Your information deserves clarity, not fine print.

At Daesen privacy, technical security, and data governance are core foundational tenets of our automated survey engineering platform. We enforce strict data minimization, deterministic execution transparency, and least-privilege access controls.

This Privacy Policy governs your use of our web properties (www.daesen.com), SaaS cloud application, Monaco Survey Studio IDE, integration APIs, and associated services.

Regarding market research studies, questionnaire specifications, and respondent answers processed on the platform, the client acts as the Data Controller, and Daesen operates strictly as the Data Processor. Regarding user account provisioning, workspace administration, and billing, Daesen operates as the Data Controller.

Daesen allows users to sign in and register using Google Identity Services (GIS) and OpenID Connect (OIDC) protocols. When authenticating with your Google Account, we access only the following basic profile information:

We use this data solely to securely verify your identity, provision your tenant workspace, manage authenticated sessions, and deliver essential account service notifications.

Limited Use Disclosure: Daesen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We strictly guarantee that Daesen DOES NOT sell, rent, lease, or trade Google user data to third parties. We never share Google user data with data brokers, ad networks, or third-party marketing services, nor do we use it for targeted advertising or training public AI models.

You may revoke Daesen's access to your Google Account at any time through Google Account Security Settings at https://myaccount.google.com/permissions, or request complete account erasure by contacting privacy@daesen.com.

• ✓Full Name associated with your Google Account.
• ✓Primary Google Email Address.
• ✓Unique Google Account Identifier (sub parameter in the verified JWT idToken).
• ✓Profile Picture or Avatar URL (optional, for workspace UI presentation).

For enterprise organizations, Daesen provides federated single sign-on powered by Microsoft Entra ID (Azure Active Directory) via MSAL Browser Popup. Identity tokens issued by Microsoft are validated using asymmetric cryptographic signatures and utilized exclusively for enterprise workspace access and Role-Based Access Control (RBAC).

Subscription payment transactions for Starter, Professional, and Enterprise tiers (billed monthly or annually with a 20% discount) are securely processed through Stripe Inc.

• ✓Daesen adheres strictly to PCI-DSS SAQ A compliance via Stripe Checkout and Customer Portal integration.
• ✓At no point does Daesen store, process, or transmit raw credit card numbers, CVVs, or cardholder banking credentials on its own servers.
• ✓Stripe handles payment instrument data directly under banking-grade security and audited SOC 1/2 and PCI Level 1 certifications.

Daesen adopts a privacy-by-design approach across all public website and application telemetry:

• ✓Full Google Consent Mode v2 enforcement: all analytics and advertising storage parameters default strictly to denied until explicit visitor consent is registered in the cookie banner.
• ✓Performance telemetry tools (such as Microsoft Clarity, Project ID yt18o0pv07) operate on pseudonymized, aggregated session metrics to analyze UI responsiveness and drop-off rates, with strict exclusion of personal data (PII) and research content.
• ✓We do not deploy third-party advertising cookies, cross-site trackers, or behavioral profiling scripts.

We recognize that research questionnaires, logic matrices, and collected respondent records represent sensitive proprietary intelligence:

• ✓Exclusive Ownership: All Domain-Specific Language (.fdsl) scripts, uploaded Word (.docx) specifications, and survey response records belong 100% and exclusively to the client workspace.
• ✓Zero-AI Training Guarantee: Daesen contractually guarantees that customer survey content, logical routing, and respondent answers are NEVER utilized to train, fine-tune, or reinforce public or multi-tenant generative AI models.
• ✓The Daesen DSL compiler operates deterministically using mathematical rule-based parsing, delivering reproducible and fully auditable survey logic without black-box unpredictability.

Our platform is hosted on Amazon Web Services (AWS) infrastructure in the us-east-1 region, governed by enterprise-grade security safeguards:

• ✓Encryption at Rest: All database records in MongoDB Atlas and stored assets in Amazon S3 are protected using hardware-accelerated AES-256 bit encryption.
• ✓Encryption in Transit: All data transfers, client-server requests, and API webhooks are encrypted using TLS 1.3 with strict HTTPS transport security.
• ✓Logical Multi-Tenant Isolation: Tenant data is strictly partitioned by unique Workspace and Client IDs, preventing unauthorized cross-tenant data visibility.
• ✓Self-Hosted Fonts IP Privacy Certification: Web fonts are served directly from our local infrastructure, eliminating external runtime connections to Google Fonts servers and preventing respondent IP address leakage in full compliance with European GDPR standards.

Regardless of your geographic location, you retain comprehensive rights over your personal data:

• ✓Right of Access: Inquire whether personal data is processed and obtain full documentation.
• ✓Right to Rectification: Correct inaccurate or incomplete account details.
• ✓Right to Erasure (Right to Be Forgotten): Request complete deletion of your account and associated personal identifiers within 30 business days.
• ✓Right to Restriction & Objection: Object to specific data processing operations or restrict data scope.
• ✓Right to Data Portability: Export your questionnaire specifications and datasets in standard open formats (JSON, Word, SPSS, Excel).

To exercise your privacy rights, submit a data deletion request, or speak with our compliance team, please contact us:

• ✓Privacy Officer Email: privacy@daesen.com
• ✓Legal & Compliance Support: legal@daesen.com
• ✓Owner & Representative: Emmanuel Cortés Padilla
• ✓Geographic Headquarters: Puebla, Mexico
• ✓Response Commitment: Less than 72 business hours.