Privacy Policy
Last updated: 29 July 2026
This policy explains how Quizanta handles personal data, in accordance with the EU General Data Protection Regulation (GDPR). It covers two different situations: data about our own customers, and data about people who answer our customers’ quizzes.
1. Who is responsible
For account and billing data, the controller is Denis Malov, sole proprietor, Mlinska ulica 22, 2000 Maribor, Slovenia (tax number 14795914). Contact: support@quizanta.com.
For the answers and contact details people submit to a quiz, the controller is the Quizanta customer who created that quiz. We act as their processor and only handle those answers on their instructions. If you filled in a quiz and want your data corrected or deleted, contact the business that published it — or write to us and we will pass the request on.
2. Data we process as controller
Account data: your email address, your name (if provided) and an encrypted password, or your Google account identifier if you sign in with Google.
Content data: the quizzes, questions, images and settings you create.
Billing data: limited billing information handled by Stripe for paid plans. We never receive or store full card numbers.
Technical data: essential cookies and server logs needed to operate and secure the service.
3. Data we process as processor (your leads)
When a visitor completes one of your quizzes we store the answers, any contact details they submit, and basic delivery data such as the time and the funnel step reached, so you can see and export your leads.
We use this data only to provide the service to you: we do not sell it, do not use it for our own marketing, and do not enrich it with outside sources. It is deleted when you delete the lead, the quiz or your account.
4. Purposes and legal bases
To provide the service and manage your account — performance of a contract (Art. 6(1)(b) GDPR).
To secure, maintain and improve the service and to produce aggregate statistics — our legitimate interests (Art. 6(1)(f) GDPR).
To process payments and meet accounting and tax obligations — contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
Optional marketing pixels on published funnels — only with the visitor’s consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.
5. Cookies and embedded funnels
We use strictly necessary cookies to run the site and keep you signed in. Details are in our Cookie Policy.
When a funnel is embedded in your own website, our consent banner does not appear inside the embed — consent for that page is managed by the host site. As the operator of that site you are responsible for obtaining it.
6. Processors and sharing
We share data only with providers that process it on our behalf. Each one is named at /subprocessors, with its country and whether it can access lead data.
Lead data stays in the EU by default. The one exception is opt-in: notification emails can include the lead's name, phone and answers if you switch that on in Settings, and our email provider keeps logs outside the EU. Left off — as it is by default — a notification only tells you a lead arrived.
We do not sell personal data. We may disclose data where required by law or to protect our legal rights.
7. International transfers
Data is hosted within the European Union (Germany). Where a processor transfers data outside the EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses.
8. Retention
Account and content data are kept while your account is active. When you delete your account we delete or anonymise your personal data within 30 days, except records we must keep for legal reasons (such as invoices).
Leads are deleted automatically once the retention period set on the workspace elapses — 24 months by default, adjustable to 6, 12, 24 or 36 months, or switched off deliberately if you have a lawful reason to keep them longer. Deletion covers the uploaded files attached to a lead, not only the database record.
You can also delete individual leads, a whole quiz, or your account at any time, and export everything as CSV before you do.
9. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, and the right to data portability. Where processing is based on consent, you can withdraw it at any time.
You can export your data and delete your account from your account settings. To exercise your rights, contact support@quizanta.com.
10. Complaints
If you believe your data is processed unlawfully, you may lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si) or with your local supervisory authority.
11. Security
We use appropriate technical and organisational measures — including encryption in transit, hashed passwords, access controls and rate limiting — to protect data. No method of transmission or storage is completely secure.
12. Children
Quizanta is not intended for children under 16, and we do not knowingly collect their data.
13. Changes and contact
We may update this policy and will post the new version with an updated date; for material changes we will provide notice where appropriate.
Controller: Denis Malov, sole proprietor, Mlinska ulica 22, 2000 Maribor, Slovenia. Email: support@quizanta.com.