Privacy policy clauses for SurveyMonkey
SurveyMonkey is an online survey and feedback collection platform operated by Momentive. Websites use it to gather user responses, opinions, and feedback through embedded or linked surveys. The platform collects survey responses and technical data to deliver the service.
Free scan · No signup · Results in 60 seconds
What data SurveyMonkey collects
Your privacy policy must disclose each of the following data types when you use SurveyMonkey.
When does SurveyMonkey trigger privacy obligations?
SurveyMonkey's embed script or API integration triggers compliance obligations the moment it begins collecting survey responses and IP addresses from your users.
Data flows that activate immediately:
- –Survey response collection (text, selections, ratings) flows to Momentive servers in the United States
- –IP addresses are logged server-side during submission
- –These flows occur before any user action beyond form submission
Regulatory thresholds:
- –GDPR (EU/EEA users): Applies if you collect any personal data from EU residents. Survey responses + IP addresses = personal data under GDPR Article 4(1). You must have a lawful basis (Article 6) — typically explicit consent via GDPR Article 7 — before the embed loads or collects responses.
