Privacy Policy

Overview

LivePolls (“we”, “us”) operates livepolls.com and the LivePolls embeddable widget. This policy describes what data we collect, why we collect it, and how we handle it.

What we collect

From poll creators: email address (for account access), poll questions and options, and any settings you configure (lead capture, expiration, etc.).

From poll voters: the option you select, a hashed identifier (cookie + hashed IP) used to prevent duplicate votes, the source channel (e.g. embed, x, direct), and standard HTTP request metadata (user agent, language, IP). If a poll has email capture enabled, voters who opt in provide their email address.

From visitors to livepolls.com: aggregate analytics via Vercel Analytics (page views, referrers, top pages). No cookies are set for analytics.

From API, MCP, and ChatGPT app usage: agent token records, OAuth access and refresh token records, requested scopes, request IDs, route or tool names, status codes, hashed IP address, hashed user agent, and timestamps. Token secrets are stored only as hashes, and raw bearer tokens are not intentionally logged.

How we use it

We use the data to provide the service: render polls, count votes, prevent duplicates, deliver real-time updates, and let creators view their results. Email addresses captured by creators are accessible only to those creators via their admin dashboard or CSV export. API and MCP audit logs help secure accounts, investigate abuse, enforce rate limits, and support webhook delivery debugging.

What we don't do

We don't sell personal data. We don't run third-party advertising on livepolls.com. We don't share voter data between creators. We don't use voter emails for our own marketing.

Subprocessors

We rely on the following service providers: Supabase (database + auth), Vercel (hosting), Stripe (billing for paid plans), and Vercel Analytics (traffic metrics).

The LivePolls embeddable widget

When the LivePolls widget is embedded on a third-party site (via our WordPress plugin or embed snippet), the widget loads from livepolls.com when a visitor views the page. Vote data and the information described above flow to livepolls.com. The host site (the site embedding the poll) does not receive voter identifiers from us.

Agent tokens, OAuth, and webhooks

Scoped agent tokens and ChatGPT OAuth tokens let connected tools act on behalf of the poll creator. We record limited audit metadata for those requests and may retain webhook delivery logs needed to diagnose delivery failures or abuse, including endpoint URL, event name, status, attempt timing, and response status. ChatGPT widget data is minimized and excludes secrets, private lead data, raw tokens, and webhook secrets. Webhook payloads are sent only to URLs configured by the account holder.

Your rights

You can request access to or deletion of any data we hold about you by emailing privacy@livepolls.com. We respond within 30 days.

Changes

We may update this policy. The “Last updated” date at the top reflects the latest revision. Material changes are announced via email to account holders.

Contact

Questions: privacy@livepolls.com.