How we handle your survey data

A summary of how [LEGAL ENTITY NAME] handles the survey data your organisation uploads to Cauchy, and the results made from it. It forms part of the conditions of service.

1. Confidentiality

• Your survey data and results are confidential to your organisation.
• Only people signed in for your organisation can see its uploads, jobs and results. Nobody from another organisation can, and asking for another organisation's upload or job gets the same answer as asking for one that does not exist.
• Our operations staff can see your jobs, to review the results before release and to support you.
• Your report names your data as client-supplied and confidential, with no file name or other detail of it.
• Release e-mails, if your organisation turns them on, name the survey and line only and carry no results.

2. No reuse

We use your survey data only to run the jobs your organisation submits, to review their results and to support you. Without your organisation's written consent we do not:

• use it as a reference case, a case study, test data or a marketing example;
• add it to any shared data set, or use it to tune the service for anyone else;
• share it with, or show it to, any other client.

3. Where it is held

The service runs in one region: Sydney, Australia. Your survey data, job files and backups are held there. The providers that hold it for us are listed in the privacy policy.

4. How long it is kept

• Uploaded files are deleted two hours after the last change to the upload.
• A job's input line and results are deleted 7 days after the results are released to you. A job that could not be processed is deleted 7 days after it stopped. A job still waiting, being processed or being reviewed is kept until it is released or deleted.
• The area of interest you draw or upload is kept until you replace or clear it, or your organisation's account closes.
• Job files are also held in backups in the same region. When a job is deleted on request, its files leave the backups within about an hour. Uploaded files are not backed up.

5. Deletion on request

• Your organisation can have any job deleted at any time, before or after release, by writing to [SUPPORT ADDRESS]. Its files and record are removed from the live service; this cannot be undone.
• When your organisation stops using the service, we delete all its jobs on request, and its uploaded files are deleted within two hours.

6. If something goes wrong

If we find that your survey data has been seen by someone who should not have seen it, we will tell your organisation without delay. [LAWYER: notification period and contents]