Privacy Policy

Last updated: October 25, 2025

This Privacy Policy explains how Ewa Popławska (“Company”, “we”, “us”, “our”) processes personal data when you visit convertquiz.app or use ConvertQuiz within your GoHighLevel (“GHL”) account. If you are an agency or sub-account using ConvertQuiz with your own end-customers, please pay special attention to Section 2 (Roles).

1. Scope

This Policy covers:

Visitors to convertquiz.app (the “Site”).

Users who install/use ConvertQuiz through GHL.

End-customer data processed via your GHL account when ConvertQuiz is enabled.

2. Roles & Responsibilities

For the Site and our customer/admin contacts, we are the data controller.

For end-customer data that you collect in your GHL account (e.g., quiz answers, emails, tags, UTM parameters), you (or your agency) are the data controller. In that context, we act as a processor/sub-processor providing the Service. You must present your own privacy notices and obtain any required consents from your end-customers.

A Data Processing Addendum (DPA) is available upon request: [email protected].

3. Data We Collect

3.1 Site visitors (controller context)

Identifiers & device data: IP address, device/browser type, pages visited, timestamps, cookies or similar technologies.

Contact data: name, email, and message content if you contact us.

Transactional data: purchase details (through GHL Marketplace), plan type, and billing status (we do not store full payment card data; payments are handled by GHL/its processors).

3.2 ConvertQuiz users & end-customer data (processor context)

Within your GHL account: quiz configuration, categories, redirect paths/URLs, tags, custom values/fields; quiz taker inputs such as selected answers, category scores, email address (if your opt-in forms collect it), UTM/source parameters you choose to capture; and page events necessary to deliver redirects/overlays/progress.

Telemetry/diagnostics: limited technical logs (e.g., load errors) to maintain compatibility and security.

4. Purposes & Legal Bases

4.1 Controller context (Site & customer admin data)

Provide the Site and respond to inquiries (contractual necessity or legitimate interests).

Process purchases and provide support (contractual necessity).

Improve and secure the Service (legitimate interests).

Marketing communications (consent where required; opt-out anytime).

4.2 Processor context (your end-customers)

Provide the Service to you: render custom quiz themes, process category scores, support redirects, and send data back to your GHL workflow/forms as configured by you (processing under your instructions and legal basis).

5. Cookies & Tracking

We may use strictly necessary and functional cookies on the Site. If we adopt analytics or marketing cookies, we will provide consent tools where required by law. Your GHL pages may have their own cookies under your control.

6. Sharing & International Transfers

Vendors/Sub-processors. We use reputable hosting, CDN, and error-logging providers to deliver the Service (details available on request).

Marketplace/Payments. Purchases and billing occur via GHL/LeadConnector and their payment processors.

Legal. We may disclose data to comply with law or protect rights/security.

Transfers. Where data is transferred internationally, we rely on appropriate safeguards (e.g., SCCs) as required.

7. Security

We employ reasonable technical and organizational measures appropriate to the risk (e.g., HTTPS, access controls). No system is perfectly secure; you are responsible for securing your GHL account and limiting access to your data.

8. Data Retention

Site/controller data: retained as long as necessary for the purposes described or as required by law.

Processor data (your end-customers): retained only as needed to provide the Service and per your instructions/contract. We generally do not persist end-customer data outside GHL beyond transient processing unless required for diagnostics and only for a limited period.

9. Your Rights

Depending on your location, you may have rights such as access, rectification, erasure, restriction, portability, and objection. For end-customer data in your GHL account, please contact the relevant controller (you/your agency). For Site/controller data we hold, contact email(at)convertquiz.app.

EU/UK: We process controller data under GDPR/UK GDPR bases noted above; you may lodge a complaint with your supervisory authority.

California: We do not “sell” personal information as defined by CCPA/CPRA. We act as a “service provider” for processor-context data.

10. Children

ConvertQuiz is not intended for children under 16 (or the age required by local law). We do not knowingly collect such data. If you believe we have, contact us to delete it.

11. Third-Party Links

The Site and documentation may link to third-party sites/policies (including GHL). We are not responsible for their practices.

12. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date indicates the latest revision. Material changes will be reflected on this page.

13. Contact

For privacy questions, rights requests, or a DPA:

Email: email(at)convertquiz.app

Controller: Ewa Poplawska