privacy

Privacy Policy

Last updated: 10th of July 2026

1. Introduction

Feedbucket AB ("Feedbucket", "we", "our" or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and protect personal data when you:

  • Visit our website at feedbucket.app (the "Website"),
  • Use the Feedbucket application and feedback widget (the "Service"), or
  • Communicate with us in any other way.

It also explains your rights under the EU General Data Protection Regulation (GDPR) and how to exercise them. If you have any questions, contact us at hello@feedbucket.app.

‍

2. Who We Are

‍Feedbucket AB
Helsingborg, Sweden
Company number: SE559141029401 
Email: hello@feedbucket.app

Feedbucket acts in two different roles depending on the data:

  • Data Controller for personal data we collect for our own purposes: your Feedbucket account, billing, communication with us, and analytics and marketing for our own Website and Service.
  • Data Processor for personal data processed on behalf of our customers through the Service. When someone submits feedback through the Feedbucket widget, our customer (the holder of the Feedbucket account the widget belongs to) owns that data and is the Data Controller, and we process it on their behalf and according to their instructions. This processing is governed by our Data Processing Agreement (DPA).

‍

3. Personal Data We Collect

3.1 Data you provide to us

When you create and use a Feedbucket account, we collect:

  • Account data: your name, email address and optional profile photo. If you sign in with Google, we receive your name, email address and profile picture from Google.
  • Team and billing data: team name, subscription plan and billing details. Payments are handled by our payment processor Stripe; we do not store full card numbers.
  • Communications: messages you send us via email or the support chat in the app.

3.2 Data submitted through the feedback widget

When you submit feedback through the Feedbucket widget (as a client, tester or reviewer), we process on behalf of our customer:

  • Your name and email address (if you provide them), and whether you want email notifications about your feedback.
  • The feedback itself: title, description, comments and any file attachments.
  • Screenshots and screen recordings of the page you are giving feedback on.
  • Technical metadata that helps developers reproduce issues: page URL, browser and version, operating system, device type, screen and viewport size, and the location of your annotation on the page.
  • Browser console logs, if the customer has enabled this feature for their project.

If you have questions about how this data is used, or want it corrected or deleted, please contact the company that invited you to give feedback, since they are the Data Controller. We will assist them in fulfilling your request, and you can always reach us at hello@feedbucket.app.

3.3 Data collected automatically

When you visit our Website or use the Service, we automatically collect technical and usage data such as IP address, browser type and version, operating system, pages viewed, actions taken in the Service, and date and time of access. We use this data for analytics, to improve the Service, and for security and fraud prevention.

‍

4. How We Use Personal Data and Legal Bases

We only process personal data for specific purposes and with a legal basis under the GDPR:

  1. To provide the Service. Creating and managing your account, authenticating you, storing and displaying feedback, and sending service-related notifications. Legal basis: performance of our contract with you.
  2. To handle billing. Processing subscription payments, sending invoices and maintaining accounting records. Legal basis: performance of a contract and compliance with legal obligations (such as bookkeeping and tax law).
  3. To communicate with you. Responding to support requests and sending administrative messages about your account or changes to the Service. Legal basis: our legitimate interest in operating the Service and supporting our users.
  4. To improve the Service. Analysing how the Service is used so we can fix problems and improve features. Legal basis: our legitimate interest in developing and improving our product.
  5. To send marketing communications. Such as product news and onboarding emails. Legal basis: our legitimate interest in informing users about our Service, or your consent where required. Every marketing email contains an unsubscribe link, and you can opt out at any time.
  6. To keep the Service secure. Detecting and preventing fraud, abuse, spam and security incidents. Legal basis: our legitimate interest in protecting our systems and users.
  7. To comply with the law. Where we are legally required to process or disclose data, for example in response to a lawful request from authorities. Legal basis: compliance with legal obligations.

Where we rely on legitimate interest, we balance our interests against your rights and freedoms, and you can object to such processing at any time (see Section 10).

‍

5. Where Your Data Is Stored

Feedbucket is hosted in the European Union. Our application servers run in Frankfurt, Germany (DigitalOcean), and uploaded content such as screenshots, screen recordings and attachments is stored in Frankfurt, Germany (Amazon Web Services). Our product analytics data is processed through an EU-based endpoint.

‍

6. International Data Transfers

Personal data is primarily stored and processed within the European Economic Area (EEA), as described above.

Some of our service providers are based in the United States or may process limited data outside the EEA (for example payment processing, email delivery, analytics and error monitoring). For such transfers we rely on:

  • Standard Contractual Clauses (SCCs) issued by the European Commission, and/or
  • Adequacy decisions by the European Commission, including the EU-U.S. Data Privacy Framework (DPF) for providers certified under it.

All subprocessors that receive personal data outside the EEA are contractually required to provide a level of protection equivalent to that within the EEA.

‍

7. Who We Share Personal Data With

We never sell or rent personal data. We share personal data only with service providers that help us operate the Service, and only to the extent necessary. These providers are bound by data processing agreements in line with the GDPR.

Core subprocessors include:

  • Hosting and infrastructure: DigitalOcean and Amazon Web Services (both in Frankfurt, Germany, as described in Section 5).
  • Payment processing: Stripe, which handles all card and payment data.
  • Customer support: Crisp, the chat tool we use to answer your questions in the app.

A complete, up-to-date list of subprocessors is included in our Data Processing Agreement, available on request at hello@feedbucket.app.

Integrations you choose

Feedbucket lets customers connect their own tools, such as Jira, Trello, Slack, GitHub, Asana, Notion or custom webhooks, so that feedback is forwarded there automatically. When a customer enables an integration, feedback data (including reporter details, screenshots and technical metadata) is sent to that tool. These integrations are chosen and controlled by the customer, and the receiving tool's own privacy policy applies to the data once it arrives there.

‍

8. Cookies

We use cookies and similar technologies to:

  • Enable essential functionality, such as keeping you logged in and remembering your preferences.
  • Understand how our Website and Service are used, so we can improve them.
  • Measure the effectiveness of our marketing.

You can control and delete cookies through your browser settings. Blocking essential cookies may prevent parts of the Service from working, such as staying logged in.

‍

9. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy:

  • Account data is kept for as long as your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it (see below).
  • Billing records are kept for as long as required by Swedish accounting and tax law (currently seven years).
  • Feedback data processed on behalf of customers is kept for as long as the customer's account instructs us to, and is deleted when the customer deletes it or terminates their account.
  • Backups are kept for disaster recovery and are cycled out automatically; deleted data disappears from backups as part of that rotation.

We may retain limited data longer where necessary to comply with legal obligations, resolve disputes or prevent fraud and abuse.

‍

10. Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten") where we no longer have a valid reason to keep it.
  • Restrict how we process your data in certain circumstances.
  • Data portability: receive your data in a structured, machine-readable format.
  • Object to processing based on legitimate interest, including direct marketing.
  • Withdraw consent at any time where processing is based on consent, without affecting processing that happened before the withdrawal.

To exercise these rights, email us at hello@feedbucket.app. We will verify your identity and respond in accordance with applicable law. You also have the right to lodge a complaint with a supervisory authority, which in Sweden is the Swedish Authority for Privacy Protection (IMY).

If your personal data was submitted through the Feedbucket widget, please direct your request to the company that invited you to give feedback, as they own that data and are the Data Controller.

‍

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure, including encrypted connections (TLS), access controls, regular backups, and regular vulnerability testing. Access to personal data is limited to personnel who need it to operate the Service, and they are bound by confidentiality obligations.

No system can be guaranteed completely secure. If a data breach occurs that affects your personal data, we will notify the relevant supervisory authority and affected parties as required by law.

‍

12. Children's Privacy

Our Website and Service are not directed at children, and we do not knowingly collect personal data from anyone under 13 years of age. If you believe a child has provided us with personal data, contact us at hello@feedbucket.app and we will delete it.

‍

13. Third-Party Links

Our Website and Service may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their privacy policies.

‍

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. We will post the updated version on this page and update the "Last updated" date. If the changes are material, we will notify you by email or through the Service before they take effect.

‍

15. Contact

For any questions about this Privacy Policy or how we handle personal data, contact:

Feedbucket AB
‍Helsingborg, Sweden
Email: hello@feedbucket.app

‍