Privacy Policy
Last updated: January 25, 2026
Themistra ("we", "our", or "us") operates a web-based platform for creating, distributing, and analyzing surveys (the "Service"). This Privacy Policy explains how we collect, use, and protect personal data when you use Themistra.
By using the Service, you agree to the collection and use of information as described in this policy.
1. Who Themistra Is For
Themistra is designed for:
- Businesses
- Academic and research users
Users may create surveys and collect responses. Survey respondents do not need an account unless explicitly required by the survey creator.
2. Information We Collect
2.1 Account Information (Survey Creators)
When you create an account, we collect:
- Email address
- Name
- Organization name
This information is required to provide account access and manage your organization within the Service.
2.2 Survey Responses (Respondents)
The information collected from survey respondents depends on how each survey is configured by its creator. This may include:
- Email address (optional, only if enabled by the survey creator)
- Answers to survey questions, including free-text responses
Themistra does not collect:
- Uploaded images
- Uploaded audio files
2.3 Technical Information
We may automatically collect limited technical data, including:
- IP address
- Browser and device information
- Timestamps related to survey submission or account activity
This data is used for basic security, abuse prevention, and service reliability.
3. Cookies and Local Storage
Themistra uses:
- Essential cookies or local storage for authentication and session management
We do not use:
- Advertising cookies
- Tracking or marketing analytics tools
4. Authentication
We support the following authentication methods:
- Email and password
- Google Sign-In
Authentication is handled using Firebase Authentication.
5. How We Use Information
We use collected information to:
- Provide and operate the Service
- Authenticate users
- Deliver survey responses to survey creators
- Communicate essential service-related emails (e.g. email verification)
- Maintain security and prevent misuse
We do not sell personal data.
6. Emails
We send transactional emails only, including:
- Account verification emails
- Password reset emails
We do not send marketing or promotional emails.
7. Data Storage and Infrastructure
Data is stored and processed using:
- Firebase (authentication and database)
- Vercel (hosting and delivery)
These providers may process data on servers located outside your country of residence.
8. Data Retention
We retain personal data for as long as necessary to provide the Service.
At this stage:
- Users cannot self-delete their accounts from the interface
- To request account or data deletion, users may contact:support@themistra.com
We plan to improve data control features over time.
9. Survey Data Responsibility
Survey creators are responsible for:
- The questions they ask
- Whether personal data (such as email addresses) is collected
- How survey responses are used after collection
Themistra acts as a data processor for survey responses collected on behalf of survey creators.
10. International Use
Themistra is available globally. If you are located in the European Union or other regions with data protection laws, you have rights under applicable regulations, including the GDPR.
11. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
To exercise these rights, contact:support@themistra.com
12. Beta Status
Themistra is currently in beta. Features, infrastructure, and policies may evolve as the Service matures. We will update this Privacy Policy as needed and indicate changes by updating the "Last updated" date.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, contact us at: