. Processors we use:

• Stripe — payment processing and tax calculation (Stripe Tax) at checkout.
• Brevo — transactional email delivery (account verification, notifications).
• AhaSend — transactional email delivery.
• SMTP2GO — transactional email delivery.
• Resend — transactional email delivery.
• OpenRouter — AI model access for feedback theme grouping (feedback content only; no PII sent).
• PostgreSQL — primary database hosting for service data.

7. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.

8. Your rights

You can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Contact [email protected]. You may also lodge a complaint with your local supervisory authority (in the UK, the ICO).

9. Security

We use transport encryption (HTTPS), access controls and rate limiting. No system is perfectly secure; report suspected issues to [email protected].

10. Changes

We may update this policy. Material changes are announced on this page with a new date.

11. Contact

Privacy: [email protected] · Support: [email protected] · Billing: [email protected]