Security and privacy

You trust us with your customers’ names, email addresses and opinions. This is how we look after them.

Hosted in the European Union

Your data is stored in a database in Ireland, and the application runs in Dublin.
The providers we use, where they are and what they see are listed openly on our sub-processors page.

Each workspace’s data is separated inside the database itself (row level security), not only in the application.
Automated tests check, on every change, that one workspace can never read another’s data.
Within a workspace, roles decide who can see, add or change what: owner, admin, analyst and viewer, enforced by the database.

All connections are encrypted, and data is encrypted at rest.
Passwords, API keys, invitation links and confirmation links are stored only as one way hashes.
The link in a feedback email is a long random code that contains no customer or company details.
Error reports are stripped of those links, IP addresses and cookies before they leave the application.

Every feedback email has an unsubscribe link, and an unsubscribe is always respected.
Cooldowns stop the same customer from being asked again too soon (30 days by default).
Bounced addresses and spam complaints stop further emails automatically.
People who receive alerts must confirm first, and can stop them with one click.

Owners and admins can download all of a workspace’s data at any time, as CSV files.
Deleting a customer removes all their data. If they had unsubscribed, only an unreadable fingerprint of their address is kept, so they are never emailed again.
Deleting a workspace removes everything in it after a 30 day grace period, during which an owner can still undo it.
Old operational data, such as expired invitations and request counters, is deleted automatically.

You remain the owner and controller of your customers’ data. We process it only on your instructions, under our data processing agreement, which is part of every subscription.
Read how we handle personal data in our privacy policy, and who helps us deliver the service on the sub-processors page.

Please tell us at hello@custilo.com before sharing it with anyone else. We will look into it promptly and keep you informed.